Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/3136342e3136332e34382e302f32322d3234203d3e20323731393233.roa
File:                     3136342e3136332e34382e302f32322d3234203d3e20323731393233.roa (raw, json)
Hash identifier:          VY6q9Kf01IIEmpEJQePXb+Z4CmFdoSs8tegsTp2DK8I=
Subject key identifier:   37:7B:8B:6C:56:EB:04:BB:A0:B4:23:30:A9:32:DA:AB:01:8A:A0:0D
Certificate issuer:       /CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
Certificate serial:       03E497682B4DADBBC6B341F346339519A280507C
Authority key identifier: F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/3136342e3136332e34382e302f32322d3234203d3e20323731393233.roa
Signing time:             Tue 05 Mar 2024 17:46:22 +0000
ROA not before:           Tue 05 Mar 2024 17:41:22 +0000
ROA not after:            Tue 04 Mar 2025 17:46:22 +0000
asID:                     271923
IP address blocks:        164.163.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e4:97:68:2b:4d:ad:bb:c6:b3:41:f3:46:33:95:19:a2:80:50:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8724A48C62962BC0200BE832FFF52F4762F82D6
        Validity
            Not Before: Mar  5 17:41:22 2024 GMT
            Not After : Mar  4 17:46:22 2025 GMT
        Subject: CN=377B8B6C56EB04BBA0B42330A932DAAB018AA00D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:60:36:c8:20:b4:2d:b6:af:69:75:40:4d:c8:
                    ad:f2:4a:37:22:74:2b:29:96:72:d4:1f:47:29:dc:
                    e1:d8:ae:7a:fc:ce:d7:8c:0c:9a:e4:3d:b8:b2:04:
                    25:7d:1f:8a:c9:80:73:55:f3:f7:08:24:69:74:3a:
                    db:db:ce:d5:0c:07:ad:50:12:17:7b:91:37:09:e8:
                    2b:33:2f:4f:4c:63:e1:ee:7c:79:be:ec:d5:12:f2:
                    e9:10:74:58:c8:ec:76:64:d5:6c:91:0b:25:d3:49:
                    10:70:6d:87:cb:b3:87:e0:4b:56:80:7c:d4:27:1c:
                    3b:61:46:6d:85:e6:45:42:a3:66:7a:67:d7:2e:65:
                    cc:7f:5e:87:75:83:27:4d:f7:54:9a:6e:64:88:3a:
                    ef:dd:6e:34:16:23:0c:c6:6c:14:a6:05:61:11:72:
                    77:a5:e7:a5:c6:5a:0f:fc:e5:e7:df:e2:df:81:eb:
                    8c:bc:05:22:47:d5:56:e5:f1:a4:8d:7e:8b:a6:6f:
                    2b:4f:0f:ad:a5:96:0e:7d:57:1a:b4:54:ef:b9:80:
                    78:0b:65:4b:8d:3a:f0:57:b6:f5:a6:f1:e6:bd:35:
                    0c:e6:f0:a6:a1:be:b1:d5:13:61:b6:1e:fe:bf:f0:
                    f4:2e:80:13:03:ca:5f:ce:ea:4c:36:f4:8f:1f:25:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:8B:6C:56:EB:04:BB:A0:B4:23:30:A9:32:DA:AB:01:8A:A0:0D
            X509v3 Authority Key Identifier:
                keyid:F8:72:4A:48:C6:29:62:BC:02:00:BE:83:2F:FF:52:F4:76:2F:82:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F8724A48C62962BC0200BE832FFF52F4762F82D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2FCDD3F920DA5F25C642EC95B696AFDDB2A408023443BE210EEF6FD1219DD7/0/3136342e3136332e34382e302f32322d3234203d3e20323731393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:70:d5:ce:1c:71:08:71:fd:02:c7:f5:66:d7:85:bb:0d:1d:
         f6:3f:14:94:f8:ab:73:12:ca:d2:df:9a:ad:ab:22:85:35:39:
         48:8e:60:06:aa:9c:6b:8e:b0:9b:65:ab:8f:9a:7f:77:4a:5e:
         83:cd:f3:b2:52:f5:36:da:4a:dd:7f:a7:4f:c7:bd:51:15:b2:
         0f:69:18:ba:b9:72:c5:04:d2:e9:3a:5e:94:fd:fc:22:e9:1c:
         b6:9e:7d:c0:7a:51:23:82:b8:b5:7d:10:f4:41:c8:b8:ed:8d:
         a3:79:f7:92:d8:9e:90:cf:f2:33:78:63:bf:d7:3a:90:16:53:
         db:be:5d:6d:0b:d9:60:cd:01:c5:bd:7f:11:41:0b:57:5d:a9:
         59:a7:c5:31:d6:f4:ce:22:a6:b3:3b:a3:84:07:8b:79:b3:91:
         eb:61:b5:1c:c5:f0:80:c0:50:b0:81:3d:fb:4e:19:4d:bc:e8:
         66:4c:36:4b:55:44:1c:81:80:2e:e8:d1:2e:03:3c:e3:e6:a1:
         0f:24:1d:0c:43:02:4a:61:ff:97:58:ed:21:ab:95:f0:7b:68:
         48:b3:c6:52:f8:d6:97:46:99:17:7e:b8:de:bf:37:dd:1e:e9:
         c7:73:26:83:45:c4:65:66:ed:84:38:13:43:6a:ff:d4:dd:e9:
         5f:81:cf:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org