Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3136382e3232382e3134342e302f32322d3234203d3e20323633383334.roa
File:                     3136382e3232382e3134342e302f32322d3234203d3e20323633383334.roa (raw, json)
Hash identifier:          a2u3i+6nzJHVllPUYE2I9x0uIHtScKJ74VEQGuMqthU=
Subject key identifier:   CD:3D:54:85:D9:5C:76:D8:27:D5:45:A3:18:2A:AB:88:8F:35:D3:49
Certificate issuer:       /CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
Certificate serial:       53F64FF367C8FBA996C10AC2245966CD14304B68
Authority key identifier: E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3136382e3232382e3134342e302f32322d3234203d3e20323633383334.roa
Signing time:             Tue 05 Mar 2024 17:56:47 +0000
ROA not before:           Tue 05 Mar 2024 17:51:47 +0000
ROA not after:            Tue 04 Mar 2025 17:56:47 +0000
asID:                     263834
IP address blocks:        168.228.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f6:4f:f3:67:c8:fb:a9:96:c1:0a:c2:24:59:66:cd:14:30:4b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E699A4077A87114A3532FD22E5C0F78AD30312E4
        Validity
            Not Before: Mar  5 17:51:47 2024 GMT
            Not After : Mar  4 17:56:47 2025 GMT
        Subject: CN=CD3D5485D95C76D827D545A3182AAB888F35D349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e5:d1:14:ef:10:bf:04:84:5b:dd:31:68:e6:
                    ec:03:e5:b8:ee:0e:8c:ae:61:e2:a7:e3:92:9c:34:
                    f3:8c:0c:df:f0:79:11:00:77:0d:c9:47:d6:47:ad:
                    bd:f5:33:3d:d9:b3:15:7f:fb:19:b0:f9:37:70:dc:
                    30:05:80:5f:c2:3c:2f:34:fd:3c:c4:d1:c5:eb:f3:
                    42:e8:e2:3b:ad:a4:dd:b1:db:4b:fe:1c:a9:c3:ae:
                    d7:92:41:1a:14:95:fa:e5:e4:48:d0:24:d7:ce:73:
                    cd:17:7a:a1:ad:13:28:40:88:6f:1d:6a:dc:10:e8:
                    c5:df:60:4d:fc:93:ee:34:53:75:40:a4:ab:de:99:
                    a0:4c:4c:06:95:fd:be:b6:07:34:47:34:dd:3c:91:
                    55:f5:90:f6:3d:fb:a5:71:f6:1d:2d:f0:c7:f6:20:
                    67:83:6e:f3:b5:cc:57:ca:c7:ca:e4:54:d8:fa:ab:
                    5e:1f:a1:f7:43:e9:31:70:69:21:f7:2f:eb:a4:16:
                    90:81:b8:42:d0:d4:8d:c7:0f:68:b7:f6:eb:6e:53:
                    59:ea:a1:18:91:b4:a4:98:48:41:8f:4f:f2:75:38:
                    2a:09:c2:1e:9c:96:9a:57:64:12:53:61:64:b6:89:
                    65:fb:88:41:4a:9b:ac:1c:db:d2:ee:80:01:39:e4:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3D:54:85:D9:5C:76:D8:27:D5:45:A3:18:2A:AB:88:8F:35:D3:49
            X509v3 Authority Key Identifier:
                keyid:E6:99:A4:07:7A:87:11:4A:35:32:FD:22:E5:C0:F7:8A:D3:03:12:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E699A4077A87114A3532FD22E5C0F78AD30312E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/460853EAAA676F37C89BE8840FD41F02F5FE23FC8E3B18B8635BC0582814F77B/0/3136382e3232382e3134342e302f32322d3234203d3e20323633383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:b7:d5:64:c5:ce:8d:5e:46:24:50:13:dc:3b:66:9a:53:49:
         6b:c9:4b:0d:9a:55:0e:44:5c:e1:a9:e3:eb:23:c9:dd:c4:79:
         73:f6:d6:6f:ae:a7:5f:bb:7d:f5:69:68:c5:66:3b:9d:bb:73:
         88:4c:61:9d:94:b1:6f:d0:63:c6:1a:70:01:46:3a:59:fe:f2:
         82:9b:17:5d:bb:24:3d:85:95:01:68:7e:88:a7:2d:1a:ae:4e:
         64:d8:91:6d:d2:c7:26:13:7c:c4:56:09:b6:bb:12:5a:6d:46:
         d5:fb:cd:a0:49:db:83:43:2d:22:de:cf:90:d2:1d:4c:f6:f1:
         11:8e:a3:9a:c3:ae:7f:0e:0d:50:8e:24:38:c4:25:46:9c:f8:
         e6:fd:25:bd:84:45:c5:da:04:b7:e3:c7:e8:9f:d7:86:59:f2:
         d0:b5:b2:e4:99:f3:d4:05:c8:81:f0:b6:f3:b4:1e:7e:0e:16:
         56:18:bd:9a:7c:bf:e2:05:d0:84:96:f6:66:4c:01:59:b6:60:
         f2:cf:b8:14:20:fd:5a:c6:f4:60:c6:e3:3d:7d:5a:5a:32:06:
         a6:e9:f9:c9:d6:ee:ed:4e:e0:ed:ef:4e:d0:88:17:38:5f:d4:
         4a:19:5e:6c:de:eb:38:53:28:16:42:56:9f:7f:c1:c5:5e:75:
         2e:47:f6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org