Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa
File:                     3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          +N3plBuVg/A6BYFDWFmcGbufSJvnq7v5AUr3iohNRyA=
Subject key identifier:   8A:3B:68:D3:F0:2D:0C:26:59:6F:2C:AF:19:9D:41:37:75:14:66:20
Certificate issuer:       /CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
Certificate serial:       069E88B368F3DD479B009DD0680BCEB7FF923AD7
Authority key identifier: 13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 17:46:44 +0000
ROA not before:           Tue 05 Mar 2024 17:41:44 +0000
ROA not after:            Tue 04 Mar 2025 17:46:44 +0000
asID:                     264830
IP address blocks:        168.227.204.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9e:88:b3:68:f3:dd:47:9b:00:9d:d0:68:0b:ce:b7:ff:92:3a:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1348AF2A0BC4B75B217B2CDA6041046B9818FA85
        Validity
            Not Before: Mar  5 17:41:44 2024 GMT
            Not After : Mar  4 17:46:44 2025 GMT
        Subject: CN=8A3B68D3F02D0C26596F2CAF199D413775146620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:56:8e:ff:07:07:15:ab:06:fa:a1:34:d6:
                    69:46:42:18:ec:a0:97:84:c2:33:d4:8c:e6:52:75:
                    42:23:64:40:70:62:5d:35:b3:62:7d:c4:b8:8d:56:
                    56:72:0f:aa:91:d7:36:6d:04:af:1b:f7:88:84:bc:
                    69:55:44:7e:d2:d4:18:6a:bf:c2:96:05:ac:1a:69:
                    7a:cd:2c:e5:de:84:1b:7b:27:75:89:67:80:6a:e3:
                    6b:9a:8d:86:2b:4e:fc:1c:0d:34:45:d7:09:b5:30:
                    3d:39:33:5f:3b:a9:da:f8:36:3c:26:68:91:c5:51:
                    67:45:5e:7f:52:30:5c:a6:6f:2c:7a:53:04:fe:1f:
                    9f:f1:6d:e9:23:2d:7b:c8:45:96:d2:51:ac:7c:25:
                    5f:a2:04:97:ff:a7:97:22:b8:bb:b8:00:0f:33:46:
                    b5:c5:a9:ea:69:81:9d:d8:39:b9:16:27:0a:01:bd:
                    73:69:54:05:3d:2e:07:da:d8:4d:ef:90:b8:c6:6c:
                    65:37:b3:58:cf:f9:6c:1a:8a:08:36:92:ed:4b:39:
                    52:9d:f8:2d:d3:8e:8c:a2:66:4b:66:fe:10:d8:fa:
                    62:f9:3b:39:86:97:ba:94:b3:ef:bc:05:04:9d:92:
                    f9:8e:44:bb:d4:54:1e:72:be:ee:5e:ee:34:82:84:
                    70:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3B:68:D3:F0:2D:0C:26:59:6F:2C:AF:19:9D:41:37:75:14:66:20
            X509v3 Authority Key Identifier:
                keyid:13:48:AF:2A:0B:C4:B7:5B:21:7B:2C:DA:60:41:04:6B:98:18:FA:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1348AF2A0BC4B75B217B2CDA6041046B9818FA85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/467C65C09C24020154AD4A1D2F9284450A66D9C01DB93037BB3AA11728BA0E4A/0/3136382e3232372e3230342e302f32332d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:5a:74:bf:dc:4c:58:b2:e1:7f:25:cf:9e:6b:9e:97:4e:de:
         80:29:d8:ec:d0:94:28:97:c1:36:17:6e:e8:c8:a1:68:b0:bb:
         01:fa:97:90:f4:8c:c1:f4:be:a7:fc:ca:98:37:58:f2:04:00:
         6b:4f:f0:ad:4b:a7:77:1f:af:b2:05:52:22:0f:0b:aa:bd:09:
         1c:60:d4:b0:2b:87:bd:9a:86:7a:60:bc:c6:29:d5:9f:8e:76:
         b9:e1:c7:33:d5:49:a2:84:71:d7:e9:33:44:4e:ef:03:ba:65:
         82:6f:c5:00:e7:5b:5d:35:06:b5:5b:d9:c5:7d:87:d5:c1:2f:
         b6:ee:ef:00:e4:cd:c3:9b:26:ad:7c:d6:60:b7:d8:cd:4a:c0:
         0f:34:63:35:49:3f:e8:89:59:db:eb:5c:00:3e:19:ad:b9:dd:
         35:92:f8:24:ce:bd:4f:25:66:48:1f:a5:b1:1d:27:e4:7d:f6:
         4b:91:87:f4:4c:f0:a5:2f:e2:a2:53:ca:52:a9:05:e9:91:de:
         f7:58:3e:94:ea:33:ca:b5:4a:7c:1f:a2:e0:39:b5:fb:cf:8e:
         ed:1c:81:77:2f:f4:b1:64:6e:a4:a2:45:d0:81:62:49:77:cd:
         97:b2:2f:f8:fc:19:c0:09:52:75:d4:a4:3e:1b:ef:4b:a4:2a:
         bd:d4:fe:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org