Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
File:                     3136382e37372e302e302f31362d3234203d3e2033353531.roa (raw, json)
Hash identifier:          76jA9NHhRzujw3bWWudLs4/SIp46AFeAXuo75O3cGsY=
Subject key identifier:   7C:1B:02:CD:4F:F4:ED:E4:6F:08:F6:21:1C:8D:49:26:CD:19:FF:FE
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       19D131F111FEDC4011AD15F3B18C63C4870AEF69
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
Signing time:             Tue 05 Mar 2024 18:00:02 +0000
ROA not before:           Tue 05 Mar 2024 17:55:02 +0000
ROA not after:            Tue 04 Mar 2025 18:00:02 +0000
asID:                     3551
IP address blocks:        168.77.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:d1:31:f1:11:fe:dc:40:11:ad:15:f3:b1:8c:63:c4:87:0a:ef:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Mar  5 17:55:02 2024 GMT
            Not After : Mar  4 18:00:02 2025 GMT
        Subject: CN=7C1B02CD4FF4EDE46F08F6211C8D4926CD19FFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6c:64:c5:dd:60:90:6a:18:26:6b:3a:92:fe:
                    86:f7:c9:e3:86:c8:e8:63:80:9f:61:93:c6:ee:af:
                    2b:0e:1f:f5:31:86:8d:4a:fb:d4:46:3e:8f:23:96:
                    49:57:9b:95:ed:76:cb:41:3a:0b:44:c9:4d:57:74:
                    b3:30:9e:e6:fc:2b:20:63:f6:b6:00:00:6b:70:d7:
                    0c:0a:23:a5:cf:b1:1c:91:3d:1f:8f:02:db:10:cf:
                    92:65:27:89:ee:98:ad:36:65:0e:e1:5e:01:f7:bb:
                    63:15:5f:a7:b8:0d:62:5b:dc:75:7c:ba:a9:b7:8e:
                    c8:69:92:44:77:2a:8a:c0:89:39:95:8c:51:bf:31:
                    31:ce:41:ec:3d:a6:4a:7c:08:42:80:08:59:a8:f1:
                    e6:da:4f:19:c5:73:a1:33:05:af:a8:ec:85:a8:f6:
                    8d:7b:08:a8:3a:a9:10:b6:f3:38:b4:a6:6e:71:dc:
                    bc:dd:6a:a7:c1:dc:89:a3:0f:3e:81:85:54:1b:a7:
                    c8:56:7e:44:d0:3e:70:05:d1:b9:38:f9:04:11:32:
                    7e:05:87:9a:75:0b:84:2d:00:e5:db:31:11:40:00:
                    30:9d:8d:f3:d0:97:b6:50:e1:45:81:3d:a9:0c:28:
                    7c:18:b4:05:63:d8:38:8f:f7:ed:00:1a:aa:1a:8c:
                    df:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:02:CD:4F:F4:ED:E4:6F:08:F6:21:1C:8D:49:26:CD:19:FF:FE
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:f6:56:dc:84:64:85:c1:95:c1:76:e1:2a:37:d7:13:93:1a:
         3b:ff:a4:77:ef:8e:7b:41:ab:e7:e8:fc:05:fd:76:af:d2:94:
         d3:6e:9d:c0:cd:14:2f:11:4d:5c:ed:ab:d5:85:2a:12:e3:ef:
         b3:0b:2e:53:37:60:5a:e7:cf:d6:6f:5b:53:47:52:2d:a1:bc:
         31:bf:94:53:b6:13:57:6d:3b:7b:c7:37:59:77:ff:3c:cc:aa:
         b9:16:88:0a:19:53:fc:b2:ac:df:29:03:6c:60:87:46:85:98:
         19:2b:d9:2f:83:ef:72:7c:60:da:b6:ec:84:43:53:9e:a6:bf:
         da:8b:84:86:21:6e:9a:af:6e:55:af:cd:ce:da:f1:ce:41:88:
         e9:7a:45:a5:46:ec:4b:c3:74:1f:1f:50:c8:11:f8:8a:6c:22:
         86:d8:7f:a1:f7:d4:6d:d9:df:3f:ee:67:2b:73:c2:a1:df:a4:
         0a:3e:e4:1f:5c:09:65:48:a7:ab:9f:f2:28:98:2b:a1:fd:6a:
         9e:4e:af:7a:d0:d0:9d:44:20:25:08:ca:56:83:81:24:4f:59:
         ce:12:f2:43:97:31:0a:d6:f3:1c:ae:c9:76:20:e7:66:d0:e9:
         75:d4:35:6a:fa:4f:b3:f4:c1:f0:0e:e1:e3:91:2d:69:18:b8:
         00:38:71:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 14:04:44 2024 by rpki-client on console-fra.rpki-client.org