Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa
File:                     3136382e37372e3230392e302f32342d3234203d3e203131353536.roa (raw, json)
Hash identifier:          NixoTahkjOu7DbxJ22dNt7A2nMCuBYh2I1c0q4DrXyU=
Subject key identifier:   F6:EB:F0:9E:0B:41:BD:43:3D:49:75:1D:E0:70:C6:D5:0E:72:32:4D
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       13C475EE5BD89D9014FF79A8F22740A466A4344C
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa
Signing time:             Tue 05 Mar 2024 18:00:01 +0000
ROA not before:           Tue 05 Mar 2024 17:55:01 +0000
ROA not after:            Tue 04 Mar 2025 18:00:01 +0000
asID:                     11556
IP address blocks:        168.77.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c4:75:ee:5b:d8:9d:90:14:ff:79:a8:f2:27:40:a4:66:a4:34:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Mar  5 17:55:01 2024 GMT
            Not After : Mar  4 18:00:01 2025 GMT
        Subject: CN=F6EBF09E0B41BD433D49751DE070C6D50E72324D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:b6:06:07:11:c0:6b:35:03:ff:9a:27:4e:
                    c5:fa:fb:ea:16:00:5b:3c:77:31:69:72:39:58:44:
                    d9:11:c4:53:6c:38:a7:ba:67:cc:67:33:d8:64:27:
                    f1:be:15:fc:df:c8:a3:c0:29:c1:8a:3e:82:69:bc:
                    f7:e2:d2:c4:8e:92:5a:43:04:51:b1:f4:cf:96:7d:
                    eb:e3:de:75:13:49:7d:94:6d:48:3c:74:d2:d1:c0:
                    99:cd:65:38:89:e8:e8:07:f4:bc:e3:c8:d3:fd:9b:
                    2a:0a:9c:79:d5:d4:39:f3:d9:d0:4d:be:ca:43:da:
                    a8:ad:21:13:69:08:04:19:74:53:c4:71:01:1a:29:
                    20:0b:a6:23:fb:83:95:f2:40:36:ff:52:bf:00:7e:
                    96:03:de:c1:28:b2:7a:a9:1d:21:d8:b8:6d:52:b2:
                    8a:a6:c1:94:13:5b:d4:2d:a5:b5:d6:42:9d:46:59:
                    6e:7c:eb:36:ff:41:d9:4d:b1:12:f0:c9:00:6d:43:
                    10:68:54:67:00:7c:b7:7c:10:ad:2f:43:72:54:e4:
                    73:52:37:74:66:83:dc:10:02:9e:c9:26:0d:69:fc:
                    f9:fd:18:96:4b:9a:2d:a3:64:03:32:5d:dd:f6:01:
                    15:c0:df:14:49:d4:4b:ba:b1:75:bc:28:85:f1:49:
                    70:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:EB:F0:9E:0B:41:BD:43:3D:49:75:1D:E0:70:C6:D5:0E:72:32:4D
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3230392e302f32342d3234203d3e203131353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:f8:17:f0:a7:65:f6:f5:df:bf:3b:6a:b3:86:42:ec:b0:d9:
         ac:e9:6b:c3:f7:f7:ab:00:0b:83:93:19:22:ab:ef:3b:b6:57:
         9e:80:9d:43:47:5f:fb:b6:32:1f:95:16:ac:8e:f9:e1:0b:7c:
         b5:ba:aa:30:8a:23:31:57:1f:ab:c0:25:be:89:96:83:4e:13:
         ab:2a:d7:2c:5d:0a:2a:df:42:0d:a6:08:b8:83:6a:72:30:8c:
         e0:0c:af:20:f5:f2:4a:d0:07:b4:e8:cc:ef:ad:36:f7:a0:ed:
         c1:8d:8d:2b:9d:10:2b:02:60:de:82:69:eb:22:6b:c6:c1:66:
         0f:83:e7:92:9b:45:f4:98:23:00:9c:c3:6a:b1:08:2a:c5:0b:
         f0:c1:5d:2a:af:b3:e2:66:32:5f:bb:85:86:45:ad:15:c3:2e:
         3f:0d:64:88:d5:c8:b1:fd:08:53:1d:b7:5c:e2:15:66:e5:e4:
         8c:fb:da:14:9b:28:34:98:5b:03:6b:f0:cd:e0:04:e0:1f:61:
         74:17:b8:fe:aa:aa:0a:8f:88:6b:48:47:25:c9:53:d9:25:31:
         46:a2:02:cd:bd:cf:71:3d:b6:89:2e:23:37:5c:aa:85:7a:38:
         03:76:08:8e:43:be:57:05:1a:bb:dd:b0:1b:cc:00:41:48:a2:
         e7:17:92:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org