Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa
File:                     3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa (raw, json)
Hash identifier:          SXG6VKXr6FdQTFsPEsjrpN+mGwv4g8ByinldDK/Z1Hw=
Subject key identifier:   41:AE:73:6D:42:CF:2D:2C:B0:91:71:C5:72:71:4A:ED:E5:80:3C:6D
Certificate issuer:       /CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
Certificate serial:       503718789155AADAB7453D1140E5FB7B8232B0C3
Authority key identifier: 90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa
Signing time:             Tue 05 Mar 2024 18:03:18 +0000
ROA not before:           Tue 05 Mar 2024 17:58:18 +0000
ROA not after:            Tue 04 Mar 2025 18:03:18 +0000
asID:                     265727
IP address blocks:        160.238.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.crl
                          rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:37:18:78:91:55:aa:da:b7:45:3d:11:40:e5:fb:7b:82:32:b0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90C566CE4020518E4AA157BF5D4FEB2B376C3855
        Validity
            Not Before: Mar  5 17:58:18 2024 GMT
            Not After : Mar  4 18:03:18 2025 GMT
        Subject: CN=41AE736D42CF2D2CB09171C572714AEDE5803C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:dc:c2:99:f7:56:69:f0:1a:a3:83:6f:7d:
                    e7:c8:c0:bc:16:14:d6:3f:96:83:4f:b3:19:fd:cf:
                    8e:0e:0e:cd:e3:8d:c9:c4:84:49:e3:e9:1c:4b:5f:
                    e6:f7:a6:be:f7:d0:59:53:c4:6e:7d:80:f3:6f:b3:
                    fa:fd:bc:a3:af:41:6e:a5:6a:86:98:07:80:9e:b2:
                    e9:7b:d8:61:fe:94:1b:be:54:25:fa:dd:51:d4:9f:
                    e8:bb:e5:5f:3d:5d:fd:85:d4:eb:20:33:b7:be:71:
                    a6:7f:79:ee:b9:52:e6:71:37:4d:da:09:72:ce:42:
                    7a:44:30:b9:0c:51:6a:43:1b:8c:e5:e6:6e:4f:39:
                    b3:fb:e9:7f:06:b5:40:ac:53:30:4c:d5:7e:b1:e5:
                    15:fb:14:df:01:0e:95:17:0f:4b:dc:9f:a2:dd:0d:
                    f5:df:16:74:2a:bf:9a:57:4d:79:a7:b9:c8:47:4b:
                    40:ee:87:ae:56:77:02:90:63:26:10:aa:c5:c3:7e:
                    73:5e:7c:62:6c:af:be:27:d8:90:01:8a:fd:93:95:
                    d4:f4:8e:3c:93:53:06:ac:fe:ce:49:7d:45:2d:e8:
                    5b:d3:4e:f8:22:5e:c0:fd:3d:e8:69:bc:8d:ad:a3:
                    65:db:17:cd:73:81:ef:3f:6b:1c:4a:32:59:bf:72:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:73:6D:42:CF:2D:2C:B0:91:71:C5:72:71:4A:ED:E5:80:3C:6D
            X509v3 Authority Key Identifier:
                keyid:90:C5:66:CE:40:20:51:8E:4A:A1:57:BF:5D:4F:EB:2B:37:6C:38:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90C566CE4020518E4AA157BF5D4FEB2B376C3855.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/484495BD69A9E13226531774EE6AF2D76FAA82EAC8D2665DE0D1378082CC1AB0/0/3136302e3233382e3133362e302f32322d3234203d3e20323635373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:69:f5:46:f2:89:b4:ec:93:c8:8e:fd:4b:b9:85:ec:99:
         16:99:ee:cf:0e:d4:eb:fc:1d:55:89:e8:8b:5b:9f:3d:86:0f:
         95:d4:55:e6:d5:7a:c4:55:9a:92:3c:66:bd:ea:95:dd:83:07:
         2f:61:3e:86:cd:35:75:0d:2e:e4:18:74:43:45:d6:49:d5:94:
         46:10:f6:98:55:33:b1:ee:05:52:8d:13:11:2c:b1:e4:af:6b:
         0a:27:bb:4b:b0:b5:2b:34:25:5e:9f:b2:8d:23:b7:b1:26:e6:
         1c:1f:cb:df:a8:76:3e:26:a0:ed:dd:45:da:06:14:21:dd:59:
         d2:f2:db:f3:ec:13:c3:ef:64:bd:17:b6:60:33:42:ce:5c:d0:
         eb:7a:48:94:b0:5e:9a:fd:17:27:34:54:b1:4e:8f:da:b3:3d:
         8e:a0:42:b4:f6:62:75:b3:91:7d:7f:50:57:71:7f:5f:71:ec:
         25:c9:00:c8:b8:4d:a8:71:d0:15:5e:61:1a:09:0e:59:38:f9:
         d8:55:19:34:22:72:aa:5e:56:71:98:c1:e3:5c:bd:3a:06:9c:
         e4:ab:30:9d:ca:7e:70:d9:1d:07:7a:57:13:4d:64:aa:bb:84:
         a3:31:0c:c0:39:b5:20:c0:63:55:6c:4a:54:35:5c:79:e6:f1:
         5b:eb:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org