Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
File:                     3136382e302e3232322e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier:          jq7q3TmZ+0fjJMULgE6iNPKNRGt8hiGaLK/leI2Pais=
Subject key identifier:   37:A0:92:FC:3D:31:EC:8B:E3:31:07:B0:B9:65:86:94:26:0E:BF:10
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       26F5CFC2E3E7B67208F21DA27C030B12A05EEC75
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa
Signing time:             Tue 05 Mar 2024 18:23:15 +0000
ROA not before:           Tue 05 Mar 2024 18:18:15 +0000
ROA not after:            Tue 04 Mar 2025 18:23:15 +0000
asID:                     265504
IP address blocks:        168.0.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f5:cf:c2:e3:e7:b6:72:08:f2:1d:a2:7c:03:0b:12:a0:5e:ec:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Mar  5 18:18:15 2024 GMT
            Not After : Mar  4 18:23:15 2025 GMT
        Subject: CN=37A092FC3D31EC8BE33107B0B9658694260EBF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:ee:e0:30:29:b4:23:c8:bc:f0:0e:b8:98:
                    1e:0b:2b:f8:fd:ab:79:cc:ae:55:e7:94:83:63:fd:
                    e7:8e:af:9c:a1:f6:46:34:4b:23:52:aa:26:9b:99:
                    56:d6:33:b6:2a:eb:07:19:87:11:09:dc:22:d3:ad:
                    a9:94:3f:d3:5a:97:74:1e:39:12:a6:3d:81:a9:48:
                    05:12:f1:a7:fb:27:84:c4:66:49:07:24:16:2f:0a:
                    e6:70:a6:b1:4f:02:f8:26:98:c7:a4:f8:9e:1e:9f:
                    8a:3e:cf:06:24:e1:e9:a5:be:71:ac:9d:69:1e:b1:
                    54:a8:eb:e0:53:bc:92:66:74:7b:fb:ac:ea:b8:c2:
                    d1:bf:31:46:2c:ec:86:a5:2e:83:c4:4c:88:25:d3:
                    45:27:76:e3:84:42:bd:41:70:40:c7:dd:9f:20:d6:
                    89:b3:62:b9:bf:38:f3:4a:45:56:5b:05:49:ef:20:
                    1f:04:35:61:e3:dd:80:38:a5:2b:a9:18:b6:f8:5a:
                    18:da:f1:e1:81:9a:fb:a7:41:24:48:70:0e:bf:eb:
                    f3:d7:8f:54:70:3d:e7:96:c9:ff:5d:ed:26:0e:13:
                    eb:91:2a:d1:e0:2c:4c:89:fb:69:5a:e8:8d:6d:27:
                    a0:3e:f4:d7:3e:08:00:a2:9b:ec:72:a3:d6:c7:66:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A0:92:FC:3D:31:EC:8B:E3:31:07:B0:B9:65:86:94:26:0E:BF:10
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232322e302f32342d3234203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:04:f9:30:6f:3e:a9:d1:75:39:e4:3a:e9:31:60:0c:66:7e:
         dd:29:fe:6b:ba:63:16:6d:a5:30:f8:6e:02:12:6d:e1:74:cb:
         26:4e:62:fb:55:5b:37:a1:69:f1:85:f3:9d:b5:20:8e:f6:47:
         7b:56:fb:19:1f:eb:cf:41:fd:b0:d9:b5:c4:19:e7:51:db:8a:
         aa:15:db:a3:c2:93:64:e8:2b:92:e6:b3:b5:b9:86:28:a5:23:
         0f:63:75:21:55:3c:28:cf:ea:2b:01:99:a5:c2:0f:e0:b0:9f:
         33:37:bc:d0:9b:44:42:81:4d:02:11:01:a1:fc:dd:e2:78:5b:
         f9:b7:f1:80:8e:63:e5:b8:86:71:5c:cb:97:92:ea:28:64:5e:
         b5:02:17:f7:fd:6e:36:04:21:fa:c6:1d:e7:50:31:0e:3d:b7:
         2c:32:81:e5:73:69:30:e6:f7:11:2a:e8:18:84:ee:14:52:59:
         0e:0f:9a:44:d9:d3:c2:f7:ee:c9:eb:85:ab:86:10:f8:ad:2d:
         61:20:19:3e:4d:25:04:fc:a9:f3:96:e9:91:dd:c6:39:60:a3:
         9e:16:4d:8a:34:51:80:92:1f:67:62:53:09:c5:96:ca:47:4d:
         c2:27:51:25:e0:0f:e2:5c:cc:fa:02:28:fa:35:28:43:e5:17:
         7e:e0:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org