Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31362e302f32332d3233203d3e203532333335.roa
File:                     3138352e37342e31362e302f32332d3233203d3e203532333335.roa (raw, json)
Hash identifier:          XneQsO2PGP1UANKIPOMTnHEETb3Kcj3qmxMlMvYCQQ4=
Subject key identifier:   40:D3:78:D4:22:16:3D:2A:50:BE:AB:33:F1:C9:A7:63:3E:8A:AE:56
Certificate issuer:       /CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
Certificate serial:       58496AB4323C125CB02DF8D428432E036422166F
Authority key identifier: CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31362e302f32332d3233203d3e203532333335.roa
Signing time:             Tue 05 Mar 2024 17:41:21 +0000
ROA not before:           Tue 05 Mar 2024 17:36:21 +0000
ROA not after:            Tue 04 Mar 2025 17:41:21 +0000
asID:                     52335
IP address blocks:        185.74.16.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:49:6a:b4:32:3c:12:5c:b0:2d:f8:d4:28:43:2e:03:64:22:16:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CFF4EB94A3CA4240E99D515F818C70090A5BEF59
        Validity
            Not Before: Mar  5 17:36:21 2024 GMT
            Not After : Mar  4 17:41:21 2025 GMT
        Subject: CN=40D378D422163D2A50BEAB33F1C9A7633E8AAE56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:34:38:c9:83:7d:57:c6:31:1a:2b:2d:a3:
                    8a:36:b7:df:3d:a5:1f:a2:5b:60:9e:10:8a:fa:ab:
                    b0:ed:f2:6b:ce:ae:6d:02:01:ef:6a:65:32:a4:53:
                    7e:b1:3a:a6:0b:4f:06:f2:ac:8b:73:72:8b:d4:9c:
                    0a:13:a2:91:4f:d7:a9:9b:c3:b9:ea:c1:ed:30:97:
                    04:77:f6:3f:18:16:e9:77:49:95:64:8c:35:ac:cd:
                    54:4e:61:ca:fe:eb:1a:d0:ee:00:1b:1f:d4:07:cf:
                    9b:22:d0:8e:2a:e2:e1:ec:70:9f:5c:e8:b4:59:b7:
                    e4:8b:10:a3:cd:b1:0a:f8:a4:23:6f:e8:65:17:28:
                    be:2d:27:9d:6f:3d:12:e4:70:46:e7:09:ce:c1:4e:
                    b3:06:9f:e7:d4:2e:d7:33:37:99:59:38:eb:13:45:
                    9e:ba:43:a6:90:6e:15:7d:77:37:2b:50:39:56:46:
                    16:cc:15:94:3b:5c:51:cf:30:de:92:55:ee:e2:43:
                    64:d8:15:58:3d:25:f2:d2:10:f7:93:35:e4:92:df:
                    89:95:20:75:63:fc:17:19:ee:fa:4c:4e:2f:d1:75:
                    d5:01:0b:13:f6:28:1e:6d:8b:d1:6f:f5:8d:97:d0:
                    9d:c2:1c:91:f6:44:2b:12:ac:44:4b:e8:71:09:5e:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D3:78:D4:22:16:3D:2A:50:BE:AB:33:F1:C9:A7:63:3E:8A:AE:56
            X509v3 Authority Key Identifier:
                keyid:CF:F4:EB:94:A3:CA:42:40:E9:9D:51:5F:81:8C:70:09:0A:5B:EF:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CFF4EB94A3CA4240E99D515F818C70090A5BEF59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D09661F6A550B3E21627E54957D8CD8E8C7C5FEDD92226C1FB01961E2593F10/0/3138352e37342e31362e302f32332d3233203d3e203532333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.74.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:b1:e7:24:84:a2:0e:cb:2e:6e:27:9f:d4:8b:22:5e:2d:43:
         cf:22:84:4d:bc:df:7f:d1:c8:b9:76:d9:3d:03:76:bd:75:3e:
         e2:bf:74:9a:48:7c:62:07:6c:77:bc:59:0c:1e:50:83:9d:cf:
         9f:ca:de:1f:90:92:bc:62:37:31:bd:88:9b:51:0a:42:93:4f:
         93:c2:d8:c5:ed:78:3f:b1:7e:a3:80:d8:c4:17:66:c3:06:db:
         bb:88:03:a3:2c:f5:b4:dd:ce:82:06:f8:67:dc:af:3d:c1:b6:
         56:58:4d:63:92:26:58:6d:41:7a:a1:c2:7f:1b:61:52:6c:4e:
         c3:57:e3:e3:27:46:43:96:94:f0:46:f1:8d:06:b8:a0:75:c7:
         9e:00:94:6a:27:6b:3e:e1:a6:04:80:39:e9:82:fb:f4:ea:0f:
         50:0d:fd:6b:eb:7c:75:6f:a1:3c:d4:63:25:53:3d:75:fc:d0:
         c9:9e:2c:42:f5:7b:be:1d:65:63:21:71:f3:ed:aa:28:e9:3e:
         c5:24:33:d4:5f:09:c4:2b:40:8e:33:f1:49:10:0d:fe:f9:5b:
         e3:50:a3:8f:0a:85:c5:3c:56:ec:bb:4e:71:70:9e:b4:68:91:
         ae:92:bf:05:e0:03:db:9e:24:e2:20:34:b7:83:d2:47:87:80:
         3b:cb:e5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org