Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
File:                     3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          L4ujQ47jVmxvHu+mAQfeLMDc52aBOjhFS8VQiZNyF/s=
Subject key identifier:   B5:67:05:8D:CB:51:31:D6:35:4D:4A:5F:B3:C5:FC:C5:F6:A3:0B:4B
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       555A730209697D3E89FC06FC1F6F9EDCEBC1C406
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 05 Mar 2024 18:04:18 +0000
ROA not before:           Tue 05 Mar 2024 17:59:18 +0000
ROA not after:            Tue 04 Mar 2025 18:04:18 +0000
asID:                     269750
IP address blocks:        168.194.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5a:73:02:09:69:7d:3e:89:fc:06:fc:1f:6f:9e:dc:eb:c1:c4:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Mar  5 17:59:18 2024 GMT
            Not After : Mar  4 18:04:18 2025 GMT
        Subject: CN=B567058DCB5131D6354D4A5FB3C5FCC5F6A30B4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:22:d2:00:25:cc:ff:ab:52:ae:42:48:d5:06:
                    b6:0b:9e:b6:4c:b2:ac:f7:ec:4c:34:32:52:b9:5e:
                    af:3b:8e:21:f9:27:7c:e6:c2:54:82:22:e5:c2:7e:
                    e3:eb:bd:b4:99:d3:a5:53:6e:db:fc:16:40:bc:65:
                    16:ea:72:c7:61:c4:09:ff:d6:6f:b6:53:02:09:87:
                    e3:64:91:b3:aa:6d:a2:72:ef:4c:86:b6:89:8d:2a:
                    de:a3:81:0b:66:d3:21:fc:e5:ac:a3:3c:86:46:22:
                    87:bf:51:4d:75:f9:0a:f4:6a:63:18:98:38:9b:b6:
                    59:8a:b1:a1:e4:b6:ee:4f:90:f2:73:63:5a:d1:1e:
                    bb:aa:74:e3:a0:d1:fd:13:4d:7d:5b:aa:ef:42:4a:
                    b4:71:c2:5c:47:fb:d7:8f:8e:09:bd:ce:b2:36:57:
                    40:9a:b4:98:78:e5:f9:b9:06:c1:b7:88:fd:e8:4f:
                    23:ec:a7:a0:7e:58:c0:f9:6e:06:42:64:2a:d0:95:
                    ba:13:01:41:76:66:8e:69:2e:2b:30:26:ee:cb:1c:
                    75:e1:b8:01:7a:c6:75:1d:da:7c:0b:f9:c0:99:1c:
                    da:93:07:b2:fe:1c:7a:ae:5c:c8:5a:ea:71:4b:3e:
                    b8:69:61:31:85:63:e9:3d:91:0e:b9:82:30:63:71:
                    d1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:67:05:8D:CB:51:31:D6:35:4D:4A:5F:B3:C5:FC:C5:F6:A3:0B:4B
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:84:f8:cc:c8:8a:ae:91:7a:34:af:8a:d4:8a:04:66:6a:ea:
         c3:39:c1:6c:4b:35:fb:07:e1:cf:55:5b:22:c2:0e:be:a9:4e:
         ae:41:d0:14:91:e8:70:36:91:e9:4a:83:6a:94:c8:b8:b2:8b:
         94:29:09:fb:d1:04:f8:63:70:5a:fd:5e:42:fc:f0:b9:26:f3:
         5e:9d:81:aa:fd:bf:b1:f4:4d:d3:3b:a4:77:ee:19:84:f2:63:
         06:fa:ac:18:be:1d:1d:8c:1d:f9:cf:07:8d:a6:78:89:df:af:
         17:54:d0:df:2a:75:7e:86:e2:24:62:0e:d4:2c:dc:3d:c9:e9:
         8c:09:ad:b7:2b:06:27:7c:e5:08:e7:fb:20:44:b1:09:cb:63:
         c5:d0:6f:f6:70:bd:23:5b:9f:a8:9a:70:61:a8:96:fb:75:05:
         4f:73:2b:70:96:3d:0d:5d:49:3a:f5:65:f0:fa:44:5b:91:a7:
         37:70:2b:43:52:f1:e5:a3:ce:b5:f4:ec:2a:cf:14:2f:80:7f:
         f9:a2:b1:35:b9:ed:41:48:a1:bb:0f:eb:eb:eb:e3:f7:4e:66:
         fc:74:29:e7:6b:d3:77:1c:9b:85:cb:bc:c2:dc:22:f7:c3:58:
         6e:45:04:71:d2:1a:7e:62:a2:ff:70:97:68:5f:fc:33:b0:e4:
         83:07:0a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:53 2024 by rpki-client on console-ams.rpki-client.org