Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa
File:                     3136382e3233322e39362e302f32322d3234203d3e203532333837.roa (raw, json)
Hash identifier:          Xl+3n/hF478A/cURsoZksGWw9dMQbIvEqTHmpRG1U5o=
Subject key identifier:   F1:68:5C:64:39:4C:7E:A0:CD:82:5B:32:68:B9:FE:E1:E0:59:D4:2C
Certificate issuer:       /CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
Certificate serial:       619525E3359681D3C129E943DC149224F627CEC4
Authority key identifier: 15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa
Signing time:             Tue 05 Mar 2024 18:23:25 +0000
ROA not before:           Tue 05 Mar 2024 18:18:25 +0000
ROA not after:            Tue 04 Mar 2025 18:23:25 +0000
asID:                     52387
IP address blocks:        168.232.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:95:25:e3:35:96:81:d3:c1:29:e9:43:dc:14:92:24:f6:27:ce:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159503B8FACEE08EF85A04D3D6C0322CCD9E2F81
        Validity
            Not Before: Mar  5 18:18:25 2024 GMT
            Not After : Mar  4 18:23:25 2025 GMT
        Subject: CN=F1685C64394C7EA0CD825B3268B9FEE1E059D42C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:53:df:67:0c:27:d3:db:21:79:4f:c4:8d:8a:
                    4e:04:f2:c2:e2:94:9b:0d:bb:1a:f8:29:6d:a4:28:
                    f9:21:13:b3:38:b1:05:00:b3:67:61:ba:6b:ee:31:
                    de:01:cc:a4:e9:ff:fa:bf:31:ba:21:7c:ec:85:d5:
                    49:2e:e3:30:3f:e6:79:e5:bc:0c:a0:67:5c:3b:da:
                    b2:8e:d1:3b:32:e0:86:b5:a4:94:20:57:d3:25:df:
                    46:e5:a5:f6:3a:42:e9:94:c9:73:f5:96:8b:4d:da:
                    4b:18:0e:9a:06:2e:61:ea:26:8a:68:ae:68:52:dc:
                    1b:66:4e:33:b5:56:74:39:bc:c1:ec:42:e6:9e:3b:
                    56:49:de:ce:a5:e4:c5:6e:30:66:9f:9f:6a:c9:07:
                    28:3d:73:99:cd:48:c6:bf:36:e2:2a:d9:8f:7e:25:
                    f2:61:5a:62:76:1e:16:cd:ff:60:03:49:82:e1:85:
                    7d:34:6d:8e:53:ea:44:40:15:20:fb:6c:e0:f2:37:
                    3c:ef:72:57:04:63:00:3c:25:02:12:fd:a0:0e:c4:
                    df:a5:b9:c4:fe:09:07:68:77:a1:f5:d7:fd:b9:32:
                    71:b3:30:34:d4:d5:30:40:40:71:cd:4c:f8:5b:ce:
                    9d:16:f8:87:ee:9b:6d:8d:08:c3:4a:23:fd:f3:43:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:68:5C:64:39:4C:7E:A0:CD:82:5B:32:68:B9:FE:E1:E0:59:D4:2C
            X509v3 Authority Key Identifier:
                keyid:15:95:03:B8:FA:CE:E0:8E:F8:5A:04:D3:D6:C0:32:2C:CD:9E:2F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/159503B8FACEE08EF85A04D3D6C0322CCD9E2F81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4E0A9B79EE48A5D895BAC332E878FD3FC40461927CF29BAC89112983FD3D5921/0/3136382e3233322e39362e302f32322d3234203d3e203532333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:c7:cd:dd:c0:2d:2d:f7:e5:73:4b:3b:69:c2:20:cb:5f:3b:
         c4:52:a5:1e:f3:e4:fa:fd:a1:54:0e:74:a7:d7:2a:b6:d7:2f:
         02:8d:38:d5:e7:75:f3:41:e4:14:e0:8e:68:91:53:6b:d7:c6:
         77:ce:a1:25:93:0c:f7:b6:4d:9b:2e:55:84:26:16:fd:3c:65:
         e4:c7:a0:e0:87:40:30:40:d6:c7:33:45:73:c1:f1:f2:7a:e2:
         04:ce:18:73:40:74:fd:a1:fd:8d:3f:52:7a:1d:bd:3a:91:4f:
         0d:a5:9c:7f:f6:36:de:f5:55:a7:46:3c:e9:13:64:28:5b:e8:
         a7:77:6e:d6:59:92:c6:7d:9d:7d:26:00:c6:99:43:da:bf:0d:
         60:d3:6e:40:6b:81:29:65:79:fc:74:f2:4e:dd:e5:f3:3d:21:
         3d:13:bf:26:0d:f5:4d:b3:b8:2c:2f:a5:77:b5:fd:e6:ea:62:
         cd:ba:33:f5:71:c4:86:03:a2:19:f4:a7:91:30:5e:84:dc:da:
         3c:1a:37:4f:3b:6b:06:10:e3:44:36:1b:76:ca:b9:88:fc:25:
         cd:ff:c4:b8:d1:94:63:ec:3e:a1:61:0e:a5:51:ef:97:d4:a2:
         2c:32:9d:46:2f:92:1e:1e:2b:d3:85:62:4a:50:e3:94:68:eb:
         b0:66:6e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org