Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e302e3231322e302f32322d3232203d3e203532333933.roa
File:                     3136382e302e3231322e302f32322d3232203d3e203532333933.roa (raw, json)
Hash identifier:          /a4SoIazQwKAmpUycrL9FkRMaBTUv6nB6+AetwsCpbw=
Subject key identifier:   A3:4B:16:2B:08:E4:82:39:8A:97:F7:D5:9D:BB:7B:01:BC:13:DF:57
Certificate issuer:       /CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
Certificate serial:       3974ADFD86D91B1457F297550CFFD6BD9952F83D
Authority key identifier: DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e302e3231322e302f32322d3232203d3e203532333933.roa
Signing time:             Tue 05 Mar 2024 17:42:14 +0000
ROA not before:           Tue 05 Mar 2024 17:37:14 +0000
ROA not after:            Tue 04 Mar 2025 17:42:14 +0000
asID:                     52393
IP address blocks:        168.0.212.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:ad:fd:86:d9:1b:14:57:f2:97:55:0c:ff:d6:bd:99:52:f8:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB11B7707911064B45F88A13AD77795D0BCE5CC6
        Validity
            Not Before: Mar  5 17:37:14 2024 GMT
            Not After : Mar  4 17:42:14 2025 GMT
        Subject: CN=A34B162B08E482398A97F7D59DBB7B01BC13DF57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:2a:eb:58:07:6f:f5:e4:62:95:e0:a2:44:
                    ca:b1:8b:ab:40:f4:99:bf:7b:99:cd:6b:25:c4:e5:
                    4d:a3:78:ac:53:39:c0:e8:b5:10:4c:90:f9:c8:e4:
                    4c:0f:6e:b2:5d:5f:32:34:31:4f:d8:86:7c:a1:4a:
                    c2:26:74:de:14:f7:13:1d:de:ea:93:0c:a8:e0:6f:
                    73:e3:9f:b1:06:fe:74:c6:82:af:aa:fe:bc:c8:a0:
                    20:26:00:92:d6:26:f5:5c:ef:63:36:8e:e6:9a:a6:
                    ac:56:a2:6b:f2:64:1c:f1:9c:be:e2:28:d4:6d:64:
                    b8:5b:37:6c:2b:f3:c9:bd:c0:9d:b5:61:9b:43:e4:
                    f3:eb:c1:a6:b8:fe:bf:a9:2b:e4:be:19:33:7f:95:
                    c2:d9:be:35:6f:14:7e:e9:ee:f5:84:c7:fb:56:5a:
                    77:da:8b:c0:d5:41:e4:22:4b:5b:aa:e2:8d:4a:1e:
                    05:54:52:24:75:b6:70:03:2a:48:e8:ce:f4:5b:01:
                    24:bc:f4:02:0a:43:d7:47:aa:55:93:fc:6a:aa:4e:
                    18:48:c3:c6:b6:dc:05:5c:77:5a:08:99:38:0b:55:
                    de:be:d8:c7:74:4b:28:cc:66:a8:e7:79:f5:1b:0a:
                    c4:88:43:55:f8:0a:3a:a7:5b:7d:c3:10:79:b2:21:
                    50:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4B:16:2B:08:E4:82:39:8A:97:F7:D5:9D:BB:7B:01:BC:13:DF:57
            X509v3 Authority Key Identifier:
                keyid:DB:11:B7:70:79:11:06:4B:45:F8:8A:13:AD:77:79:5D:0B:CE:5C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB11B7707911064B45F88A13AD77795D0BCE5CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4ED6EB0CD247E17FF0A8DCE6B46C64555E8B6E899F5580B5E4C02BE5DC9F96EF/0/3136382e302e3231322e302f32322d3232203d3e203532333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:88:92:32:f2:bf:1d:37:1a:2b:45:26:f8:7a:49:70:1f:cd:
         a1:f3:62:c1:67:ea:43:be:c6:e0:c5:0f:b8:3a:30:07:88:fd:
         aa:9c:ab:75:5a:c3:e2:6f:fe:58:1e:4c:05:ea:5f:23:26:94:
         e9:f9:96:25:00:ad:f3:4e:08:68:21:a2:cd:fd:d5:ad:8b:97:
         3b:48:c5:f8:78:92:83:8d:4e:37:9f:89:12:e3:56:07:33:6a:
         9a:a2:a8:29:e3:67:f1:5d:65:03:62:c7:56:23:23:fa:8a:a2:
         59:22:ac:73:af:21:49:e2:aa:93:b9:89:3d:6f:b1:44:48:8c:
         70:3e:0c:d0:57:b2:74:60:5e:fb:69:26:84:d0:c5:db:6e:fb:
         23:01:6b:52:47:c4:e9:9e:c1:aa:c3:9c:f6:e4:f9:53:11:cc:
         0c:3d:f2:42:71:29:62:63:1d:bf:e7:c7:b2:e5:dc:17:d6:0c:
         0e:23:d8:92:28:01:53:bf:1b:0b:1d:bf:17:c3:33:83:66:f0:
         a9:ee:b2:cb:72:48:b8:f7:b1:2c:7d:d8:81:dd:78:40:5b:6f:
         dc:99:e9:66:c3:dd:26:4f:36:91:51:41:ea:c8:7b:09:02:2e:
         3b:7b:5d:f0:96:62:03:c5:17:81:33:ac:cc:d4:c4:02:96:ed:
         60:e7:89:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:36:27 2024 by rpki-client on console-ams.rpki-client.org