Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa
File:                     3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          ltBEqNUYQWG8BF7GPgEgzrcy+jpKNyUNKvDSGgyIOGY=
Subject key identifier:   8A:07:88:57:D4:7B:82:0C:82:E8:8B:39:21:0D:94:B0:DB:8A:E8:EB
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       6CFF9E4748299632E5CBF4A7B7728A8529DE065B
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:09:18 +0000
ROA not before:           Tue 05 Mar 2024 18:04:18 +0000
ROA not after:            Tue 04 Mar 2025 18:09:18 +0000
asID:                     262191
IP address blocks:        168.197.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ff:9e:47:48:29:96:32:e5:cb:f4:a7:b7:72:8a:85:29:de:06:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Mar  5 18:04:18 2024 GMT
            Not After : Mar  4 18:09:18 2025 GMT
        Subject: CN=8A078857D47B820C82E88B39210D94B0DB8AE8EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:34:be:3b:81:b8:3a:ab:1b:ba:10:7c:46:c2:
                    8d:88:ac:26:d2:84:fb:d1:5c:d9:2f:84:52:22:98:
                    a8:ba:f7:72:56:49:cc:ad:67:53:f3:78:e9:9e:52:
                    55:98:d1:68:b1:53:f8:72:d0:d4:77:fe:ad:6a:f8:
                    5f:fe:6a:52:c6:9e:fe:da:fc:5a:ce:2c:69:4a:85:
                    2f:13:4d:77:87:8a:6a:70:92:06:30:12:02:6b:ea:
                    3d:97:69:42:49:2d:b1:8d:e2:1d:c1:04:4b:43:22:
                    f9:09:3e:b4:04:10:c6:c4:60:52:af:83:26:98:1d:
                    a4:11:00:fa:99:ea:05:ed:31:58:e4:c9:25:03:15:
                    1e:33:40:19:f1:c9:95:31:b6:35:55:07:5f:97:73:
                    f6:19:08:43:de:89:8f:43:40:27:43:71:2e:dc:d2:
                    93:01:2b:50:59:a9:df:0b:6c:5c:69:4b:42:38:f1:
                    44:73:c6:0e:f2:44:90:51:72:a1:7f:26:b4:36:60:
                    90:16:fd:bd:36:2f:98:11:04:29:13:4e:77:11:a7:
                    7e:47:70:9f:fb:0e:b1:c2:d3:55:d4:c3:26:da:46:
                    7c:a1:d7:38:e1:cb:fe:54:7b:7e:99:7b:37:a0:9d:
                    7c:8e:ac:db:d2:a2:84:4d:1c:c8:e6:c9:35:e0:2b:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:07:88:57:D4:7B:82:0C:82:E8:8B:39:21:0D:94:B0:DB:8A:E8:EB
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/3136382e3139372e36382e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:18:e2:04:2d:58:8c:ca:50:3b:2b:34:30:4c:2c:63:94:12:
         76:d1:2a:8e:61:1a:9d:a8:4c:42:d5:81:1a:a2:a1:38:d2:a6:
         37:5d:2e:fd:49:ec:89:27:a4:52:de:1c:9c:9e:67:80:27:9a:
         1f:e4:c7:b0:a0:ad:9a:ae:33:7b:69:e7:11:5b:5f:b1:a8:00:
         ea:e2:25:81:5a:52:de:07:65:aa:02:df:9b:1b:35:9c:b9:ff:
         6b:eb:c3:7b:f6:42:11:54:0a:5e:a0:4c:78:f2:6f:1d:f6:f7:
         77:8f:4b:fa:de:69:97:2d:07:b8:39:91:59:1b:80:6e:b3:d5:
         36:90:14:fe:86:c2:d1:4d:a8:ef:a7:bd:f3:75:43:d5:0a:0d:
         2e:81:66:c2:de:b3:7d:89:0c:96:28:dd:ff:85:d6:9b:c0:c1:
         09:b0:f0:d9:97:b2:5f:b9:f5:d6:7b:df:26:4e:8a:fc:d0:a6:
         03:71:00:f1:d1:05:e1:87:94:c2:9c:0f:04:b1:62:3e:ab:88:
         0d:fd:d1:38:ca:1a:42:b6:4e:1d:ab:d5:a7:15:ec:c0:f1:91:
         69:9d:c0:5c:be:d5:8b:29:55:42:b2:f0:ca:14:f0:72:49:8a:
         3e:38:66:68:45:28:e6:6e:84:72:c4:3f:4e:92:5d:5d:45:91:
         31:b3:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org