Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37342e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          p+9PtFc4WkzNNiNs7wQ4vYKkpxjME9mHg3+v0qk+Qt0=
Subject key identifier:   A2:3C:EF:C7:13:2D:E4:13:65:F7:2D:04:35:5B:24:47:29:D6:B5:2C
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       1057F6743D8A3DFCD884DBAD05116682C6525C18
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:35 +0000
ROA not before:           Tue 05 Mar 2024 17:36:35 +0000
ROA not after:            Tue 04 Mar 2025 17:41:35 +0000
asID:                     52493
IP address blocks:        168.90.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:57:f6:74:3d:8a:3d:fc:d8:84:db:ad:05:11:66:82:c6:52:5c:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:35 2024 GMT
            Not After : Mar  4 17:41:35 2025 GMT
        Subject: CN=A23CEFC7132DE41365F72D04355B244729D6B52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:13:3b:96:a0:3e:e1:1a:87:e1:1e:0e:06:65:
                    10:3b:e3:0c:01:f4:d1:c4:03:b3:a5:8e:03:70:ed:
                    5b:2f:a8:76:6f:b3:bd:6c:98:81:53:d1:24:fe:52:
                    bc:fd:60:67:bc:c9:e7:e7:e2:0d:8e:00:10:f1:28:
                    fc:b1:43:53:7f:e0:e3:4d:b3:80:30:08:d3:16:9a:
                    28:c4:15:a1:ce:90:ae:65:8a:40:23:0c:66:a3:bc:
                    c4:5e:53:16:f4:b8:82:5b:e5:e5:ee:34:14:de:4c:
                    f5:d9:65:53:ad:32:3e:eb:ca:99:59:64:77:8e:15:
                    57:37:fd:ba:6c:75:40:12:dc:0c:c9:69:82:e4:da:
                    a0:2a:a2:a2:9b:7e:29:e0:cf:41:74:b5:91:5e:92:
                    08:9b:5f:2e:54:2a:00:a0:f9:0a:13:ab:32:82:0d:
                    e8:0a:a5:e3:75:3b:a0:f5:d4:4f:cc:7e:44:e8:13:
                    4c:92:9d:3a:62:62:e7:b7:1b:ac:d4:6c:03:bc:ab:
                    12:52:bd:a6:74:7a:d9:be:2b:16:8b:9f:a6:7f:a9:
                    dd:88:52:55:87:e3:09:b6:a2:3b:55:b0:6f:c7:d9:
                    e2:ab:9f:22:26:6d:54:98:49:0e:08:2d:3c:6b:a5:
                    fc:1c:e5:ab:45:e9:21:67:d0:f1:c1:69:0d:a5:4d:
                    6f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3C:EF:C7:13:2D:E4:13:65:F7:2D:04:35:5B:24:47:29:D6:B5:2C
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:21:e9:a1:57:d7:1d:7f:9c:46:ce:1d:71:f6:31:d7:a9:b3:
         53:09:df:f5:d9:00:57:f5:1f:68:06:c9:63:c0:be:04:3f:83:
         4f:2f:fd:5d:9b:dc:7e:04:97:6b:d1:aa:e6:2e:01:d1:7c:6f:
         be:13:0e:54:4a:9a:e5:23:e6:2d:19:b2:71:cc:29:0d:7d:e5:
         a0:6f:ee:1f:0d:2b:36:79:26:51:45:72:80:38:8c:e7:bb:ac:
         ba:35:28:55:dd:4c:38:af:14:c9:91:ea:d5:9b:24:a9:8d:58:
         3b:be:d5:cf:73:9a:4c:56:a8:15:42:88:96:7a:25:a3:aa:c5:
         6c:a1:ef:9a:5f:fb:4a:f2:a6:a2:0a:8d:24:15:10:f1:1b:f9:
         9c:57:ec:88:ef:8d:02:9e:20:c6:43:66:58:08:b4:c8:12:4c:
         0e:c7:06:bd:af:3e:36:7a:c9:96:99:b0:bb:d3:11:5f:38:84:
         11:78:55:a9:56:b8:6c:53:d2:54:89:9a:84:c6:1d:7b:d1:95:
         c9:9e:49:85:5c:6a:d8:16:ec:cb:1d:af:9e:c3:78:ad:df:b7:
         36:b2:a7:a7:f1:d1:0e:79:7a:f1:8b:41:4a:b6:d7:2a:d2:53:
         62:34:52:f7:c5:ad:64:11:58:71:cd:7b:a8:d8:09:6a:a5:70:
         39:bf:69:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 11:01:31 2024 by rpki-client on console-fra.rpki-client.org