Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37352e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          ymFYQEc/h6KKy4LJhdNHu/tHYa4RtNNzEBBGWUWvViU=
Subject key identifier:   D0:DB:40:45:6D:50:FE:B7:A9:B1:CD:6A:FF:99:F2:4D:BD:F9:C6:16
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       25967E8464E3E0A2D8BC651102EC286B12B18222
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:36 +0000
ROA not before:           Tue 05 Mar 2024 17:36:36 +0000
ROA not after:            Tue 04 Mar 2025 17:41:36 +0000
asID:                     52493
IP address blocks:        168.90.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:96:7e:84:64:e3:e0:a2:d8:bc:65:11:02:ec:28:6b:12:b1:82:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:36 2024 GMT
            Not After : Mar  4 17:41:36 2025 GMT
        Subject: CN=D0DB40456D50FEB7A9B1CD6AFF99F24DBDF9C616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:18:94:f3:10:6d:2b:21:73:2e:98:4e:79:af:
                    c9:b7:0f:9d:1c:29:7f:fd:2b:0e:fe:70:98:73:78:
                    1d:88:9c:c8:f9:33:ed:0f:43:7a:23:40:05:0c:d1:
                    75:ef:26:a8:75:38:11:43:e6:09:bc:f5:80:47:e3:
                    e8:a8:47:c8:5b:1f:ae:15:14:b7:ec:cb:74:c0:c0:
                    b0:21:40:31:1a:f2:8c:7f:62:58:9e:71:b6:59:cf:
                    b6:62:65:e2:57:23:b6:8c:0f:23:38:a9:e6:06:f9:
                    83:2e:49:1a:71:51:5e:26:24:96:56:b0:ee:59:09:
                    f7:85:0f:ee:e8:cb:c4:65:41:e9:50:89:85:cf:f3:
                    2e:cf:25:5a:e0:02:7d:de:b8:1b:93:05:80:de:ae:
                    33:52:dc:66:39:71:74:39:4f:39:6d:9a:03:87:b4:
                    b5:8f:5d:64:de:16:39:7e:cb:23:86:20:6d:1a:09:
                    4b:e1:20:83:36:fb:46:03:d9:a7:dd:97:f4:a2:2a:
                    09:05:7e:b5:98:17:f6:bf:8e:4c:4b:c9:a9:5f:b3:
                    f7:bf:42:c7:c3:0e:73:d0:72:b7:28:4f:9a:df:7c:
                    74:a0:e5:a8:6d:4d:9b:a8:c2:a3:b1:4e:e5:ff:e3:
                    14:fa:59:d7:b0:f2:f9:5b:e2:09:34:f9:9c:3f:18:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:40:45:6D:50:FE:B7:A9:B1:CD:6A:FF:99:F2:4D:BD:F9:C6:16
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37352e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ef:0e:27:f8:ab:ee:76:59:63:9a:40:48:c6:16:f3:43:aa:
         e6:94:97:a8:93:c2:0a:2d:de:73:45:bb:fe:84:3b:1c:29:07:
         48:c3:cd:54:35:fd:bf:d4:4d:1b:f6:0b:78:b0:e6:8a:b4:6d:
         68:04:a8:c4:d3:b1:b5:30:9a:69:16:1e:51:c2:40:f6:0c:c9:
         2d:48:99:73:01:5e:59:e5:64:c8:4a:45:42:42:4d:da:8e:6d:
         8d:29:7b:ca:a1:60:55:36:66:b3:8f:64:5c:5b:f3:92:55:4a:
         d1:8c:09:93:82:17:9d:c0:f7:54:9e:e6:78:7c:ca:15:8d:36:
         44:57:c1:d3:9a:d6:1a:3e:ed:cd:77:63:1c:fb:09:1a:16:ec:
         ac:61:c7:f6:95:29:fd:10:22:29:38:8a:98:db:81:ec:8d:eb:
         e5:da:4b:79:e6:d0:70:d4:25:a1:3b:12:e5:08:dd:af:6a:aa:
         96:39:39:88:48:4d:4e:25:64:45:68:e2:87:7c:66:8e:d2:e3:
         2f:86:38:b0:f5:f1:49:25:46:0b:e8:4a:71:e5:78:37:43:a7:
         b6:89:12:eb:bc:f1:94:8b:b3:3b:2b:fe:a7:ab:5a:eb:25:77:
         5e:86:50:fb:38:d7:d0:ae:66:16:01:27:b8:54:7e:df:45:ed:
         ef:99:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 11:01:31 2024 by rpki-client on console-fra.rpki-client.org