Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
File:                     3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier:          fIEuOyUM1LZubCOw4LduUjnPhhzZmITk1u4f5xjbm14=
Subject key identifier:   52:AB:C0:28:2A:42:59:6E:7D:31:C0:C9:27:15:A0:7C:4A:FB:E2:B6
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       306C752A71CCAA3AB03EE84CFEC542792E5FFF80
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa
Signing time:             Tue 05 Mar 2024 17:41:05 +0000
ROA not before:           Tue 05 Mar 2024 17:36:05 +0000
ROA not after:            Tue 04 Mar 2025 17:41:05 +0000
asID:                     265746
IP address blocks:        128.201.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6c:75:2a:71:cc:aa:3a:b0:3e:e8:4c:fe:c5:42:79:2e:5f:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Mar  5 17:36:05 2024 GMT
            Not After : Mar  4 17:41:05 2025 GMT
        Subject: CN=52ABC0282A42596E7D31C0C92715A07C4AFBE2B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3b:29:ac:64:fc:76:dc:42:74:5c:78:3b:44:
                    82:c0:e7:2d:d9:27:c8:d5:77:d1:ac:d3:46:5d:96:
                    40:f7:9e:66:e5:8e:90:92:34:36:db:fb:96:e2:50:
                    72:b0:61:fc:8c:58:85:e4:a6:40:a8:12:c3:37:18:
                    13:8d:3e:3d:34:a9:3e:c7:85:9d:8f:13:b3:f1:2b:
                    29:66:37:6f:c6:4e:26:6a:5d:00:0c:98:91:85:67:
                    c0:fb:2d:eb:af:77:67:15:a0:a6:4b:de:0d:3a:ad:
                    78:e2:ce:fb:ca:2a:93:60:82:9c:2a:d2:b1:b6:87:
                    f2:63:a5:83:e2:22:f7:dd:38:d9:e2:a0:79:b2:3f:
                    4f:c8:12:ab:15:4d:07:27:44:34:b9:a1:a8:50:28:
                    6c:2e:8c:96:74:c4:0d:29:95:64:e1:b7:d4:1e:69:
                    7d:06:47:c9:d2:86:54:05:3b:a4:6b:0a:da:44:9d:
                    96:1c:cc:f1:8d:52:4b:77:2f:da:34:4f:67:d0:3d:
                    6b:d4:30:88:81:ea:d3:7d:e9:3b:e8:f6:28:3d:23:
                    8b:97:06:92:f1:e5:b8:2d:1a:3a:70:ac:f8:f2:01:
                    ae:1c:81:1c:91:ff:67:5e:51:00:42:4c:cf:b3:1d:
                    e1:03:89:91:90:2a:6a:3b:63:f8:69:fa:a1:04:4c:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AB:C0:28:2A:42:59:6E:7D:31:C0:C9:27:15:A0:7C:4A:FB:E2:B6
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136382e302f32342d3234203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fc:89:8a:f0:1c:a1:d7:bd:98:7b:22:b1:07:ae:f0:41:c7:
         c7:86:80:e8:df:b6:2e:6a:c5:4a:9f:43:db:cd:8b:62:1b:0e:
         79:4e:78:50:17:6e:9c:6b:ef:d8:c0:b5:4f:33:c6:33:da:f3:
         00:e9:3b:e4:86:8f:f4:2e:27:ce:7f:10:2f:55:66:75:99:4b:
         35:69:15:49:92:29:fd:ad:cf:01:5f:67:a8:11:ce:f9:8b:68:
         ca:71:f2:e8:0d:7d:67:49:20:04:9a:b9:cd:f4:b3:ee:e7:7f:
         eb:82:6b:97:52:d9:fb:56:36:83:d1:07:8c:75:f0:f9:ee:18:
         06:2e:68:c6:c8:b1:0f:2a:85:1e:18:91:0e:01:5b:b2:85:20:
         36:7f:59:47:cf:b2:ba:e3:b0:3a:9e:18:74:84:ff:9a:11:3b:
         7d:ff:0e:e6:f9:45:a7:44:2c:b5:cd:aa:25:d4:51:d0:af:66:
         73:eb:6b:7e:21:d4:ff:f8:52:7a:55:c6:7e:7e:1a:0e:6d:d6:
         60:3e:b8:fd:f9:56:58:d3:fe:c2:0b:d7:83:18:36:74:6a:fb:
         b3:25:d4:ba:99:d7:c0:9a:e3:60:62:cb:78:c5:e2:83:c5:78:
         b5:85:5b:c2:0d:bb:1a:f8:f9:bd:f0:cb:8a:39:13:22:e4:cf:
         36:0b:46:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:20:54 2024 by rpki-client on console-ams.rpki-client.org