Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136392e302f32342d3234203d3e20323635373436.roa
File:                     3132382e3230312e3136392e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier:          AiQyPdWpVL2cyGL34DdJY69fuqIZlIXVf1xfKt2GO/Y=
Subject key identifier:   B1:9D:5D:43:1D:08:15:A8:58:67:54:04:10:49:EF:22:A3:82:E7:FC
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       6C9206F9DD5F349917DF46C8C8A9595D614BB190
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136392e302f32342d3234203d3e20323635373436.roa
Signing time:             Tue 05 Mar 2024 17:41:05 +0000
ROA not before:           Tue 05 Mar 2024 17:36:05 +0000
ROA not after:            Tue 04 Mar 2025 17:41:05 +0000
asID:                     265746
IP address blocks:        128.201.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:92:06:f9:dd:5f:34:99:17:df:46:c8:c8:a9:59:5d:61:4b:b1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Mar  5 17:36:05 2024 GMT
            Not After : Mar  4 17:41:05 2025 GMT
        Subject: CN=B19D5D431D0815A8586754041049EF22A382E7FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6b:06:06:e7:48:eb:36:e9:fb:72:36:72:19:
                    d4:b4:ab:b3:b1:20:20:83:41:f2:17:28:e2:1d:7d:
                    94:8d:2f:0f:d4:f6:9c:e4:62:2a:37:8e:29:ec:21:
                    4a:dc:b6:09:7f:b4:d7:7d:db:af:e0:00:c7:95:bb:
                    ab:52:5d:ee:9e:a7:7e:24:a9:61:6c:2a:f3:39:52:
                    a1:dc:f9:85:78:84:51:83:42:ba:7a:0b:9b:87:f9:
                    b7:c3:84:a1:ae:b8:27:5c:8f:85:d7:07:0f:ec:b3:
                    29:4c:b2:3e:18:e3:b5:03:3e:38:67:03:44:7d:0f:
                    03:8b:36:10:c1:c0:7e:7f:a9:57:e9:73:f7:94:ad:
                    ba:fe:b2:ce:a0:e7:f4:5a:a9:d6:9a:6d:ee:44:dc:
                    11:26:9f:6d:5d:eb:09:6b:e6:c0:b1:28:16:cd:46:
                    8b:06:77:0d:e6:6f:32:8b:e1:cf:e1:0c:14:68:09:
                    84:55:68:d5:e3:ea:fa:3b:43:20:de:82:52:5b:05:
                    02:73:be:f0:a9:7d:ed:a5:20:9a:4b:bc:ad:af:21:
                    67:42:70:de:de:ac:88:11:34:3c:94:f0:b7:be:d2:
                    da:27:13:d6:1e:6b:83:e1:56:13:0b:6f:20:ad:bc:
                    2f:d9:f2:d1:03:d0:07:b7:5b:ed:f8:34:79:88:a4:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:9D:5D:43:1D:08:15:A8:58:67:54:04:10:49:EF:22:A3:82:E7:FC
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3136392e302f32342d3234203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:37:04:5e:20:aa:23:13:35:49:1e:a7:c9:c9:ee:9d:1f:81:
         98:7d:f5:2c:e2:9a:39:fb:a6:1e:ec:ff:c3:76:df:00:51:a8:
         8f:f2:3d:08:9b:b9:55:35:6c:e0:63:62:27:ef:2f:c7:36:63:
         aa:e0:0e:f2:3d:6d:4b:14:10:3b:10:34:48:66:e4:69:c0:b4:
         30:38:f1:3f:16:15:9a:62:59:af:65:17:a8:04:25:c1:dc:5d:
         1d:f1:88:26:52:e1:e9:8f:92:e4:5e:b1:ff:6e:d9:30:4e:79:
         71:cf:2c:17:5d:f8:8b:2d:26:03:7c:78:a6:cd:5c:99:ba:8c:
         ba:69:6b:a5:ae:f8:60:9f:62:43:f4:0a:29:ff:6d:80:3f:a7:
         44:a7:04:89:4b:11:7a:3d:fc:2f:cf:c3:6e:74:69:23:26:9d:
         dc:62:f7:f4:25:0d:06:29:70:53:f4:ed:f2:b3:4e:4c:a7:65:
         27:cf:24:95:b3:fc:c7:f7:8f:de:f0:6e:ac:db:0d:99:82:9b:
         e4:98:ad:98:24:b6:a9:73:d5:a7:6e:04:82:78:44:15:0f:d8:
         b5:d3:c2:c5:b1:63:b6:70:b9:60:d6:6a:6c:7a:7b:b0:63:e2:
         f8:a8:4f:fe:c3:3c:d6:9c:db:e6:a0:1a:fe:bd:d8:cb:02:f3:
         dd:6b:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:43:27 2024 by rpki-client on console-ams.rpki-client.org