Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa
File:                     3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa (raw, json)
Hash identifier:          61VRsF2zWhWEx55b1B8/6QU6BCFVUfr8ElXMsgPuWCQ=
Subject key identifier:   C9:6A:28:78:22:9D:D9:22:A0:B8:B7:69:9B:B9:95:FF:E9:FC:D6:EC
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       21F8115204C2B44CF9D3B71F7D4999CF564CFF56
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa
Signing time:             Tue 05 Mar 2024 18:13:24 +0000
ROA not before:           Tue 05 Mar 2024 18:08:24 +0000
ROA not after:            Tue 04 Mar 2025 18:13:24 +0000
asID:                     263735
IP address blocks:        168.227.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f8:11:52:04:c2:b4:4c:f9:d3:b7:1f:7d:49:99:cf:56:4c:ff:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Mar  5 18:08:24 2024 GMT
            Not After : Mar  4 18:13:24 2025 GMT
        Subject: CN=C96A2878229DD922A0B8B7699BB995FFE9FCD6EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:73:a1:ac:1d:94:e0:b1:20:78:ca:1d:82:
                    e9:ef:6c:f6:22:0c:cb:c2:92:03:b5:19:37:19:e6:
                    15:25:f6:3c:f6:51:4c:9a:a5:36:46:a9:0d:bc:4e:
                    df:5b:36:26:ee:89:59:2d:11:95:ee:e3:88:55:37:
                    fe:21:61:03:05:37:7b:fb:43:79:0d:04:b5:97:f5:
                    07:b4:9c:ea:7e:3c:b7:e0:47:5f:3c:60:41:14:d7:
                    8a:e0:fb:fb:d1:0c:64:36:96:fd:9c:3b:04:ff:f3:
                    a6:d3:54:73:3d:04:43:12:80:4a:3b:6b:c0:34:f2:
                    31:55:41:3d:9f:af:7d:65:14:5f:11:69:1f:da:dc:
                    0a:65:a6:2f:08:2e:63:54:81:a2:76:13:9b:b0:f7:
                    76:ac:3c:6d:1e:be:62:e0:67:c2:b5:49:44:c8:02:
                    54:53:47:93:df:4b:13:ba:6d:73:a2:61:63:1f:9d:
                    37:8b:6b:a6:44:3f:d7:78:fc:35:01:1a:21:a9:ad:
                    e4:5f:7b:3f:7c:33:8c:b8:6e:a9:97:43:c0:cc:55:
                    37:94:b6:16:a8:80:0f:49:5e:da:14:a5:68:a1:c0:
                    1b:c5:29:77:2c:bb:8e:18:94:16:98:39:e5:15:b2:
                    3a:48:22:0c:ad:c4:bd:16:52:c6:35:0e:a5:1f:60:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:6A:28:78:22:9D:D9:22:A0:B8:B7:69:9B:B9:95:FF:E9:FC:D6:EC
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:fc:b7:22:2f:c4:de:7f:42:b6:45:8a:7d:4d:93:20:5f:1d:
         e5:c5:22:3b:1f:5c:6c:54:fc:1f:97:f6:a9:b5:bf:e8:83:b8:
         4f:ce:b4:c4:9a:24:4f:ed:16:04:b2:8b:15:87:ee:74:63:0e:
         04:50:97:de:4c:f6:03:96:8e:0d:40:f9:84:02:84:98:f1:bb:
         a5:48:22:13:f2:f8:59:24:19:9c:80:7e:6b:87:d2:94:fc:40:
         9f:a1:f5:98:14:d8:26:a6:dd:5e:8e:25:5a:08:44:ca:b1:99:
         05:44:26:f9:7d:09:8d:d4:df:2e:32:0f:dd:41:3c:22:bb:fe:
         93:bc:b2:00:90:d0:b3:ec:5b:05:11:d9:15:a7:88:75:3b:2a:
         50:5a:8c:fd:bf:9d:60:58:7e:d8:6e:6b:94:f7:25:0d:c2:4b:
         19:17:66:8f:b6:d2:e8:54:10:6b:75:a9:97:b1:34:dd:63:28:
         e3:0b:56:aa:ab:4b:01:91:22:c4:ba:6b:a2:3a:2c:81:ac:e8:
         01:83:da:85:45:d4:97:d6:a3:17:dc:aa:ab:7b:ea:20:cf:76:
         9e:3e:11:2a:a6:87:de:9e:c3:45:2d:69:bc:e8:49:53:6e:00:
         ca:6b:c7:20:0b:c1:ab:b2:fc:3b:69:3c:35:19:aa:f8:5b:67:
         9f:42:76:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 23:48:16 2024 by rpki-client on console-fra.rpki-client.org