Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa
File:                     3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa (raw, json)
Hash identifier:          x25FYd07JLrJX4xK/w8cgrMdmOgrVLxPCpEMi2TeCEs=
Subject key identifier:   67:06:F8:82:7F:E8:75:10:3A:80:A8:9D:9C:AB:1A:84:B3:C5:12:A6
Certificate issuer:       /CN=FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01
Certificate serial:       08AE566D6FDA64CFD27D08D214F7912BB3A83223
Authority key identifier: FF:70:5E:6B:16:A1:1D:C4:F8:2D:F3:8B:FA:1F:A8:80:41:A8:AA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa
Signing time:             Tue 05 Mar 2024 17:43:28 +0000
ROA not before:           Tue 05 Mar 2024 17:38:28 +0000
ROA not after:            Tue 04 Mar 2025 17:43:28 +0000
asID:                     264697
IP address blocks:        168.232.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ae:56:6d:6f:da:64:cf:d2:7d:08:d2:14:f7:91:2b:b3:a8:32:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01
        Validity
            Not Before: Mar  5 17:38:28 2024 GMT
            Not After : Mar  4 17:43:28 2025 GMT
        Subject: CN=6706F8827FE875103A80A89D9CAB1A84B3C512A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:b1:68:51:0f:ce:1e:dd:04:34:02:58:d4:
                    9c:a8:15:6a:67:cb:9f:b3:50:48:be:a8:e1:4c:e6:
                    84:1d:2c:34:9e:03:53:93:8a:89:61:78:e5:02:04:
                    6a:9f:fb:ba:93:ba:b7:73:5b:31:30:da:dc:a5:97:
                    7b:9c:af:71:3f:84:f3:fe:56:b1:09:a2:c0:6a:31:
                    c7:89:8a:29:0a:a1:55:e8:a1:52:ee:a5:c5:f9:17:
                    fc:67:ae:c1:2b:95:31:4c:f4:da:9e:64:b4:48:51:
                    a9:d1:7a:7f:23:d9:2e:06:d9:fc:89:9e:ed:15:f6:
                    a6:22:ff:b7:0f:cd:c2:cb:70:44:49:c8:77:a0:4c:
                    45:5d:3c:e2:39:5c:8b:8c:6a:ee:35:65:1b:8f:5d:
                    d5:4d:c0:17:bd:a5:e4:ec:0b:99:76:5c:85:7b:d9:
                    1b:01:af:df:9f:60:88:61:be:69:74:00:ee:b2:8f:
                    80:1b:34:a8:74:97:77:24:89:f6:20:25:e8:a7:f9:
                    f3:d9:d7:29:90:ed:45:b1:01:d0:13:57:20:a3:3a:
                    31:72:3b:9b:c7:fb:5c:c2:11:e3:24:3b:df:3d:29:
                    12:94:b5:0a:6c:bc:68:0e:97:d7:f5:d5:62:e3:76:
                    ac:34:c4:39:03:ba:54:ef:9b:cd:2b:a8:40:ef:9c:
                    95:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:F8:82:7F:E8:75:10:3A:80:A8:9D:9C:AB:1A:84:B3:C5:12:A6
            X509v3 Authority Key Identifier:
                keyid:FF:70:5E:6B:16:A1:1D:C4:F8:2D:F3:8B:FA:1F:A8:80:41:A8:AA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:04:76:73:ad:37:b9:36:b7:f0:00:f5:1b:72:30:e5:18:3f:
         dd:07:f9:ff:de:71:f1:cf:30:f3:05:0b:d3:24:d2:c4:0f:82:
         a0:ea:9b:14:f6:42:6a:6d:07:e5:64:6a:3c:3d:9a:8a:61:34:
         44:36:26:28:26:47:ed:a3:9b:18:6a:e8:78:50:7a:91:0d:ff:
         99:3f:cd:8b:5b:4c:a9:b6:16:50:cc:b7:59:32:20:ed:ae:43:
         d4:91:0d:f5:db:7c:d7:91:f5:e5:b7:2d:8b:c2:01:4c:42:25:
         74:ea:66:12:3f:2f:b4:dc:ec:e2:4e:32:9b:ac:1e:c2:51:1f:
         e4:02:ac:aa:2f:a1:72:b3:95:c9:cd:b2:55:ef:31:a5:81:1a:
         b9:0c:9d:cd:41:b6:c6:a2:41:88:f2:19:76:55:da:82:3a:93:
         9b:0b:2f:83:89:4e:9b:69:a9:08:c9:e4:82:7f:bb:ed:1e:2b:
         b9:ce:52:4d:3a:f8:7e:5e:10:85:10:61:6c:ae:f9:b5:8e:e6:
         b9:ef:ca:91:7a:09:d5:94:72:2e:8b:5d:2f:b0:93:44:f7:69:
         87:f6:9c:16:98:f6:86:8e:3a:f5:26:f1:7e:cc:9f:00:17:0d:
         79:21:8e:59:b4:30:a9:6d:42:40:b3:85:74:62:a2:97:72:54:
         ea:2f:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:40 2024 by rpki-client on console-fra.rpki-client.org