Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          GcGWAg1evkMKVez4mUvAqfLUYCO3O32HtgjTFAscTvs=
Subject key identifier:   50:64:AC:54:79:CF:E7:D7:FF:48:72:E5:51:D1:B5:3C:93:67:C1:EC
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       0E7935FD5CC194DF71206AAF69226BAD7383C623
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
Signing time:             Mon 15 Jul 2024 22:15:00 +0000
ROA not before:           Mon 15 Jul 2024 22:10:00 +0000
ROA not after:            Mon 14 Jul 2025 22:15:00 +0000
asID:                     263758
IP address blocks:        161.238.236.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:79:35:fd:5c:c1:94:df:71:20:6a:af:69:22:6b:ad:73:83:c6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: Jul 15 22:10:00 2024 GMT
            Not After : Jul 14 22:15:00 2025 GMT
        Subject: CN=5064AC5479CFE7D7FF4872E551D1B53C9367C1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:14:bd:22:ce:75:0b:ec:81:f1:7e:99:11:
                    4e:82:b7:bb:ea:22:44:ac:67:04:0d:d8:e4:c1:bf:
                    96:23:18:3e:5f:b8:c3:d4:c9:f4:12:78:44:ee:51:
                    f6:94:bc:73:1d:d8:c9:da:87:c8:a4:f0:d3:8e:96:
                    75:2b:5e:ec:a7:31:a9:4a:cb:44:05:d1:9f:a2:ab:
                    d7:37:f3:de:e8:6a:f4:a2:77:3e:ea:4c:76:d4:a5:
                    5d:d3:47:78:c0:d6:f2:8f:ca:2b:f0:27:54:ea:0c:
                    18:fa:31:16:76:37:e3:e3:e7:d7:09:33:ad:8d:94:
                    b0:8a:b2:bf:c1:0b:73:f1:5b:7a:db:73:e7:49:54:
                    ed:3f:65:44:e8:1c:ee:11:0a:f9:c8:f1:dc:76:19:
                    b3:13:8e:c1:44:8a:e2:d4:e8:57:51:a8:27:a9:dc:
                    9e:25:90:7c:4c:01:47:63:93:2e:10:15:be:3c:59:
                    2b:9f:6f:9e:f2:cf:a8:b6:cb:cd:66:23:b5:46:65:
                    1d:26:0f:2c:59:36:f4:33:fb:7c:24:9c:ee:23:49:
                    fa:fd:fc:ef:77:7c:5d:da:b3:94:ed:9a:b9:b5:8c:
                    27:68:cf:e3:a3:69:7b:f9:bf:dc:2c:40:f9:47:f7:
                    b0:e3:4a:79:c4:b6:0e:18:99:54:78:ea:98:e2:43:
                    fd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:64:AC:54:79:CF:E7:D7:FF:48:72:E5:51:D1:B5:3C:93:67:C1:EC
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:86:a9:75:38:a1:b9:d4:4b:59:a2:08:e2:b9:cc:a1:ce:3c:
         d0:ea:4d:df:b5:bc:07:8e:f3:a2:6d:fc:a3:dc:cd:c3:86:37:
         1a:32:e7:85:90:43:07:28:5b:99:64:5d:b9:63:57:e2:7a:73:
         cf:9c:13:0a:2e:65:e2:02:55:54:e3:59:8b:ec:1d:5a:a4:ef:
         cf:a2:92:67:4b:4c:f3:6c:2b:05:e3:31:55:b3:31:6b:b7:e3:
         05:d6:55:e5:b0:13:80:1c:4f:98:78:e2:6e:8b:6f:1b:5b:7c:
         58:27:04:a2:12:32:83:ad:72:ad:c7:7a:21:05:9e:2e:64:e1:
         b2:35:26:fc:cc:9f:e7:7a:ff:a9:32:18:9c:05:8c:28:e4:7f:
         b8:e0:5b:38:96:5c:c6:cf:0f:bf:54:18:e0:dc:80:67:6c:cc:
         32:ca:1f:b0:96:f0:03:4c:e1:f2:e5:3d:22:88:4e:97:f6:f8:
         2e:e2:77:cf:db:46:c1:25:a0:15:fe:d3:04:15:1a:5d:23:2b:
         8d:0a:95:34:c7:da:b2:8c:f9:b6:00:eb:1e:6b:fa:6f:8f:d5:
         7b:96:34:56:b1:26:d2:12:e2:80:27:3e:ee:a2:e4:54:e4:3a:
         9b:56:89:5f:84:80:7f:46:1f:73:10:a8:bb:8e:41:02:bc:4a:
         f9:14:71:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 13:51:43 2024 by rpki-client on console-fra.rpki-client.org