Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e3139342e3230342e302f32322d3234203d3e203238303735.roa
File:                     3136382e3139342e3230342e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier:          sFVQqXtFuntn6FKkjtRCbP7Q1RV54TUe+EVO4AiGdOY=
Subject key identifier:   97:15:EC:BD:39:71:92:29:95:7D:3D:9F:0B:C0:40:7D:01:CA:78:F6
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       776E50A386ECBF97A447FDBBD91607DBEE170BCB
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e3139342e3230342e302f32322d3234203d3e203238303735.roa
Signing time:             Tue 05 Mar 2024 18:11:50 +0000
ROA not before:           Tue 05 Mar 2024 18:06:50 +0000
ROA not after:            Tue 04 Mar 2025 18:11:50 +0000
asID:                     28075
IP address blocks:        168.194.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6e:50:a3:86:ec:bf:97:a4:47:fd:bb:d9:16:07:db:ee:17:0b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Mar  5 18:06:50 2024 GMT
            Not After : Mar  4 18:11:50 2025 GMT
        Subject: CN=9715ECBD39719229957D3D9F0BC0407D01CA78F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:d9:17:65:74:d3:e8:1f:f9:a1:7c:67:dc:
                    c5:fc:d4:ed:10:c0:26:de:50:8b:02:aa:81:7e:c2:
                    0d:04:9d:93:2f:7f:81:58:09:56:46:22:dd:21:9a:
                    2e:1d:25:02:76:72:f2:72:d8:1e:77:5c:1f:de:7b:
                    03:09:24:83:cc:b7:91:3e:f4:cf:fd:1f:c0:a3:3a:
                    8e:db:89:54:6c:e1:86:83:d1:ce:9d:bd:d6:74:e9:
                    de:8f:fe:03:db:57:5b:6e:8f:76:32:4e:10:c1:78:
                    ed:38:1f:82:dd:e0:e1:6a:83:a7:ed:53:81:6a:af:
                    cf:38:fb:eb:44:b3:60:b6:86:fb:58:58:aa:35:80:
                    ff:d0:f8:27:7d:6f:f9:b1:2f:1a:da:07:b7:28:e2:
                    e0:f1:22:df:26:2b:26:5e:6f:2e:bc:2b:db:48:a1:
                    62:fc:73:f4:a8:b1:97:03:10:9e:ea:9d:04:cc:b0:
                    0c:fc:3b:b2:10:72:bb:1a:6d:b9:13:a8:12:8b:b5:
                    82:66:b5:8b:1c:31:52:b3:cb:38:f6:8f:d4:2f:5c:
                    6b:9d:84:ab:1c:4d:d2:b0:7f:75:7e:60:a4:d3:69:
                    9d:fc:1b:32:46:7d:d7:9e:c7:eb:d3:bf:86:19:3c:
                    13:ed:43:b8:40:53:0f:5b:25:83:34:cb:e7:d5:ca:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:15:EC:BD:39:71:92:29:95:7D:3D:9F:0B:C0:40:7D:01:CA:78:F6
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e3139342e3230342e302f32322d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:c5:9a:ce:f6:ea:f1:a5:d8:89:d7:27:8f:38:12:9f:82:35:
         6a:e9:95:f1:7a:a9:35:2f:58:3d:d0:61:fa:6a:e9:90:0d:f0:
         82:20:74:0b:80:8a:d0:06:2a:98:11:f5:43:13:b3:04:eb:c1:
         f4:45:bf:cd:60:92:eb:37:f4:18:72:2f:93:09:5c:08:ee:b1:
         45:46:e1:32:6e:cb:b6:c2:07:35:7f:99:07:39:90:0b:fb:05:
         88:eb:79:64:31:eb:3c:5f:ec:62:7d:03:5e:f3:3f:83:f2:36:
         74:9a:d2:6e:69:07:fb:ef:28:1f:a6:04:ee:08:5a:79:ba:ce:
         e7:34:15:bb:a5:e7:27:be:cc:b9:9e:48:9d:e0:69:df:57:85:
         89:63:56:ae:66:5e:51:b3:4e:db:91:03:96:58:3f:7e:04:a4:
         dc:1e:a2:8d:ef:12:d3:9e:7b:8a:10:84:53:d2:cf:b7:29:be:
         00:09:65:c3:cf:77:35:5b:66:4b:6f:95:a1:52:f6:d6:37:2a:
         f5:38:b2:e9:5a:5d:12:eb:82:b2:f9:d1:db:df:b5:95:32:1e:
         5d:6c:46:ea:1f:e9:75:4a:8d:e2:39:bb:6d:07:e3:8c:e6:65:
         8f:45:35:cd:83:36:93:81:c0:6b:9b:4c:9b:f9:79:a6:22:e0:
         de:22:4f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org