Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
File:                     3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa (raw, json)
Hash identifier:          MYABjoG6xuP5hqGTdEgbJ+VowFFZKPmgl2lNB2akBZ0=
Subject key identifier:   B9:F0:5D:56:4C:08:EC:6B:7E:90:AE:6B:90:4F:9B:9B:9D:22:C7:D9
Certificate issuer:       /CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
Certificate serial:       48BCD0D267065846A9AB24E7CB08293482C85D66
Authority key identifier: 66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa
Signing time:             Tue 05 Mar 2024 18:19:08 +0000
ROA not before:           Tue 05 Mar 2024 18:14:08 +0000
ROA not after:            Tue 04 Mar 2025 18:19:08 +0000
asID:                     201341
IP address blocks:        168.90.244.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bc:d0:d2:67:06:58:46:a9:ab:24:e7:cb:08:29:34:82:c8:5d:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF
        Validity
            Not Before: Mar  5 18:14:08 2024 GMT
            Not After : Mar  4 18:19:08 2025 GMT
        Subject: CN=B9F05D564C08EC6B7E90AE6B904F9B9B9D22C7D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:37:14:00:5d:32:e1:44:39:85:3b:70:eb:3c:
                    8d:66:ab:66:3e:68:f7:83:74:72:62:6e:20:2f:4d:
                    7a:7e:64:85:2b:fe:bb:34:6d:c4:e6:88:33:93:c5:
                    80:60:f3:58:88:4c:57:00:c2:e3:02:84:c1:35:ca:
                    58:1f:ca:05:df:9c:08:66:41:d8:3c:7d:80:b8:f9:
                    af:51:a5:75:dc:12:da:6a:ea:9f:c7:61:ba:f3:5d:
                    8f:74:38:bc:ea:1b:40:0b:93:87:7c:f1:65:8e:b4:
                    a6:e8:a4:cf:48:69:57:87:73:3a:c7:0a:d8:39:a4:
                    b7:00:fb:9a:24:e8:46:c9:3a:4c:4a:c1:ea:bd:6e:
                    7e:1e:47:81:ee:c5:db:43:72:0d:cd:23:2c:ee:83:
                    a0:83:ab:67:98:00:80:61:2b:c0:bf:5b:10:32:66:
                    2c:79:0a:82:96:a1:fc:32:e9:ab:98:b2:02:9e:bf:
                    70:2a:c5:58:18:3a:e7:1f:27:5f:fc:a1:3b:1e:42:
                    c1:20:cf:bd:f2:c7:3c:7f:57:db:42:6f:f8:e3:04:
                    92:66:56:e3:35:3b:6f:5d:23:95:d8:f9:16:65:d4:
                    9d:c3:81:da:42:e8:91:30:20:eb:f6:b3:5f:a7:51:
                    74:4f:7b:48:ec:85:fe:b9:70:ed:12:22:b6:b3:c5:
                    15:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F0:5D:56:4C:08:EC:6B:7E:90:AE:6B:90:4F:9B:9B:9D:22:C7:D9
            X509v3 Authority Key Identifier:
                keyid:66:90:D3:CA:7A:AB:44:AA:19:56:8C:A2:CF:F8:AC:6E:E7:0E:DC:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6690D3CA7AAB44AA19568CA2CFF8AC6EE70EDCBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DEDFC3ADA868CCCC6A25DD6131FCB2037F11A91548D095F26BD6C8F11B47111/0/3136382e39302e3234342e302f32322d3232203d3e20323031333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:78:f2:ad:ff:46:1b:28:27:4e:22:8a:21:69:e5:47:87:
         e2:58:7a:d8:e4:8c:c4:e9:dd:d9:65:5c:0c:ce:d7:64:85:ff:
         47:6c:fe:36:e1:50:c7:ef:1b:20:31:f2:3a:43:5c:b2:5f:ba:
         86:d5:db:2e:a2:98:25:17:21:09:2f:09:10:b7:ce:6a:5c:bc:
         f9:bc:c2:c6:2d:6a:6a:19:34:8d:ad:92:5e:89:6f:0f:85:1f:
         dc:cd:2f:e7:15:d0:b5:0d:91:25:6c:12:a8:36:7a:27:6e:e3:
         2b:de:63:91:44:3f:d0:64:e9:ef:1d:fe:70:f9:0f:37:b7:78:
         91:02:74:a0:0e:79:d2:f0:bd:68:2d:e2:be:39:45:65:98:bd:
         25:af:d1:53:05:4c:3c:fe:b8:4c:de:19:43:32:60:a7:a2:6e:
         d6:d6:80:a6:0b:00:46:02:59:5c:cc:29:9e:a9:6d:24:49:45:
         91:cf:30:a9:da:45:4b:35:5c:a4:b1:01:16:24:4d:a2:c1:0e:
         5f:f1:70:cc:59:39:64:7a:0a:b1:95:9f:a6:67:e8:c0:67:80:
         20:0b:eb:d4:b8:18:d2:28:64:95:0f:29:c5:10:fe:f3:91:e5:
         bf:52:72:c5:7a:56:3e:fd:c8:37:19:45:f1:0f:e0:64:17:3f:
         7e:de:c0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org