Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa
File:                     3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa (raw, json)
Hash identifier:          bMPyw182lTSJw8N+SbN9uj6md/1x7XNzTEwhR/Fmu9k=
Subject key identifier:   2E:D6:69:ED:9D:36:FC:8F:14:CC:1C:19:C9:24:6C:1C:87:F9:A2:6D
Certificate issuer:       /CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
Certificate serial:       55DBE430307B473017088490CBD02E8F9431B837
Authority key identifier: E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa
Signing time:             Tue 05 Mar 2024 17:47:12 +0000
ROA not before:           Tue 05 Mar 2024 17:42:12 +0000
ROA not after:            Tue 04 Mar 2025 17:47:12 +0000
asID:                     262145
IP address blocks:        168.228.48.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:db:e4:30:30:7b:47:30:17:08:84:90:cb:d0:2e:8f:94:31:b8:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E7900D5ABF476151127E597F28F3B14E61AFB84C
        Validity
            Not Before: Mar  5 17:42:12 2024 GMT
            Not After : Mar  4 17:47:12 2025 GMT
        Subject: CN=2ED669ED9D36FC8F14CC1C19C9246C1C87F9A26D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:15:47:7f:28:f8:36:5b:21:bc:87:c9:a2:
                    38:52:af:f1:75:31:4f:92:bb:0a:a3:7e:3e:16:d0:
                    da:2e:fc:8a:1f:2d:6f:19:e6:ce:e3:02:38:19:e2:
                    f1:b0:9a:75:fd:16:e8:98:97:cf:2d:a3:90:e6:92:
                    ee:f4:8e:88:6d:13:75:b9:56:8f:38:bb:eb:b2:f1:
                    cf:c9:36:a4:08:f2:13:2a:9f:47:b6:48:7e:fb:cd:
                    35:57:32:93:06:1a:65:cb:86:1f:4e:85:97:7c:6f:
                    e8:17:7e:4b:46:a3:ed:67:9b:fe:5d:3f:b7:47:85:
                    b6:8f:00:dc:78:32:73:02:85:c2:54:3a:82:9c:be:
                    dd:da:89:4c:8b:01:3d:15:9e:6d:d6:ce:e3:2a:24:
                    0e:bf:12:cf:1b:51:4b:09:7b:5e:36:11:50:2c:f6:
                    0e:17:08:9b:64:b4:7f:ab:49:66:22:6a:9b:87:2f:
                    da:87:97:36:fe:e7:80:41:3a:a2:62:8c:6c:20:d2:
                    6d:16:43:75:3c:6a:f9:05:bc:34:3c:6c:22:c3:a7:
                    cd:7a:c1:c7:4f:e1:c5:4a:5f:91:78:49:33:f3:af:
                    a9:68:46:d1:8b:55:4a:33:3b:25:ce:4e:1e:77:83:
                    33:96:54:b7:49:2e:55:d5:29:87:0a:a3:b3:ae:1d:
                    14:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D6:69:ED:9D:36:FC:8F:14:CC:1C:19:C9:24:6C:1C:87:F9:A2:6D
            X509v3 Authority Key Identifier:
                keyid:E7:90:0D:5A:BF:47:61:51:12:7E:59:7F:28:F3:B1:4E:61:AF:B8:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E7900D5ABF476151127E597F28F3B14E61AFB84C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76251F8493AFFAFEFB3D1C7C20D2F92267F838EFE6AB75B30207A170B1AF2609/0/3136382e3232382e34382e302f32322d3234203d3e20323632313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:32:c4:c1:50:02:aa:c7:d4:be:b9:02:9b:ee:82:12:7e:
         7d:6e:3d:aa:fa:cb:c8:c2:ec:56:8e:23:9e:e7:86:06:23:7d:
         88:c3:b0:72:44:ae:07:00:5e:d2:1b:8d:b9:f2:b0:05:e1:7d:
         c2:68:88:7b:ae:03:6b:b6:a2:b4:9b:0d:0e:de:0b:1f:d9:5f:
         14:6e:8e:15:63:91:34:ae:dd:a3:6f:cb:41:54:3d:55:06:59:
         f3:13:30:42:83:6b:45:b2:7a:18:ef:6a:d8:88:f1:fd:e2:13:
         92:ba:3d:fc:49:04:1b:40:6a:04:52:f6:67:07:0c:e6:a0:88:
         b1:3a:1e:af:0c:8e:de:78:95:e6:3f:2d:42:1e:4a:e5:2c:73:
         40:77:d4:41:f6:cd:f5:25:7a:ea:4c:1e:dd:fd:b4:4e:c6:ad:
         b9:fa:11:7f:92:31:f8:26:2f:c7:55:41:b7:8b:ec:c8:69:fa:
         a7:ee:3c:9a:3d:fa:fd:ef:b9:7f:eb:b3:41:de:5b:e2:e7:c3:
         49:2e:6a:2e:51:fd:82:ba:fb:57:22:e2:41:d8:ee:f3:dc:5a:
         ab:c9:82:b9:7f:db:c0:2c:15:a0:ec:20:f8:7e:7a:99:35:19:
         41:b5:67:14:08:20:ef:ce:f2:ad:ca:6d:ac:d2:50:2c:84:1a:
         3d:3e:77:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 07:49:49 2024 by rpki-client on console-ams.rpki-client.org