Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
File:                     3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa (raw, json)
Hash identifier:          Jyf5oWOaulkKi10aKnCfKRJXtl0kcWXLQbL84ABnRq4=
Subject key identifier:   BE:66:C1:09:A7:AB:47:43:CF:8C:98:EA:B1:2B:C7:09:56:A4:9D:CB
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       1636FF33018AB9B20CEEB363FBDD00218C0EB6BB
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
Signing time:             Tue 05 Mar 2024 17:48:46 +0000
ROA not before:           Tue 05 Mar 2024 17:43:46 +0000
ROA not after:            Tue 04 Mar 2025 17:48:46 +0000
asID:                     263801
IP address blocks:        168.196.244.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:ff:33:01:8a:b9:b2:0c:ee:b3:63:fb:dd:00:21:8c:0e:b6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Mar  5 17:43:46 2024 GMT
            Not After : Mar  4 17:48:46 2025 GMT
        Subject: CN=BE66C109A7AB4743CF8C98EAB12BC70956A49DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5a:df:c9:e6:a3:07:0f:95:d0:c6:9e:81:96:
                    06:6b:2c:b9:6a:c8:1b:5e:93:e3:1b:88:02:53:db:
                    44:3a:9c:02:93:f6:db:6e:76:00:20:84:2c:54:66:
                    ba:ca:85:5f:54:db:17:37:47:89:af:66:ce:c6:4f:
                    28:ac:6f:ef:e4:c7:c7:c7:12:bf:f4:b0:bd:44:51:
                    bc:37:10:29:0e:97:18:66:b0:63:32:65:c1:56:1d:
                    3a:86:67:de:53:d1:60:24:f5:d0:fd:7d:99:51:b9:
                    d8:b0:38:f9:c1:e3:42:2f:56:6e:8f:93:5a:dd:df:
                    0f:80:b2:2c:15:61:9f:35:7b:3f:9b:5f:4c:4a:02:
                    00:00:a5:59:93:15:0c:23:61:f9:60:9a:96:41:ed:
                    6d:6b:1a:ef:07:25:e8:11:3f:2c:83:66:cc:91:b9:
                    1b:ca:f1:b8:c9:5d:3a:24:19:36:a7:13:49:da:d0:
                    1c:d6:58:03:08:35:ff:18:09:46:14:9a:c2:e9:25:
                    49:ba:8a:d6:60:b8:f1:82:9e:19:8f:93:e3:ae:9b:
                    7f:a4:c7:e5:5c:1f:3a:e3:60:22:d8:be:a4:4f:d0:
                    07:c2:27:0a:d2:6d:3a:7d:f6:1d:b8:44:ba:1b:30:
                    99:a5:8b:49:af:7c:c2:34:54:49:66:10:a8:6e:52:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:66:C1:09:A7:AB:47:43:CF:8C:98:EA:B1:2B:C7:09:56:A4:9D:CB
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:58:cb:9c:86:e7:52:35:d0:1c:b8:cd:8d:b9:9e:e2:9d:bc:
         ea:0d:4b:89:69:ca:c5:37:af:6f:ff:9d:d6:c5:5d:f4:01:af:
         f3:2d:a8:68:a9:e6:50:4f:8d:35:ce:f1:f2:58:6e:cb:a4:b5:
         cb:e7:40:89:0c:f6:07:1c:16:22:78:79:75:29:ca:1f:01:03:
         cd:51:0d:13:4d:68:75:76:b8:39:36:3a:dd:1e:60:a7:7c:fc:
         36:a2:c2:ed:6d:7e:e7:15:a1:bd:8d:bf:e6:b1:03:9d:35:04:
         a0:59:db:c2:d5:9e:9b:26:81:4a:19:83:a6:d9:b0:db:08:4e:
         ba:f3:3b:6c:23:20:b7:47:eb:36:01:89:cf:68:f0:6e:85:dd:
         0f:d5:ef:28:11:85:e2:c1:6d:fa:6f:d9:df:78:70:a3:0c:97:
         fc:76:f0:55:24:0f:38:30:6a:8a:ec:d4:ef:4d:a2:8c:28:14:
         00:f9:1b:1e:8b:fe:be:65:3b:64:89:95:cd:d2:8e:50:f3:d3:
         04:2d:21:69:e8:76:76:82:57:f1:14:0a:23:70:c6:85:70:ac:
         5a:44:9d:19:73:1a:ff:f6:03:c2:52:c1:61:b4:22:34:e9:7c:
         5b:4d:e9:de:0a:1c:1c:ef:f4:ee:0c:6d:60:bb:76:22:3b:ef:
         88:ea:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org