Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa
File:                     3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa (raw, json)
Hash identifier:          jr4lOy61g+2MmvwSrslPfXTt6n4lEwHh1wVuUb7xglk=
Subject key identifier:   64:D9:5E:F2:C3:15:C8:4A:B0:D7:2C:BE:E1:72:70:0B:D1:A1:07:34
Certificate issuer:       /CN=8511BF5F476710251836E1F3F5006C888AE1B68A
Certificate serial:       54BAFBE85D54A7D8CA8BCE8DB9BF8B414FD45587
Authority key identifier: 85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa
Signing time:             Tue 05 Mar 2024 18:05:10 +0000
ROA not before:           Tue 05 Mar 2024 18:00:10 +0000
ROA not after:            Tue 04 Mar 2025 18:05:10 +0000
asID:                     263815
IP address blocks:        167.249.192.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ba:fb:e8:5d:54:a7:d8:ca:8b:ce:8d:b9:bf:8b:41:4f:d4:55:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511BF5F476710251836E1F3F5006C888AE1B68A
        Validity
            Not Before: Mar  5 18:00:10 2024 GMT
            Not After : Mar  4 18:05:10 2025 GMT
        Subject: CN=64D95EF2C315C84AB0D72CBEE172700BD1A10734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:a8:73:3f:4b:bf:60:dd:bf:22:fb:cc:62:45:
                    ba:8a:ec:54:01:77:f9:88:49:28:6b:b2:c6:59:5a:
                    ac:14:d4:fb:1c:7b:72:be:08:ca:37:92:c9:db:0f:
                    d5:65:d8:65:b8:91:67:40:1c:b7:cf:cb:8a:ed:a9:
                    06:68:d2:bb:68:7f:bc:d3:db:7d:8d:6f:34:49:f3:
                    82:54:b5:43:82:68:26:51:ba:2f:65:cb:82:bb:bf:
                    0a:2a:04:d5:b5:de:22:00:ca:2d:b0:c4:33:e8:d2:
                    ed:a4:1a:f1:ed:12:92:0c:1c:11:09:d1:08:e9:17:
                    21:36:c4:80:a4:9c:67:74:4b:71:8b:80:e3:68:86:
                    cb:af:ef:1f:67:b9:46:bf:98:b1:72:70:dc:c6:eb:
                    ad:dd:78:41:cd:73:96:44:5a:a9:77:8b:5f:d7:0a:
                    3c:49:52:74:11:3c:44:ce:7d:0c:d6:86:e9:2b:2e:
                    68:94:d9:57:ca:c3:98:c2:11:c7:f1:0f:3b:30:57:
                    89:da:b4:6e:2a:10:cf:c3:4a:b0:6f:b1:eb:ba:f1:
                    45:3f:13:44:18:62:4d:b4:78:16:1b:1f:4f:76:4a:
                    f3:35:ea:56:43:79:11:ab:23:3c:ee:c1:87:87:02:
                    05:bf:73:a6:7a:b3:f7:87:e0:c1:52:5d:2b:10:b6:
                    20:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D9:5E:F2:C3:15:C8:4A:B0:D7:2C:BE:E1:72:70:0B:D1:A1:07:34
            X509v3 Authority Key Identifier:
                keyid:85:11:BF:5F:47:67:10:25:18:36:E1:F3:F5:00:6C:88:8A:E1:B6:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/8511BF5F476710251836E1F3F5006C888AE1B68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8511BF5F476710251836E1F3F5006C888AE1B68A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/799DB12D73062B2D48227BEA3C53AC4060B0EF9A32E18BAA7BC8071B27988F40/0/3136372e3234392e3139322e302f32322d3232203d3e20323633383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         50:35:67:fc:68:b5:7e:40:42:fa:b2:51:9e:19:62:27:1a:2b:
         16:e1:41:cc:11:16:93:10:94:ec:3e:87:c7:6b:09:b6:6b:60:
         c2:22:53:2e:3b:7f:8f:ac:08:7b:73:46:dd:77:a8:50:24:a1:
         16:d1:d3:69:66:b0:51:d3:70:0b:7b:ab:8c:ee:0a:96:e9:ad:
         96:c0:40:63:e9:2e:f9:ab:89:12:71:4e:64:1e:da:e1:ff:f3:
         f3:b3:b5:41:4c:22:b1:e2:1d:d7:81:46:d3:25:a9:2f:f3:6f:
         fe:fc:15:c0:c4:57:d3:79:94:7d:17:46:1c:6a:f8:80:dd:ef:
         19:0c:d1:c2:64:34:1b:ab:df:05:a7:fd:52:df:9c:fc:a7:96:
         f6:5b:8e:1e:c9:b4:ce:0b:bb:70:ff:8b:69:51:ae:3c:8e:e8:
         8b:e2:00:d5:b1:6f:cd:77:28:07:67:64:45:97:26:6d:0f:59:
         68:ac:07:49:d6:38:15:85:38:8b:12:cf:4c:dd:96:7e:c3:d2:
         2f:1b:71:2c:44:5a:2b:ff:1f:06:f4:95:17:fc:37:ff:49:cc:
         89:03:fb:59:17:26:f7:1d:27:4c:09:3e:54:25:e3:9c:9e:8e:
         54:eb:c4:eb:be:e5:1f:20:d7:69:33:08:05:d9:07:3d:50:30:
         95:38:68:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org