Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa
File:                     AS22368.roa (raw, json)
Hash identifier:          UDJlKMkZ3zhLn89pr8hlsBw8ATDx75bujwNXVjcZG0A=
Subject key identifier:   ED:8D:76:30:9F:D5:78:7D:03:99:FB:03:8C:54:02:F6:4B:3A:55:96
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       4C2AA1C9CAE8BA12732B22E8AC727AB8C56F1036
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa
Signing time:             Tue 05 Mar 2024 17:55:24 +0000
ROA not before:           Tue 05 Mar 2024 17:50:24 +0000
ROA not after:            Tue 04 Mar 2025 17:55:24 +0000
asID:                     22368
IP address blocks:        152.200.204.0/24 maxlen: 24
                          179.33.108.0/23 maxlen: 24
                          181.236.176.0/20 maxlen: 24
                          181.236.192.0/21 maxlen: 24
                          181.236.222.0/24 maxlen: 24
                          181.236.224.0/19 maxlen: 24
                          190.252.104.0/24 maxlen: 24
                          190.252.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 15 May 2024 06:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2a:a1:c9:ca:e8:ba:12:73:2b:22:e8:ac:72:7a:b8:c5:6f:10:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Mar  5 17:50:24 2024 GMT
            Not After : Mar  4 17:55:24 2025 GMT
        Subject: CN=ED8D76309FD5787D0399FB038C5402F64B3A5596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3d:5a:35:8e:f7:98:e7:b9:36:eb:00:c3:6e:
                    01:41:ed:00:79:6b:cb:ca:dc:9a:76:92:c1:71:45:
                    89:c8:ee:ae:7d:bd:b0:04:a3:28:12:0f:c8:a4:11:
                    78:60:d9:c8:b2:18:69:b4:ba:d7:6f:9a:2c:54:21:
                    80:76:67:0e:12:79:1c:0e:62:0f:dd:48:12:05:aa:
                    ce:54:4a:9b:d1:bb:e0:4a:76:a7:6d:b6:2b:26:2f:
                    a3:20:4e:36:6c:1f:71:7f:5c:a3:3b:a3:32:ce:8c:
                    e7:b5:d4:4d:e1:0e:24:38:ba:40:e1:f7:75:52:b9:
                    c8:32:e5:a7:19:40:32:f2:1e:15:f5:fb:8c:12:fb:
                    64:56:23:e9:34:73:3c:3a:b2:32:19:45:f5:64:35:
                    a7:4e:a9:d9:73:7a:be:8e:37:0d:69:50:c2:8b:32:
                    2e:96:53:68:67:7c:85:e3:d6:2d:a4:97:3e:50:f2:
                    a3:e0:68:c4:e4:95:4f:b1:9c:14:ac:e5:46:b5:7a:
                    f0:fe:29:df:05:eb:87:a5:81:75:53:64:3a:7a:c1:
                    5c:64:7c:97:74:69:c7:3a:3a:0a:06:f6:f3:5d:fd:
                    6c:a3:cf:1d:f7:d6:bb:22:81:e7:21:72:9c:55:31:
                    df:a1:5c:f4:8c:cf:d4:5a:6c:df:55:e9:8e:6a:2a:
                    6d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8D:76:30:9F:D5:78:7D:03:99:FB:03:8C:54:02:F6:4B:3A:55:96
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.200.204.0/24
                  179.33.108.0/23
                  181.236.176.0-181.236.199.255
                  181.236.222.0/24
                  181.236.224.0/19
                  190.252.104.0/24
                  190.252.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:99:6d:fc:41:f0:e7:b3:9c:d9:59:1d:9f:e3:f9:52:7d:
         c1:74:87:75:0f:dc:a8:23:fc:26:d9:63:d1:42:e7:6a:ba:aa:
         cd:0a:f3:bd:8e:5b:56:d3:39:c2:68:bd:9d:25:80:6a:bf:e6:
         bd:ea:1f:95:df:4b:bf:e6:9f:06:9b:74:e4:ee:59:bd:28:82:
         21:51:dd:d2:a8:99:4b:d2:aa:37:e4:9c:49:9d:47:7a:c4:8d:
         ab:f9:c2:12:d3:c8:54:b3:64:ac:fe:47:db:c8:70:89:0c:f5:
         07:b2:b1:6d:db:be:c5:37:6f:af:23:bf:3e:b1:71:cd:02:78:
         14:cf:9b:f9:52:a0:a4:65:90:ce:f1:b3:fd:79:48:41:53:16:
         08:8a:32:3a:1f:74:c6:a3:a0:11:0a:aa:61:82:bd:d4:1c:b0:
         f5:bb:1f:d6:0a:d9:fd:15:64:d7:19:7d:f5:00:3a:9a:0d:0b:
         db:16:fa:84:29:80:1e:64:34:44:f3:62:85:a4:a9:5a:e5:19:
         2e:d2:f0:c1:18:a3:d1:94:14:21:8f:0d:cf:22:6f:bb:2e:7a:
         e9:d0:22:81:c0:a9:3e:d2:57:b4:db:fa:ec:c4:c1:0b:20:eb:
         94:56:4b:fd:10:c0:75:b7:c2:f9:cb:19:f0:c3:0d:58:bf:7a:
         df:07:75:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 02:47:15 2024 by rpki-client on console-ams.rpki-client.org