Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/3136382e3139372e3139362e302f32322d3234203d3e20323634373837.roa
File:                     3136382e3139372e3139362e302f32322d3234203d3e20323634373837.roa (raw, json)
Hash identifier:          Aq78hLJNLomju5mV+b7fsI0IhZdkMseu5Y/n9ENXMsk=
Subject key identifier:   42:04:0C:D9:B0:19:8B:2B:9C:6A:32:7C:9D:63:63:15:96:C6:7D:58
Certificate issuer:       /CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
Certificate serial:       33463C0A19C7AC11B9670EA21C8322B3672781BA
Authority key identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/3136382e3139372e3139362e302f32322d3234203d3e20323634373837.roa
Signing time:             Tue 05 Mar 2024 17:48:55 +0000
ROA not before:           Tue 05 Mar 2024 17:43:55 +0000
ROA not after:            Tue 04 Mar 2025 17:48:55 +0000
asID:                     264787
IP address blocks:        168.197.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:46:3c:0a:19:c7:ac:11:b9:67:0e:a2:1c:83:22:b3:67:27:81:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
        Validity
            Not Before: Mar  5 17:43:55 2024 GMT
            Not After : Mar  4 17:48:55 2025 GMT
        Subject: CN=42040CD9B0198B2B9C6A327C9D63631596C67D58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:85:e1:3c:7f:97:88:ff:d7:c8:63:8d:1e:
                    e4:f4:ea:04:78:67:8b:23:c5:4f:f7:12:10:72:56:
                    9d:37:b9:42:d9:c2:38:c8:e6:c9:b3:e0:d0:88:68:
                    e0:ed:a7:e6:14:c5:bc:66:e2:a6:5c:9f:07:41:85:
                    79:05:3f:ad:0f:ff:b5:03:d2:d0:a4:56:bb:4c:3b:
                    be:6d:27:40:53:7f:95:28:c7:e9:71:64:76:7d:01:
                    73:67:67:e7:9b:f7:cf:38:c3:8a:72:59:40:a1:75:
                    9d:9b:c8:40:b0:82:a8:c0:96:71:32:a4:41:1f:fd:
                    72:50:a5:c4:50:a7:a4:61:96:e7:5b:d5:f2:2d:a4:
                    cb:5c:36:6d:81:3a:2b:10:ae:8b:30:a6:e2:ee:b8:
                    17:f0:cd:23:00:8a:99:33:08:db:71:45:f2:e0:04:
                    ba:b6:31:dd:b0:7e:f7:ba:42:bb:72:46:94:81:6b:
                    f2:0a:35:c8:7a:dd:bb:14:66:7b:45:97:45:c8:cf:
                    f7:d5:46:84:88:2c:c5:bb:b8:99:c8:dd:2c:30:0d:
                    14:c4:59:14:f3:32:20:fb:d2:81:c5:59:ae:de:a2:
                    59:fa:d5:ac:97:26:79:ca:74:d6:22:f3:96:53:c5:
                    f1:92:44:17:77:6a:af:cf:05:d4:ce:85:29:ac:ba:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:04:0C:D9:B0:19:8B:2B:9C:6A:32:7C:9D:63:63:15:96:C6:7D:58
            X509v3 Authority Key Identifier:
                keyid:2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/3136382e3139372e3139362e302f32322d3234203d3e20323634373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:b9:12:20:82:cf:bc:2b:53:31:bf:05:f0:41:c9:15:24:
         81:36:1d:90:8b:98:ba:1a:45:e9:60:6f:7c:4d:22:20:ef:b1:
         f6:95:a4:07:d3:58:eb:7f:3b:8a:af:fa:9c:ed:e7:40:ea:8e:
         a7:52:f5:ed:3b:7a:f4:b3:7d:60:7e:08:ef:be:30:86:7c:96:
         dd:e1:b6:eb:73:16:83:48:f7:75:95:9c:e0:3f:d9:22:e6:56:
         df:53:75:4b:33:94:8d:c0:ab:75:de:d8:95:1d:d7:3b:d5:68:
         4c:60:3a:ca:f1:8e:38:8e:11:bb:b9:51:70:d9:10:fe:9c:12:
         01:1f:9f:79:c2:11:91:da:f6:6f:1a:ec:b6:d2:95:7b:37:83:
         14:48:fc:e1:f1:8e:55:5f:43:d7:3b:59:1a:73:bf:05:3d:00:
         ed:a1:64:05:9d:7e:71:fd:b6:43:3a:61:09:cb:56:f8:7e:0b:
         27:3e:b2:03:4c:86:78:04:ce:d2:12:8a:97:25:68:8d:af:6c:
         12:6c:ff:84:0e:08:bb:f1:d8:fa:d9:14:1e:e3:e8:49:52:31:
         bb:c2:c2:28:c9:1c:ca:a4:51:d4:a0:96:b9:40:5d:0a:91:3b:
         3f:de:38:0d:c0:fd:3d:ca:7f:72:de:3b:86:26:75:e4:66:e8:
         78:d2:75:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org