Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
File:                     3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa (raw, json)
Hash identifier:          cjF85mH1TsZiIrjxrh17zQIfrNZCbo21Q/iaA5+Gr6Q=
Subject key identifier:   B3:D9:1D:AA:2D:5A:23:E9:4C:5A:5A:65:E2:6F:A3:71:22:E2:E7:FD
Certificate issuer:       /CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Certificate serial:       015F11338C69B8786411018D33E7C3024ADCC968
Authority key identifier: 0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
Signing time:             Tue 05 Mar 2024 17:55:25 +0000
ROA not before:           Tue 05 Mar 2024 17:50:25 +0000
ROA not after:            Tue 04 Mar 2025 17:55:25 +0000
asID:                     264781
IP address blocks:        168.197.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:5f:11:33:8c:69:b8:78:64:11:01:8d:33:e7:c3:02:4a:dc:c9:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
        Validity
            Not Before: Mar  5 17:50:25 2024 GMT
            Not After : Mar  4 17:55:25 2025 GMT
        Subject: CN=B3D91DAA2D5A23E94C5A5A65E26FA37122E2E7FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:98:c8:6b:60:be:3e:51:ab:89:8b:ac:fa:
                    a4:3f:77:6d:6a:3e:7d:33:31:76:7a:58:e9:68:0c:
                    e3:bd:9e:e6:aa:59:51:49:b3:a4:01:36:f7:7c:61:
                    8d:bd:19:8b:93:6c:84:91:17:41:80:b5:af:b1:35:
                    25:78:2d:41:23:08:08:47:98:11:95:d1:85:a9:c5:
                    9c:9d:24:3e:c5:be:11:db:41:fa:49:dc:f3:c7:66:
                    8c:89:0e:e4:a4:79:5b:9b:1c:63:c3:64:60:93:be:
                    32:bc:71:e6:fd:25:64:44:0e:e2:a6:69:ba:d9:81:
                    df:0e:6d:db:04:a2:bc:b5:aa:1d:af:a3:6f:ff:74:
                    be:dd:13:1d:ce:87:8e:9f:5f:05:48:ee:97:23:1b:
                    d8:e7:5c:67:b7:67:9d:22:56:9a:ff:9e:24:08:24:
                    0f:79:1e:97:43:95:60:8f:6a:54:4a:ff:a4:19:91:
                    c3:90:84:68:54:68:4d:bc:ea:7d:7a:2f:1b:77:25:
                    e6:e0:f6:67:4d:5c:83:81:12:d8:ec:ae:4b:3a:78:
                    36:35:95:6c:ad:9e:67:20:b6:8c:3f:4d:03:fe:a7:
                    ab:eb:4f:e9:0c:47:e1:51:e2:81:54:d5:ef:5e:88:
                    d4:07:b1:d3:f9:21:c5:5d:63:12:5f:07:04:c0:8d:
                    97:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D9:1D:AA:2D:5A:23:E9:4C:5A:5A:65:E2:6F:A3:71:22:E2:E7:FD
            X509v3 Authority Key Identifier:
                keyid:0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:21:4c:22:17:69:1d:96:df:54:3c:df:c5:fa:d9:37:1f:e2:
         92:41:99:e1:23:ab:9d:6f:4c:3e:43:39:b5:89:56:79:e9:0e:
         39:d5:41:d5:28:50:36:6e:fe:91:b9:fc:ea:d3:7f:d0:d7:88:
         bc:77:c4:36:0c:f9:10:df:12:df:72:4c:b8:f0:40:68:d6:9d:
         48:87:8c:b6:07:dd:e9:89:98:01:59:55:ca:30:a2:4d:17:e4:
         52:54:e4:fa:1e:9a:a7:58:a5:06:dc:b2:e1:f4:8e:67:ac:35:
         84:52:3d:30:e9:15:8e:b9:6d:6a:6a:95:df:f1:1d:7c:eb:f7:
         4e:69:f7:c1:77:89:d9:75:12:b8:b0:ce:b1:43:96:9b:3c:75:
         3f:9f:3a:a1:ef:8b:60:68:b3:e1:dc:bf:24:32:8c:87:f8:54:
         01:97:52:a0:3f:a7:a3:74:fe:1e:92:2a:4e:5a:f2:0e:85:1d:
         35:d7:0f:0b:9f:61:53:b5:16:28:e9:f2:cf:81:04:aa:3d:f7:
         d7:37:f3:d7:c9:63:ff:2d:26:0d:8e:d8:84:2a:41:b4:55:79:
         f6:77:8f:87:85:d6:94:df:74:af:5f:d9:78:a5:a1:ce:88:87:
         f9:4d:35:3e:94:1f:b4:a8:1a:a6:fa:06:ca:76:57:35:21:5e:
         89:12:88:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:21 2024 by rpki-client on console-ams.rpki-client.org