Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3136372e32382e3139332e302f32342d3234203d3e20323634373239.roa
File:                     3136372e32382e3139332e302f32342d3234203d3e20323634373239.roa (raw, json)
Hash identifier:          CPlcZFHZWm80cOZQuNCbND8YVH40gI96XAYglNHtFdM=
Subject key identifier:   D1:81:59:AB:AC:56:F3:D2:10:56:ED:3F:E1:9B:9F:40:CC:70:20:F1
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       396D350BAE80BB95E11FA05EEFE4C1A05092A09D
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3136372e32382e3139332e302f32342d3234203d3e20323634373239.roa
Signing time:             Tue 05 Mar 2024 17:47:07 +0000
ROA not before:           Tue 05 Mar 2024 17:42:07 +0000
ROA not after:            Tue 04 Mar 2025 17:47:07 +0000
asID:                     264729
IP address blocks:        167.28.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:6d:35:0b:ae:80:bb:95:e1:1f:a0:5e:ef:e4:c1:a0:50:92:a0:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Mar  5 17:42:07 2024 GMT
            Not After : Mar  4 17:47:07 2025 GMT
        Subject: CN=D18159ABAC56F3D21056ED3FE19B9F40CC7020F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:1f:7f:38:e0:c8:d4:26:32:c3:a2:5a:c7:
                    69:04:ea:72:8e:f2:d1:e3:a2:6d:ca:49:10:c6:9f:
                    a7:fd:ac:06:49:d1:4a:df:3f:7c:44:a3:68:0e:0e:
                    e4:96:78:1b:1c:e2:e6:02:a3:26:46:d3:94:3a:32:
                    78:64:99:9d:8f:e9:a0:5e:5b:0a:1e:bf:a8:e8:7b:
                    0e:a9:9a:9b:1f:30:f1:c7:4b:82:da:e4:74:d8:17:
                    4a:a5:09:12:7c:48:a4:6b:54:43:e4:38:09:c7:8d:
                    dd:08:6c:5e:13:89:51:e1:27:d7:61:ee:75:70:2f:
                    92:d3:30:fa:03:88:1a:17:d2:c6:b3:87:5b:f2:a4:
                    44:dc:26:09:66:6c:1b:ab:0e:ea:3f:a3:94:c7:e2:
                    83:dc:15:2b:b2:c4:c5:e3:c1:52:e5:1d:7c:c0:1d:
                    b2:52:3f:17:43:f0:5e:b5:a8:d1:58:3a:57:33:da:
                    18:62:ec:80:49:1c:c5:2f:ba:96:bb:08:4c:1f:b2:
                    20:dc:43:35:f0:44:37:36:77:5b:2f:28:82:e8:97:
                    80:24:78:28:86:9c:d0:26:61:da:df:6c:44:f0:04:
                    5f:7e:54:6f:bf:c6:49:4e:22:43:ec:bb:a0:31:58:
                    55:6a:26:58:2b:db:3c:b2:b8:29:30:d5:f9:22:29:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:81:59:AB:AC:56:F3:D2:10:56:ED:3F:E1:9B:9F:40:CC:70:20:F1
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3136372e32382e3139332e302f32342d3234203d3e20323634373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.28.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:5e:84:5f:eb:4d:8d:70:9d:98:4d:7e:e4:ec:ac:02:23:e7:
         29:ae:67:71:54:1a:10:6f:0d:95:61:eb:20:57:c4:96:85:9e:
         5e:67:46:11:4e:c9:1f:b3:c5:60:c8:d5:6d:86:64:21:d5:75:
         eb:d6:0f:ee:38:60:a7:7b:54:b6:35:9b:97:b9:99:25:27:e8:
         35:66:4d:81:5f:bc:be:c1:68:79:7e:92:56:0f:5a:7a:84:e7:
         ec:9e:31:6a:53:73:11:f6:91:ee:83:89:7c:19:71:79:93:dc:
         f1:43:bf:22:b3:a0:85:61:5f:b0:17:fd:38:0b:b6:8e:53:7b:
         37:01:d9:84:34:0d:6e:be:ba:99:e0:37:39:a1:c2:d6:d1:bb:
         1d:35:82:ca:85:0e:0a:80:03:87:bc:8d:3d:a2:77:bc:e5:0d:
         9a:de:6e:bc:97:98:87:20:89:81:7f:8d:0e:1c:ee:48:95:09:
         3e:21:8d:dd:fb:a7:02:38:ed:ec:81:ab:0a:d1:e8:99:ca:32:
         06:29:3d:c6:9a:5b:00:ef:f5:14:07:2b:53:1a:6b:a4:45:a6:
         ce:f8:61:28:1e:e5:85:a5:0c:72:92:5d:db:a2:3a:4f:f6:0e:
         bd:c3:f9:79:5b:4d:03:00:af:8d:47:23:95:1b:56:0f:1a:b4:
         fc:fd:bd:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org