Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32322d3234203d3e20323634373538.roa
File:                     3136382e3139362e32342e302f32322d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          DfzK+wO+ceW51j03C+uQhE2sWz7FwusjfXzVXLo//28=
Subject key identifier:   9D:96:DC:DF:5B:B6:72:D7:69:F4:22:0A:B8:39:89:9F:DD:7C:1E:62
Certificate issuer:       /CN=63655C8382B8AA0CCEA102DC196AF710870984CD
Certificate serial:       6697980896174054DAA25CFD61DB3B7FB193889A
Authority key identifier: 63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32322d3234203d3e20323634373538.roa
Signing time:             Tue 05 Mar 2024 17:52:57 +0000
ROA not before:           Tue 05 Mar 2024 17:47:57 +0000
ROA not after:            Tue 04 Mar 2025 17:52:57 +0000
asID:                     264758
IP address blocks:        168.196.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 08:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:97:98:08:96:17:40:54:da:a2:5c:fd:61:db:3b:7f:b1:93:88:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63655C8382B8AA0CCEA102DC196AF710870984CD
        Validity
            Not Before: Mar  5 17:47:57 2024 GMT
            Not After : Mar  4 17:52:57 2025 GMT
        Subject: CN=9D96DCDF5BB672D769F4220AB839899FDD7C1E62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f0:1a:20:f6:ce:21:81:14:dc:80:67:8d:9a:
                    4a:4a:08:06:26:e0:e2:63:d5:35:a6:0d:d5:ed:27:
                    24:5a:73:88:fb:5b:d0:ed:97:1b:4d:7b:df:60:77:
                    81:e1:8f:fb:b5:a0:5c:7a:dd:cf:c8:bf:75:24:a4:
                    39:d4:4d:e4:4c:28:86:ab:da:ed:9f:5c:8c:3a:08:
                    33:e5:1c:bb:24:ac:cb:80:69:e7:32:24:18:90:d2:
                    85:84:b2:fe:7d:12:80:eb:3c:94:d2:27:e1:45:b5:
                    83:6e:ab:66:2e:97:b0:0d:66:67:d1:87:85:5c:30:
                    06:6f:5b:ae:b3:c4:f8:5d:61:84:b2:4f:85:2e:17:
                    3b:55:ad:79:12:85:a8:f8:c3:81:f7:30:23:2a:c6:
                    b2:3e:85:fe:6a:4a:58:48:e8:55:42:50:9c:84:56:
                    ce:b3:d4:ea:3d:51:ef:3b:ce:54:43:6a:05:65:cf:
                    59:0e:2a:00:2d:0e:9b:3d:5e:c9:f6:48:0a:16:89:
                    21:ba:09:68:3d:58:91:a5:ab:e1:51:9a:23:ed:5a:
                    18:5e:10:e0:37:56:47:21:46:5f:ea:4e:c4:b4:17:
                    7f:8f:f3:02:3b:fb:7c:66:1d:7d:5e:1a:86:03:b3:
                    83:95:4e:7e:97:87:09:24:4b:16:9c:8d:ba:05:78:
                    98:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:DC:DF:5B:B6:72:D7:69:F4:22:0A:B8:39:89:9F:DD:7C:1E:62
            X509v3 Authority Key Identifier:
                keyid:63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32322d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3c:06:cd:77:81:6b:b3:99:32:a8:71:a7:be:b5:ea:80:d4:82:
         af:4a:58:2a:b3:e9:e3:62:26:86:8d:57:d0:f8:d3:0d:94:8d:
         b6:6c:4e:87:50:f7:e4:05:3c:d1:ac:42:cf:42:b0:ab:01:9f:
         d1:5e:cb:30:e2:a6:1f:37:86:4e:ae:bc:f4:3c:13:a6:b7:22:
         fa:69:5c:92:49:9e:de:e8:d7:37:d1:29:49:87:4e:23:06:e7:
         3a:1a:00:ea:d6:38:cf:ba:7f:d7:cc:09:7d:78:4a:eb:09:b0:
         ef:0e:43:3e:b7:5b:da:8a:31:16:1a:68:18:76:bb:a4:1c:97:
         27:c7:cb:5e:75:53:88:67:7c:b3:d3:fc:59:a9:95:e4:52:4a:
         34:db:ef:29:d3:af:ba:f0:5e:15:b7:92:00:b8:e9:62:8c:5c:
         cd:b4:92:92:ee:71:81:d5:7a:61:89:d6:3c:8e:65:55:3f:79:
         5d:1a:58:7d:c5:fa:4e:bc:a9:af:ed:c9:03:77:bf:0e:fc:0e:
         c3:65:65:49:76:d8:1c:13:cc:97:27:57:db:a5:c5:a3:db:d4:
         c3:90:8a:47:37:90:2d:87:ce:f1:77:d5:f4:15:d4:0e:da:38:
         33:78:15:e2:3e:85:7d:b7:fc:7c:ea:77:5a:2d:fe:fc:88:93:
         1f:29:4d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:40 2024 by rpki-client on console-ams.rpki-client.org