Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32342d3234203d3e20323634373538.roa
File:                     3136382e3139362e32342e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          vhxMRxadsaj3TXGkfJoA/cH2GLwGzEjuEQLqKLhJp+s=
Subject key identifier:   B0:52:A4:AA:47:1C:0D:9E:C6:B6:63:3C:02:F0:7A:F4:49:B7:BE:39
Certificate issuer:       /CN=63655C8382B8AA0CCEA102DC196AF710870984CD
Certificate serial:       600E7E09B2C012BF2DE4130E456EAC74FB48F584
Authority key identifier: 63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 05 Mar 2024 17:52:57 +0000
ROA not before:           Tue 05 Mar 2024 17:47:57 +0000
ROA not after:            Tue 04 Mar 2025 17:52:57 +0000
asID:                     264758
IP address blocks:        168.196.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0e:7e:09:b2:c0:12:bf:2d:e4:13:0e:45:6e:ac:74:fb:48:f5:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63655C8382B8AA0CCEA102DC196AF710870984CD
        Validity
            Not Before: Mar  5 17:47:57 2024 GMT
            Not After : Mar  4 17:52:57 2025 GMT
        Subject: CN=B052A4AA471C0D9EC6B6633C02F07AF449B7BE39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:06:cb:98:a1:62:20:54:d7:41:8c:e3:c6:
                    29:c4:ea:24:d8:d5:2b:b3:94:36:88:ae:0e:a1:a8:
                    f4:18:33:0b:52:9e:4b:a0:20:65:f2:cc:6a:32:ec:
                    ac:e9:52:74:5a:2b:04:7b:e4:73:ae:61:68:68:1b:
                    e8:14:2c:c5:e9:b1:a5:5c:81:7c:52:44:d5:2a:1b:
                    49:25:71:d7:6c:93:36:4c:a5:fc:9d:31:db:28:a2:
                    98:23:30:f5:6c:43:eb:bd:4c:87:88:ab:56:29:9a:
                    9b:47:f0:d8:1e:3e:8d:9e:55:22:8a:72:26:31:ac:
                    69:42:2b:9d:05:f4:3b:0d:07:0c:01:3e:51:c7:aa:
                    ef:3a:b7:15:ae:a8:27:b7:7f:53:83:a3:00:d3:96:
                    22:0e:90:ee:bf:dd:e5:70:41:e1:cc:31:63:2e:cd:
                    8f:0a:f2:49:b2:26:1f:b4:ce:38:83:d2:2c:e5:58:
                    8b:b1:03:b0:52:c5:eb:5f:9c:e1:0e:7c:a2:e7:35:
                    a8:f5:03:40:48:9f:c4:8b:ba:2a:3f:2b:9e:0c:6a:
                    eb:d7:b6:88:0d:c3:e8:8d:70:f6:e9:91:86:e3:cc:
                    77:1a:95:00:ff:fb:0c:75:0d:74:e6:22:6f:2b:cc:
                    16:e6:b2:55:ef:43:6a:db:aa:e1:a7:c2:df:f8:9f:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:52:A4:AA:47:1C:0D:9E:C6:B6:63:3C:02:F0:7A:F4:49:B7:BE:39
            X509v3 Authority Key Identifier:
                keyid:63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32342e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:d7:e2:f1:ef:4a:51:4f:b8:32:40:51:6d:57:16:da:50:b5:
         9c:ea:cf:48:ce:e2:04:f7:c3:89:02:b3:53:8a:c7:ba:7d:8f:
         4b:95:ed:d0:6f:f7:00:76:1c:53:6d:3b:f7:a1:57:a5:98:f4:
         d8:bb:92:e2:f3:9a:78:42:fe:55:7b:2a:b6:07:30:5b:d5:e4:
         34:49:02:30:32:0f:cf:9b:d7:3e:06:ff:10:67:37:67:de:c4:
         11:24:40:b9:ec:48:23:df:3c:8b:d4:27:d1:d5:d8:25:3c:5e:
         48:9d:5a:fe:06:29:14:a3:b7:9a:12:6c:a9:14:a9:16:34:9c:
         1f:a0:57:c4:5b:34:b2:7b:aa:f9:e7:11:87:b6:29:2e:1a:95:
         6f:71:d0:ad:4a:6b:bb:1e:60:93:f3:db:1e:b4:58:5d:4c:b0:
         75:46:94:fc:84:1a:90:4e:33:14:ea:3d:5a:1c:50:36:82:1f:
         ec:e0:aa:9a:fa:e1:aa:c8:c6:06:68:c7:48:22:6b:d0:37:4c:
         52:b6:18:71:dc:17:92:72:fa:49:5c:35:52:78:95:94:af:59:
         b4:ab:75:1a:cd:4a:a2:ce:03:cf:bb:81:3c:85:e9:d8:62:67:
         26:a5:0d:0e:11:15:27:19:4c:9f:69:1d:73:77:9f:cd:76:21:
         f4:48:ef:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org