Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32352e302f32342d3234203d3e20323634373538.roa
File:                     3136382e3139362e32352e302f32342d3234203d3e20323634373538.roa (raw, json)
Hash identifier:          5RUOm3xMuaRnxYxFJ+IdceX7pmEQW92rzksNl551kO4=
Subject key identifier:   D7:01:04:BC:CF:C0:41:2D:DB:9E:E8:5A:9F:8A:3C:09:39:96:FA:88
Certificate issuer:       /CN=63655C8382B8AA0CCEA102DC196AF710870984CD
Certificate serial:       12A8508D67140E565186CA61A760754637009284
Authority key identifier: 63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32352e302f32342d3234203d3e20323634373538.roa
Signing time:             Tue 05 Mar 2024 17:52:57 +0000
ROA not before:           Tue 05 Mar 2024 17:47:57 +0000
ROA not after:            Tue 04 Mar 2025 17:52:57 +0000
asID:                     264758
IP address blocks:        168.196.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 08:28:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a8:50:8d:67:14:0e:56:51:86:ca:61:a7:60:75:46:37:00:92:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63655C8382B8AA0CCEA102DC196AF710870984CD
        Validity
            Not Before: Mar  5 17:47:57 2024 GMT
            Not After : Mar  4 17:52:57 2025 GMT
        Subject: CN=D70104BCCFC0412DDB9EE85A9F8A3C093996FA88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:d0:53:8d:21:5f:25:1e:f6:f9:32:cc:8f:
                    7b:4f:53:ee:2b:f6:23:54:be:fa:99:24:7c:8b:3c:
                    51:88:c5:16:1f:4d:34:bb:b7:f4:0b:ef:dc:25:a9:
                    06:ea:9f:5c:91:19:6d:d1:06:e3:fa:74:29:12:76:
                    40:f2:aa:a7:9b:65:d7:57:21:43:06:88:bb:70:c5:
                    75:be:fb:27:21:9c:73:8c:2a:89:28:cd:87:df:65:
                    a7:11:84:61:b1:8e:f4:e5:21:44:43:fd:2a:bd:c9:
                    6a:02:17:cc:86:1d:03:a1:d3:cb:67:ae:8a:fb:5a:
                    fd:7f:5c:92:72:f9:f8:25:a5:66:d7:ae:24:8d:0b:
                    13:53:d0:31:fc:a7:d0:ba:f9:47:0b:83:01:8f:00:
                    3f:9f:00:c7:02:f2:59:c5:e5:8a:79:a7:c3:da:0d:
                    df:d3:b8:ac:d5:83:c3:10:5f:ed:51:0b:4c:cc:4a:
                    92:c1:df:f3:59:fc:cd:39:2b:a4:f1:52:f3:d1:a4:
                    ba:b5:93:59:fb:87:1b:20:a0:b2:ce:e3:bf:bb:27:
                    3b:59:b2:b3:83:b3:96:91:90:6b:d9:d8:f0:2f:8f:
                    5d:82:96:7f:d8:38:41:a7:91:f1:b7:ec:93:5c:fd:
                    79:3e:d2:9e:ad:03:ef:e2:a6:bf:04:99:ae:95:ae:
                    f1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:01:04:BC:CF:C0:41:2D:DB:9E:E8:5A:9F:8A:3C:09:39:96:FA:88
            X509v3 Authority Key Identifier:
                keyid:63:65:5C:83:82:B8:AA:0C:CE:A1:02:DC:19:6A:F7:10:87:09:84:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/63655C8382B8AA0CCEA102DC196AF710870984CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63655C8382B8AA0CCEA102DC196AF710870984CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93EA8A2761D6425C5BFAF45057F5E28FEA1E36E2BE1267E93489EE6E7A602F48/0/3136382e3139362e32352e302f32342d3234203d3e20323634373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:30:21:28:4e:de:38:83:1a:87:89:16:45:87:7b:db:86:
         6c:cc:4a:b7:7e:41:d4:0d:b9:f5:d4:3f:e3:6d:1a:d7:11:2e:
         9b:e0:da:35:9c:99:f8:92:a5:7f:f5:fe:bd:0f:54:4e:83:16:
         64:73:4b:a0:32:d2:01:94:57:0c:c7:9d:3b:23:9d:a8:5f:ee:
         c9:6a:36:88:e6:5b:f3:74:00:95:49:41:d6:ea:41:a5:da:9d:
         01:a9:aa:4c:40:04:ac:fa:79:50:69:ea:cc:eb:57:fb:ea:d2:
         34:61:69:54:ef:4d:c9:b5:43:0e:9e:e4:aa:a5:28:30:af:58:
         ce:f3:4d:c0:e0:59:0c:bd:53:56:84:7e:2e:7d:54:37:ac:7e:
         56:e6:68:0a:b0:cc:7c:3a:8b:f5:76:82:2f:b3:bc:dc:0f:3e:
         94:11:a2:7c:5a:d7:ac:6b:b7:ed:2a:60:8d:94:35:1a:43:7d:
         4a:8d:5a:10:1a:72:30:05:e6:c6:4b:15:91:30:17:b4:08:c5:
         31:b3:90:bc:07:3a:99:4f:e2:6b:22:8e:b8:08:25:15:8d:31:
         14:31:e0:d6:37:af:30:9d:41:bd:17:c3:b0:89:f2:67:e2:bc:
         2f:c2:fb:9c:46:9e:8b:6b:b3:6f:d8:36:09:af:49:9c:0c:8c:
         df:2e:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:50:40 2024 by rpki-client on console-ams.rpki-client.org