Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3230203d3e20323633323336.roa
File:                     36362e3132382e33322e302f32302d3230203d3e20323633323336.roa (raw, json)
Hash identifier:          3CEvGb/4EcX1UufSUaNzqSSiOuK3tz2TGmgBDp3eloQ=
Subject key identifier:   3D:28:92:BF:5E:A5:67:25:CD:13:A3:AC:32:08:FA:BA:FD:07:05:C9
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       7D3B7B158E2C64AEB34221969E3E84110DE3DA8B
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3230203d3e20323633323336.roa
Signing time:             Wed 16 Oct 2024 13:55:00 +0000
ROA not before:           Wed 16 Oct 2024 13:50:00 +0000
ROA not after:            Wed 15 Oct 2025 13:55:00 +0000
asID:                     263236
IP address blocks:        66.128.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:3b:7b:15:8e:2c:64:ae:b3:42:21:96:9e:3e:84:11:0d:e3:da:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Oct 16 13:50:00 2024 GMT
            Not After : Oct 15 13:55:00 2025 GMT
        Subject: CN=3D2892BF5EA56725CD13A3AC3208FABAFD0705C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:ee:8a:22:e4:da:38:e5:9c:cb:78:ad:30:
                    e2:ff:ec:54:a6:d0:e7:9b:35:3f:66:49:cf:ea:c5:
                    bc:0d:bb:49:57:64:69:ab:5a:d5:43:06:35:6f:85:
                    c5:21:ac:fc:b8:1d:eb:f0:61:c8:be:6b:5c:5f:a3:
                    52:7b:30:a8:42:ac:a9:44:00:d7:d8:8a:a2:4d:d3:
                    77:b8:a8:63:4c:93:58:35:52:fa:03:4c:f0:e7:98:
                    98:15:2a:70:50:8a:47:9f:4e:ff:62:9c:10:b3:19:
                    cc:c2:ed:d3:7d:ee:4a:65:79:dd:2f:79:af:76:46:
                    1d:2e:d5:06:d9:24:ba:af:88:e9:a6:02:32:2f:c0:
                    60:1f:f1:b0:97:ac:54:d1:6e:49:d0:f5:8b:e0:82:
                    3e:33:2a:42:57:82:13:42:35:f0:0f:39:f4:c7:03:
                    9d:cd:48:d4:78:83:4b:f0:cd:c5:ad:a6:28:ff:67:
                    98:f8:66:e5:62:e5:bb:36:51:d5:f6:e8:c7:d1:28:
                    59:d9:43:3b:84:85:df:3b:a2:99:2d:3c:a5:4b:94:
                    5f:bb:22:d2:28:f4:b3:ac:28:5f:2c:f4:a9:d0:c9:
                    1c:2f:b6:8a:8f:bf:7b:cb:03:c0:12:09:98:44:b3:
                    d2:45:a6:4b:61:01:a5:15:28:27:f5:76:23:28:cc:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:28:92:BF:5E:A5:67:25:CD:13:A3:AC:32:08:FA:BA:FD:07:05:C9
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32302d3230203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:85:f0:19:9b:e4:3d:1b:5a:08:f2:c0:83:12:6f:62:91:
         b5:6c:8f:60:f0:92:99:ac:e5:c4:ab:d2:c1:9c:fb:68:d3:e2:
         12:d7:ca:14:c3:07:3d:3e:ad:78:9b:3e:a4:61:62:98:64:d1:
         6b:71:20:64:f2:d7:7b:bd:00:89:8a:a7:77:6f:7a:02:d8:af:
         86:61:e5:32:77:06:8d:96:f3:1c:71:66:16:b3:1c:90:f6:4e:
         0b:96:61:00:1a:05:19:5e:b9:43:f9:5f:96:f0:62:26:c2:71:
         17:d0:20:42:64:9d:2d:9b:fb:1b:bf:cf:7b:a7:40:ee:23:8c:
         e2:9a:77:cc:49:b4:b2:64:4f:5a:8a:f9:5e:eb:1a:91:6e:02:
         7b:f1:09:25:e9:d8:59:21:33:02:bc:16:45:ef:62:9e:54:af:
         3b:45:8d:7d:b5:6d:57:2e:47:93:d5:46:ef:3f:ab:0c:dd:4b:
         61:a3:21:dd:ae:98:a4:1f:fd:41:bc:21:d0:67:eb:a2:f3:77:
         a8:63:5c:17:6b:9a:88:73:fb:e6:75:1d:aa:db:a8:b3:7a:d5:
         86:75:48:12:28:b1:92:7c:7a:cd:72:0d:b7:b8:10:55:5e:e8:
         80:56:d7:65:57:aa:04:4c:d7:3d:1d:08:8f:16:c0:a9:02:dc:
         cf:cf:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org