Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa
File:                     36362e3132382e34302e302f32312d3234203d3e20323633323336.roa (raw, json)
Hash identifier:          H7Go3q+st36YEsYGq7dSbYZQTF+6ZFVuddYTId7Fpv0=
Subject key identifier:   F2:3A:B4:A0:C6:A5:7E:AD:A7:E0:27:EE:ED:D1:CD:4A:39:27:70:DB
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       20021EA7BD1ACA1189F29EBAA6135CECF6E2B48C
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa
Signing time:             Wed 16 Oct 2024 13:55:00 +0000
ROA not before:           Wed 16 Oct 2024 13:50:00 +0000
ROA not after:            Wed 15 Oct 2025 13:55:00 +0000
asID:                     263236
IP address blocks:        66.128.40.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:02:1e:a7:bd:1a:ca:11:89:f2:9e:ba:a6:13:5c:ec:f6:e2:b4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Oct 16 13:50:00 2024 GMT
            Not After : Oct 15 13:55:00 2025 GMT
        Subject: CN=F23AB4A0C6A57EADA7E027EEEDD1CD4A392770DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:61:a8:a1:e2:5e:a8:ce:be:9b:70:a6:b4:
                    2f:0e:52:28:87:06:fe:56:f1:9c:a7:a7:ae:bd:9e:
                    e3:10:74:5a:5e:4d:d5:29:8d:8a:d9:8a:bb:4c:32:
                    c9:6c:b0:a2:48:d3:7d:24:cc:9c:92:22:ae:12:aa:
                    99:39:4d:ec:e0:b8:21:1e:29:26:bf:14:fa:b2:09:
                    43:01:8b:f5:50:f8:6b:e6:31:43:84:b0:25:31:7f:
                    42:d3:49:67:03:9d:f1:ba:ae:98:a0:5c:4c:5d:b3:
                    7e:16:3c:6b:31:6e:f9:c0:79:30:a6:2d:77:43:55:
                    df:8c:51:06:72:fc:5a:e8:06:20:7b:76:25:a5:03:
                    62:02:4a:a0:38:6b:08:dd:3d:6a:a6:b6:f3:82:7d:
                    bb:16:ac:ca:7c:bc:b0:34:42:ef:33:19:a7:8e:fc:
                    2f:41:14:f4:d0:3f:f2:8e:d7:80:bf:7f:45:ec:d4:
                    a1:9b:b7:9a:fe:31:11:b1:e0:ab:30:a7:c7:2d:19:
                    9d:39:1c:7f:aa:3e:07:8a:2a:b9:6a:c4:7d:d7:14:
                    08:11:e8:4e:da:71:cb:f7:34:01:9c:0a:f5:a2:33:
                    a5:29:79:10:7e:79:b3:94:bf:7f:89:41:ee:eb:0b:
                    76:4d:e5:04:2f:27:73:48:20:18:00:e3:f2:a3:e1:
                    29:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:B4:A0:C6:A5:7E:AD:A7:E0:27:EE:ED:D1:CD:4A:39:27:70:DB
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e34302e302f32312d3234203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         23:d9:2a:55:6f:7b:f0:88:0b:fd:5e:0a:53:3d:c6:09:66:c1:
         6c:99:a8:de:1a:cc:5c:08:85:22:50:44:f4:31:83:b5:39:ec:
         d9:86:27:ce:6e:d9:c8:fa:5b:e9:43:2f:00:43:8e:f2:a2:1a:
         79:bb:46:30:82:3b:5f:d7:89:03:0d:0d:d0:3e:86:3b:96:99:
         a1:ec:1b:af:fb:1a:28:46:47:be:57:83:d1:9a:96:83:1c:9d:
         2d:6f:29:ca:0b:20:0b:21:3e:8e:ec:4b:c7:a6:91:bb:48:f0:
         80:9f:84:41:f5:a4:4f:67:e5:9c:b5:ab:09:39:f9:06:55:9d:
         cf:65:8a:73:be:27:d9:bf:0d:38:67:97:e8:1b:83:52:4c:c4:
         4d:52:c3:ee:bc:aa:6a:fa:6a:56:b1:55:b2:4e:e0:f4:88:68:
         a1:15:fa:86:d6:b9:0e:1e:9b:99:35:8b:31:43:2f:6b:31:ef:
         d4:76:05:0e:71:87:d1:fd:34:a5:f5:ee:d0:96:13:00:cd:b2:
         7f:d2:01:66:92:1b:cd:f8:18:78:80:70:2e:60:52:9f:a1:d2:
         a6:e6:7b:82:4a:b8:91:ad:47:43:f9:7d:3e:c3:c3:c3:3e:85:
         fe:1a:cb:10:d2:4e:60:ca:bd:ea:13:37:1d:47:6a:27:06:f1:
         1a:1c:e4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org