Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136382e3230352e3136302e302f32322d3232203d3e20323633373430.roa
File:                     3136382e3230352e3136302e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          V27ow2ub++k1IRQ1La2dZZvwmY2ygbjUV+vWflcb+AI=
Subject key identifier:   A8:76:F8:2B:E9:E4:95:A1:38:E4:8E:A7:8F:0B:CC:02:C2:29:75:36
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       4660C1A154622BF6FC6C1E7C49F257E17EA255D5
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136382e3230352e3136302e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 05 Mar 2024 17:47:32 +0000
ROA not before:           Tue 05 Mar 2024 17:42:32 +0000
ROA not after:            Tue 04 Mar 2025 17:47:32 +0000
asID:                     263740
IP address blocks:        168.205.160.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:60:c1:a1:54:62:2b:f6:fc:6c:1e:7c:49:f2:57:e1:7e:a2:55:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Mar  5 17:42:32 2024 GMT
            Not After : Mar  4 17:47:32 2025 GMT
        Subject: CN=A876F82BE9E495A138E48EA78F0BCC02C2297536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b7:34:20:6f:cd:bf:e0:ab:b1:7e:4c:2f:02:
                    c9:c8:08:aa:2a:62:ea:bd:06:74:68:cd:fe:2c:5c:
                    7c:78:7d:38:cf:6f:a2:02:e3:98:0f:dd:31:8c:1d:
                    de:1f:9f:e1:fb:31:13:55:0a:54:80:ae:e8:c4:89:
                    c4:a7:99:5f:64:34:59:47:36:42:df:f7:53:57:63:
                    eb:dd:7e:bf:10:ef:39:8a:ce:61:76:1c:af:34:17:
                    23:ad:f3:3a:2d:8a:8e:8d:7a:0b:63:65:17:df:3b:
                    8d:4a:b9:e8:3f:32:ce:d2:bb:a6:c2:13:14:cb:e1:
                    bc:de:60:76:9a:e3:7e:75:33:ac:57:54:10:cb:bc:
                    b3:81:b0:da:71:ec:48:a2:e9:28:15:cf:ba:14:84:
                    f6:55:57:b4:ca:c1:13:94:a6:dd:f9:61:08:75:79:
                    38:89:89:49:49:6b:af:3b:74:c6:8a:2a:6b:9c:45:
                    4d:db:19:90:98:b6:3f:f1:f4:96:0f:65:35:72:94:
                    0c:37:2a:1b:4c:6c:4b:ab:fc:b5:70:03:d0:a3:53:
                    5a:0e:31:28:a0:7d:87:76:92:2a:60:7b:13:f9:0e:
                    0a:d5:85:0d:53:98:f7:c8:73:01:d1:6b:25:7b:32:
                    7a:8d:91:78:a2:ae:0b:9c:d0:6e:c7:17:99:28:bd:
                    af:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:76:F8:2B:E9:E4:95:A1:38:E4:8E:A7:8F:0B:CC:02:C2:29:75:36
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3136382e3230352e3136302e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:e0:37:31:9c:81:d7:7f:8f:ee:67:94:68:96:6e:98:a6:
         7a:10:93:5f:ec:a4:f0:4b:d9:66:87:8a:13:c3:bf:3a:f0:a7:
         b4:1e:6b:3d:21:de:a6:e2:2e:30:e1:45:ba:34:57:d6:00:c9:
         6e:d8:d4:59:62:fe:67:05:23:52:32:a9:c2:75:59:a1:24:ee:
         04:5c:62:10:fc:7b:8d:bc:ec:c8:e2:ed:21:73:da:f7:96:5a:
         b7:e2:6d:b1:35:3f:36:5f:ed:7f:18:2e:ad:3d:76:0f:aa:66:
         f7:40:a8:2b:59:93:c5:ef:dc:55:63:f5:2c:b0:aa:83:a3:9e:
         16:5c:96:41:2d:80:5b:0e:12:29:90:89:70:07:9a:b9:0e:2a:
         a1:7e:a3:f3:fb:a1:31:06:be:8f:84:74:34:7d:b8:c8:2a:7a:
         96:cf:88:f4:05:4f:b1:72:5f:fc:a5:aa:0d:28:b9:9d:61:ef:
         29:da:24:0b:c6:96:37:1f:2f:78:d8:7c:a5:87:e8:c9:ad:26:
         b0:de:99:d7:27:99:65:f0:a8:fc:d8:20:df:ec:dd:a3:7e:b8:
         d0:83:f4:96:dd:87:d2:d1:bf:11:bf:3d:74:2c:1d:74:c2:9c:
         62:ee:57:30:52:70:df:6b:18:7e:e7:e9:87:ad:0f:2d:a4:0b:
         d7:b3:d6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org