Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa
File:                     3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa (raw, json)
Hash identifier:          deL9wEnG6w0Rpn9a2V5tPq8CwWxowyhE0T40qSAUK6I=
Subject key identifier:   83:F7:4B:03:CD:FC:A6:71:80:00:A0:FB:1E:48:7A:4F:30:37:DE:75
Certificate issuer:       /CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
Certificate serial:       183F39D269F1C1E54A6D3A5DC8692162D0C4C1E7
Authority key identifier: EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa
Signing time:             Mon 15 Jul 2024 21:35:00 +0000
ROA not before:           Mon 15 Jul 2024 21:30:00 +0000
ROA not after:            Mon 14 Jul 2025 21:35:00 +0000
asID:                     264756
IP address blocks:        168.195.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl
                          rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:3f:39:d2:69:f1:c1:e5:4a:6d:3a:5d:c8:69:21:62:d0:c4:c1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
        Validity
            Not Before: Jul 15 21:30:00 2024 GMT
            Not After : Jul 14 21:35:00 2025 GMT
        Subject: CN=83F74B03CDFCA6718000A0FB1E487A4F3037DE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2b:1a:ad:ab:cc:09:fc:ef:3f:a2:30:fe:ca:
                    52:4f:13:ba:fc:f0:36:ab:3d:9b:97:4f:bf:48:67:
                    1e:7d:ec:80:06:57:82:1c:b6:76:d7:d4:5d:0d:56:
                    70:e5:d6:06:ee:41:be:62:cd:5c:5b:98:79:56:1e:
                    76:30:2b:53:7e:ea:80:ae:72:ad:bd:55:65:ee:6f:
                    cb:fe:1a:b2:26:20:c4:69:c9:ae:8c:23:33:0a:42:
                    ae:f0:ff:43:a4:77:88:af:b6:fc:74:f7:21:b6:fd:
                    6d:66:aa:b0:ce:d8:a7:1b:38:61:49:ff:c1:9e:6e:
                    a5:6c:0a:76:f1:04:fa:1a:72:8f:8f:a4:90:26:53:
                    ae:e6:15:94:38:a1:44:5c:2a:ca:b0:b1:13:3e:56:
                    53:69:9c:dd:92:f6:99:0c:a5:42:04:b9:4a:e7:d4:
                    f2:8b:b2:83:28:25:af:56:52:42:0b:cb:43:14:52:
                    a5:8a:cc:31:27:84:c4:01:07:bb:10:a6:ec:df:43:
                    9c:f6:3b:e5:e3:61:dc:5d:cc:b7:23:e8:2b:8d:20:
                    bf:00:44:3f:81:16:5d:3f:11:f8:d4:e1:8e:d2:20:
                    94:f5:57:7e:9c:a0:25:bf:a6:1c:b1:bd:f4:43:ae:
                    79:52:f4:f2:aa:10:93:49:e7:7e:48:05:6f:6a:48:
                    c2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F7:4B:03:CD:FC:A6:71:80:00:A0:FB:1E:48:7A:4F:30:37:DE:75
            X509v3 Authority Key Identifier:
                keyid:EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:08:38:36:2e:7a:d3:40:5b:1e:85:77:10:f0:af:57:f3:8a:
         be:96:58:26:91:9d:66:e2:44:64:e1:d2:52:ae:f9:63:18:cd:
         4e:20:66:bf:21:f1:7e:a6:4f:57:20:5a:d4:31:8b:9c:58:03:
         27:4f:b5:c7:01:51:1c:d1:76:fc:a1:04:c3:d2:03:72:f6:e5:
         c0:3e:7f:e3:9a:56:37:8e:b1:80:6b:8b:04:2e:79:74:b8:5c:
         65:ac:18:a5:4b:fa:d9:a8:80:86:74:df:16:bd:9d:98:9c:c5:
         83:b5:37:56:1a:f3:09:b6:bf:4a:29:14:f0:fd:78:f6:5b:a0:
         90:83:fc:60:2f:68:d0:92:76:62:d5:14:93:94:7c:12:87:d2:
         a6:94:91:a0:d9:47:d7:71:9c:c8:76:74:4a:27:88:ca:cf:fd:
         dc:13:93:51:53:ec:af:24:3c:be:b1:0e:f0:e1:72:59:9e:77:
         0c:38:02:d8:ea:af:11:5e:be:31:a3:6c:c2:f7:2f:8a:da:87:
         6c:85:01:e8:a1:9c:6b:23:65:6c:2d:e0:79:4c:ff:93:a8:e1:
         60:93:48:89:64:70:30:b6:34:de:89:f4:f8:1c:e6:e1:16:c0:
         54:5b:e8:c3:f5:df:82:83:87:6b:1e:e8:76:e7:28:b5:19:d6:
         f0:c8:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org