Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa
File:                     3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa (raw, json)
Hash identifier:          NK7dujhWwQrEtmFyuptO8BesSi5YoNxtSXuob93UJus=
Subject key identifier:   67:B2:4C:6B:2B:D1:34:E6:1D:91:8A:47:24:84:89:68:C5:12:D5:B3
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       084BBA449720C9677CE3BF7335A1157E3566C5
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa
Signing time:             Thu 21 Mar 2024 15:55:01 +0000
ROA not before:           Thu 21 Mar 2024 15:50:01 +0000
ROA not after:            Thu 20 Mar 2025 15:55:01 +0000
asID:                     264774
IP address blocks:        168.197.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4b:ba:44:97:20:c9:67:7c:e3:bf:73:35:a1:15:7e:35:66:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Mar 21 15:50:01 2024 GMT
            Not After : Mar 20 15:55:01 2025 GMT
        Subject: CN=67B24C6B2BD134E61D918A4724848968C512D5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2a:24:8e:41:0f:ed:6e:0e:c3:b8:56:39:d2:
                    1c:30:ff:1d:36:35:af:b3:13:4e:62:84:a2:5c:6c:
                    5c:a9:74:9d:82:9a:e6:9f:4a:fe:b6:74:83:c3:d2:
                    75:90:e3:9b:a3:86:59:fd:e0:83:a5:23:26:6a:ee:
                    8a:81:e9:42:8e:72:82:55:ab:28:3a:f4:9b:56:02:
                    9b:d8:ba:24:08:c2:f5:76:0e:86:fa:1e:59:13:e8:
                    01:00:60:70:60:1f:4a:1d:44:9d:07:3a:3c:17:41:
                    8b:83:fd:aa:81:ca:5a:35:df:20:b7:91:6d:e3:6a:
                    71:1e:8e:33:13:ee:dc:25:ce:12:d3:b3:da:23:32:
                    d3:19:2c:03:4c:43:f6:d7:0c:b0:81:97:1e:6d:e9:
                    d9:3d:0d:16:5d:50:d1:df:37:6e:07:32:c3:75:21:
                    d9:fd:d6:a7:13:fd:63:0b:0e:21:06:5a:0d:6d:68:
                    8f:cb:de:54:e8:6c:61:32:a1:ba:be:a3:89:58:25:
                    1a:52:cb:79:aa:27:80:c6:5c:54:2f:e5:36:34:de:
                    33:45:6a:08:88:66:91:4d:70:11:46:78:0f:42:d3:
                    61:37:69:0a:01:22:26:31:8f:1f:44:db:a5:08:91:
                    23:86:24:4b:7f:b4:86:80:57:4b:5e:6a:50:12:cf:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B2:4C:6B:2B:D1:34:E6:1D:91:8A:47:24:84:89:68:C5:12:D5:B3
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32322d3232203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         25:54:89:06:f7:b6:f5:6e:11:24:4e:ec:a3:74:12:a0:af:f3:
         89:a6:3b:74:ca:34:84:3b:8e:a1:f7:3e:e2:16:47:2f:25:be:
         04:e6:0c:32:14:bd:24:58:b4:69:e5:5b:33:c9:53:87:17:c1:
         06:2d:2a:4f:3a:a4:01:44:1b:e3:17:fc:52:18:21:c1:97:58:
         02:2c:87:3b:e5:2f:1c:58:60:2b:50:cd:ea:c4:1c:d3:37:59:
         81:49:5d:5b:16:ea:53:90:0a:da:52:56:c5:8a:40:f2:f2:ba:
         a2:43:96:cc:57:aa:27:94:f8:a8:cd:5b:2a:3b:58:3f:8b:58:
         fd:8b:f3:e9:4f:28:08:f1:db:53:05:38:fa:60:fa:5a:71:79:
         70:f8:5e:d0:9d:49:29:f9:94:c0:71:41:c6:19:92:33:c4:ae:
         1b:a8:12:68:8b:c1:4c:e4:75:dd:a6:b3:82:2a:57:84:e8:bb:
         d9:73:f6:b6:cb:cf:ba:a2:a2:a9:0b:fc:fe:e1:d7:cf:1b:bd:
         d6:b9:38:ef:76:7e:41:6e:77:b6:28:33:e6:18:03:ea:56:35:
         e2:cd:66:d8:9b:ee:df:74:b5:0d:58:8d:32:1f:11:be:fe:02:
         00:7b:62:e0:c1:84:dc:43:8e:7c:f0:ce:c8:d5:7c:19:ab:7c:
         cf:41:58:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:45:37 2024 by rpki-client on console-ams.rpki-client.org