Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32342d3234203d3e20323634373734.roa
File:                     3136382e3139372e3230302e302f32342d3234203d3e20323634373734.roa (raw, json)
Hash identifier:          mtKLZ9Fd/58x1fg7AqU6wFWIEh3mJ5wKKWY3djB+5pE=
Subject key identifier:   13:12:95:16:96:83:FE:E9:B8:36:E6:33:77:2D:DE:83:EF:2E:92:EF
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       3F4172B354C7B1B68E414DC9D1BDFDF6BE58A80A
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32342d3234203d3e20323634373734.roa
Signing time:             Thu 21 Mar 2024 15:55:01 +0000
ROA not before:           Thu 21 Mar 2024 15:50:01 +0000
ROA not after:            Thu 20 Mar 2025 15:55:01 +0000
asID:                     264774
IP address blocks:        168.197.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 30 May 2024 00:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:41:72:b3:54:c7:b1:b6:8e:41:4d:c9:d1:bd:fd:f6:be:58:a8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Mar 21 15:50:01 2024 GMT
            Not After : Mar 20 15:55:01 2025 GMT
        Subject: CN=131295169683FEE9B836E633772DDE83EF2E92EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:37:8c:2c:0c:40:aa:7d:f2:bc:2b:4b:5f:e2:
                    5b:37:e2:44:e8:a7:0a:89:c8:dc:26:ce:3c:7b:ed:
                    f0:5c:c8:3d:7d:b8:61:13:50:d6:05:39:ca:fe:29:
                    66:73:64:9d:5a:e5:68:38:64:e4:2f:f8:5d:06:78:
                    ae:16:84:50:96:f6:ca:de:00:f7:d9:e6:5e:50:09:
                    45:3e:8a:83:da:db:10:5e:ff:5e:21:b5:e5:5c:bd:
                    e6:c5:97:37:21:13:c5:5e:63:89:9b:74:9e:d9:e0:
                    75:6f:28:06:59:15:35:ad:42:4a:d1:d7:d6:d1:e9:
                    66:34:9b:a4:ae:7a:4c:73:23:e0:0f:78:71:37:1b:
                    9e:95:01:2f:e9:40:a9:92:93:91:0b:e6:fe:4f:aa:
                    f2:00:2f:ab:0d:54:82:de:02:14:67:88:44:78:ff:
                    83:b2:5b:61:89:e8:9a:f8:20:dc:55:97:68:23:a0:
                    13:63:94:42:78:c7:b0:bc:c2:a1:5e:d7:34:3d:6a:
                    80:7d:5b:1d:37:52:50:54:4f:a3:fa:27:00:1d:d4:
                    bf:70:f4:92:24:0a:cf:71:ff:56:55:cc:36:bc:79:
                    9d:f4:ec:bb:5d:f5:25:57:76:b4:ab:9a:cd:99:50:
                    b9:9e:04:06:67:f4:c8:ec:a5:8a:b4:ce:85:95:54:
                    be:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:12:95:16:96:83:FE:E9:B8:36:E6:33:77:2D:DE:83:EF:2E:92:EF
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230302e302f32342d3234203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:c3:41:f9:d4:56:3d:9f:e5:e3:9d:2b:70:38:aa:9c:41:03:
         c2:d1:22:5f:4c:83:03:b8:3e:0c:ba:c4:23:84:64:e8:0a:f7:
         01:92:e9:35:33:ab:55:6c:10:ba:58:39:3a:31:91:3a:93:b6:
         0c:70:09:af:6d:e9:5f:1d:ac:1a:55:6a:17:b0:af:dc:30:82:
         44:f7:0c:ba:65:8a:b2:ad:1f:1b:7c:c9:93:95:ce:14:72:74:
         3b:e3:ba:cb:21:1f:4c:8c:5d:66:6a:9f:4d:1c:62:7c:c4:31:
         9c:ca:4f:cc:66:43:af:df:41:9a:2c:f7:fc:44:c6:5a:76:67:
         84:0c:a3:be:6d:b7:bb:9f:59:a8:de:3c:6b:26:9f:2f:c0:6e:
         f7:c2:d0:fd:1a:84:29:7a:3f:45:13:fa:4b:8e:17:4f:36:7a:
         dd:72:40:e9:33:f4:e4:9e:31:06:f4:e5:c6:f8:c8:4e:fa:2a:
         be:a4:9d:23:56:79:a5:02:7c:41:b1:7b:09:cf:1e:7f:ac:a4:
         a3:9d:ab:aa:35:ef:74:ce:e2:6d:91:ff:6f:4e:ae:5d:29:7c:
         13:68:57:de:11:88:52:9a:4f:0e:96:78:e1:fb:28:c1:eb:85:
         54:25:e4:08:b7:70:0d:a9:ba:9c:0d:c7:1d:1f:0a:0b:cb:1a:
         01:6a:e1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 14:00:47 2024 by rpki-client on console-fra.rpki-client.org