Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230322e302f32342d3234203d3e20323634373734.roa
File:                     3136382e3139372e3230322e302f32342d3234203d3e20323634373734.roa (raw, json)
Hash identifier:          b9bQWqypwRbXaQA5N4sYhA0sjMQeBNeJgY6pwenZGyw=
Subject key identifier:   DD:F7:BD:44:0A:D9:36:D6:6D:D8:F2:C9:7A:9E:1D:52:02:4E:1E:A9
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       5A868AAA30384F2E0142EA394D06DF99991562D1
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230322e302f32342d3234203d3e20323634373734.roa
Signing time:             Thu 21 Mar 2024 15:55:00 +0000
ROA not before:           Thu 21 Mar 2024 15:50:00 +0000
ROA not after:            Thu 20 Mar 2025 15:55:00 +0000
asID:                     264774
IP address blocks:        168.197.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:86:8a:aa:30:38:4f:2e:01:42:ea:39:4d:06:df:99:99:15:62:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Mar 21 15:50:00 2024 GMT
            Not After : Mar 20 15:55:00 2025 GMT
        Subject: CN=DDF7BD440AD936D66DD8F2C97A9E1D52024E1EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:24:b3:43:83:9f:d1:67:86:ff:1c:29:dc:
                    0f:85:f8:12:da:92:80:60:d8:02:9e:ba:24:bc:f6:
                    4b:61:27:af:58:d2:a5:4c:5e:ea:9e:5c:ea:5c:fd:
                    5f:d3:d4:f9:ed:a9:6a:ca:c2:6a:70:f0:4c:dd:18:
                    92:ed:70:ce:aa:79:21:52:2f:13:3e:ee:90:dc:c4:
                    11:c2:e9:13:27:2c:01:64:b8:78:24:d4:6d:ce:30:
                    63:3a:d4:f6:6c:41:42:1b:be:87:fd:c7:eb:53:eb:
                    d6:94:02:35:7a:95:73:86:f6:c4:f4:7b:ac:fe:bc:
                    f2:2c:ae:06:f1:c8:fe:d2:41:9c:93:a0:4e:3c:06:
                    39:42:5a:bd:6a:2e:d4:ed:91:6a:a7:23:38:3d:68:
                    e6:82:5a:75:de:a8:10:66:bf:56:0c:94:f3:f4:94:
                    76:fd:31:48:91:82:1b:64:ff:ff:42:d8:72:22:13:
                    23:e4:6e:4b:db:0c:3d:44:16:f2:d2:68:da:74:8b:
                    3a:62:47:d6:5b:73:39:6d:d3:96:d5:85:e1:1e:0d:
                    62:96:ec:71:1d:ef:2c:0c:b2:7e:3d:37:86:f5:e0:
                    79:c0:60:cd:02:2a:51:05:5d:63:30:f3:fd:fb:db:
                    6b:ca:95:88:4b:20:ff:86:04:0c:af:1f:2f:46:2d:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F7:BD:44:0A:D9:36:D6:6D:D8:F2:C9:7A:9E:1D:52:02:4E:1E:A9
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230322e302f32342d3234203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:18:0f:3e:5e:78:cd:c8:1d:60:8f:d3:e6:20:03:4c:f6:91:
         40:20:ec:d3:ec:30:76:d5:94:f0:e1:87:26:18:11:09:b8:bb:
         59:af:a4:2f:59:98:76:4e:61:36:14:21:94:11:e8:c1:55:2b:
         9a:76:92:b1:c6:e3:53:28:42:38:a6:77:e6:32:68:c2:2c:2c:
         69:3c:e8:60:1c:4f:a7:ea:c5:9f:e3:5f:c8:01:39:27:be:ee:
         f4:b1:05:e1:3d:f7:24:d3:b1:82:80:f9:84:03:c6:82:55:03:
         19:c1:d3:66:ca:dd:90:65:84:94:16:27:df:a5:01:3b:0a:64:
         51:5c:f6:0d:03:99:54:62:55:54:a6:dd:c3:2f:65:03:87:9f:
         ba:b4:fe:a0:0d:e2:b3:0e:1c:e8:f0:2c:0d:60:95:18:2c:26:
         46:0b:2a:53:3d:32:7c:e0:0b:fa:38:c0:21:6d:6c:ec:b1:dc:
         61:c0:02:f8:8d:fa:3e:fd:b3:c1:7a:ec:18:88:7c:9e:2f:c8:
         03:1e:93:5e:53:8d:26:1d:81:78:42:f3:f4:b8:1d:22:67:f4:
         05:38:c3:30:4b:6f:69:e3:2f:20:ce:64:bc:94:97:52:c7:82:
         62:2e:24:70:af:0d:7e:35:02:0d:e1:ec:85:65:66:49:66:40:
         89:38:b4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 08:12:32 2024 by rpki-client on console-fra.rpki-client.org