Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa
File:                     3136382e3232372e342e302f32322d3234203d3e20323634363830.roa (raw, json)
Hash identifier:          MRWlphOhXpafZw2tUqzeXcIQNrBbrwXdG2/3ThL6qZo=
Subject key identifier:   3B:89:E1:6F:C7:57:F7:9D:C3:C8:E5:50:74:46:EA:0E:23:83:8E:A5
Certificate issuer:       /CN=A80397D3960DA76B2348577C00AF9F95E46D27AC
Certificate serial:       426F2C243C9B1586F3CA1AF4690B377808D5BB22
Authority key identifier: A8:03:97:D3:96:0D:A7:6B:23:48:57:7C:00:AF:9F:95:E4:6D:27:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa
Signing time:             Tue 05 Mar 2024 18:12:59 +0000
ROA not before:           Tue 05 Mar 2024 18:07:59 +0000
ROA not after:            Tue 04 Mar 2025 18:12:59 +0000
asID:                     264680
IP address blocks:        168.227.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6f:2c:24:3c:9b:15:86:f3:ca:1a:f4:69:0b:37:78:08:d5:bb:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A80397D3960DA76B2348577C00AF9F95E46D27AC
        Validity
            Not Before: Mar  5 18:07:59 2024 GMT
            Not After : Mar  4 18:12:59 2025 GMT
        Subject: CN=3B89E16FC757F79DC3C8E5507446EA0E23838EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:31:83:13:ff:a9:86:ff:38:7f:53:46:31:
                    1b:52:ff:ba:a2:0c:c3:b1:87:4b:b2:d0:31:cb:38:
                    fa:ec:ae:87:fe:29:df:d0:1b:5d:41:43:45:58:ce:
                    c5:2d:9d:d9:20:b5:dd:e6:5a:49:a8:b2:9f:28:fd:
                    24:89:5f:bf:e3:c4:1b:85:71:d1:48:68:27:f9:c7:
                    fd:9b:c4:ca:e4:72:d3:d7:ce:66:f7:db:5b:32:8c:
                    61:d5:62:2f:1f:84:5a:f6:67:60:e3:c8:ca:b7:3c:
                    0a:f3:c6:55:42:8c:7b:7a:6c:b5:5a:7e:f6:2b:07:
                    10:2d:3e:26:bf:2f:06:9d:33:ed:3e:23:a9:b5:d5:
                    a8:63:04:8c:64:62:5d:17:f2:7f:f7:e1:d7:6c:61:
                    05:39:d4:c2:2b:4f:d6:83:8d:9d:50:20:22:f8:9d:
                    5e:e6:e0:06:78:6b:c7:5e:0f:6f:fb:ba:05:1d:3f:
                    cf:06:b1:be:63:58:88:80:63:95:ce:9e:98:a2:68:
                    19:3a:b8:86:df:3b:b2:65:4b:0e:cf:11:23:43:b3:
                    e1:7a:b1:da:3e:d9:4c:5d:cd:62:51:a6:3a:ec:39:
                    a3:19:70:13:1b:bf:65:7b:85:97:32:72:92:31:a7:
                    70:06:1c:41:c0:14:bc:0c:64:24:61:4b:14:4b:f9:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:E1:6F:C7:57:F7:9D:C3:C8:E5:50:74:46:EA:0E:23:83:8E:A5
            X509v3 Authority Key Identifier:
                keyid:A8:03:97:D3:96:0D:A7:6B:23:48:57:7C:00:AF:9F:95:E4:6D:27:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A80397D3960DA76B2348577C00AF9F95E46D27AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EBE5331E5E2F260F10C1D448A0E45E10F532F86102FE19E27D8C221D9B612B5/0/3136382e3232372e342e302f32322d3234203d3e20323634363830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:73:51:30:a6:4d:de:e1:f2:ba:9c:5d:7c:0c:d8:85:34:27:
         81:ec:40:c6:2b:1e:4f:1b:0b:2e:21:14:d4:51:aa:c7:ee:43:
         f5:06:6e:1c:08:36:d6:a7:90:d5:71:8f:4e:0e:ef:9a:77:01:
         9d:b7:89:3a:9d:66:22:56:cd:ac:eb:39:d8:7b:17:f4:c4:1f:
         f4:de:3c:e2:14:d1:1a:6b:02:34:8b:df:6f:cf:89:4d:d3:98:
         30:98:c1:8b:c5:99:47:a5:d9:ad:b8:f7:77:d4:e6:22:d8:53:
         90:2b:d5:f7:a5:2a:58:a2:4a:59:07:dd:dd:c5:aa:8a:99:71:
         12:ed:ff:8d:5d:95:87:b1:54:cf:87:85:9a:b7:c0:d4:51:a7:
         a3:54:7a:13:76:9f:dd:a2:f1:56:90:21:fd:0b:d0:b6:14:40:
         59:11:25:f7:10:a8:fe:4b:50:c0:8b:02:23:51:7a:90:06:61:
         5a:71:0a:16:73:cd:73:a0:36:c3:c7:06:ac:fa:16:fa:a0:e0:
         d4:bd:0e:15:ca:29:e4:3d:2b:3d:12:63:37:21:71:07:a7:b0:
         d7:63:ab:ac:c0:0c:e8:13:3a:fa:95:14:33:21:57:c4:02:b0:
         0f:ae:8d:6d:e3:4b:4b:6d:5d:c3:b5:7b:84:2a:98:e2:0b:0e:
         1f:bc:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:22 2024 by rpki-client on console-fra.rpki-client.org