Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa
File:                     3136372e3234392e382e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          Jl5twE0U/ZvLHsbdGDz8w/ms+W/bm456vaWihRc63+g=
Subject key identifier:   93:1C:C8:90:56:4C:F6:43:23:5F:44:52:AB:02:F6:E8:A6:C0:21:56
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       12BD4A8DD71648A625BAA8064A730167CB97D6B2
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:43 +0000
ROA not before:           Tue 05 Mar 2024 17:39:43 +0000
ROA not after:            Tue 04 Mar 2025 17:44:43 +0000
asID:                     27843
IP address blocks:        167.249.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bd:4a:8d:d7:16:48:a6:25:ba:a8:06:4a:73:01:67:cb:97:d6:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:43 2024 GMT
            Not After : Mar  4 17:44:43 2025 GMT
        Subject: CN=931CC890564CF643235F4452AB02F6E8A6C02156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:0f:4b:49:f4:3d:1c:a4:86:ef:3e:bc:95:
                    66:59:c1:3a:ac:1d:1a:17:b7:95:18:4b:ac:46:7c:
                    be:ec:f5:92:90:96:78:ff:6e:80:cc:1b:91:6a:4c:
                    80:7c:a6:84:9e:18:1a:e0:ab:40:1d:6c:31:b7:f0:
                    77:cf:43:f1:a2:40:7b:ae:59:75:49:29:3e:47:dc:
                    57:99:d4:5d:66:df:6e:b4:67:f4:ac:28:90:a4:de:
                    f2:b5:3c:0c:b2:ad:89:72:29:f2:de:53:17:32:17:
                    9c:dd:df:d9:59:1d:f6:cc:e9:88:74:6b:7e:8e:93:
                    c7:fc:9e:a1:6b:4e:76:67:c8:eb:95:db:5c:1e:bd:
                    01:ac:11:aa:12:ae:25:43:cd:c9:98:29:60:88:8c:
                    c7:d8:d3:e1:59:80:ed:3f:64:72:94:ab:f9:77:8c:
                    db:b1:e0:c1:b6:42:c4:95:6f:55:86:7f:d3:90:b3:
                    21:a3:4f:cf:7e:26:db:be:45:99:ba:bd:91:1b:5d:
                    1e:b4:58:a9:b2:53:8d:58:e8:18:d9:5d:4d:55:ea:
                    25:41:28:47:14:37:1e:e6:54:4b:af:0d:1e:e9:b5:
                    cc:2c:9b:01:34:b2:c3:9a:e0:c7:1e:db:20:d6:cc:
                    24:ce:ba:d0:17:1d:ce:14:d2:8e:3a:86:8a:71:99:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1C:C8:90:56:4C:F6:43:23:5F:44:52:AB:02:F6:E8:A6:C0:21:56
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136372e3234392e382e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:a1:69:8d:ff:5a:53:4c:7c:db:5a:28:36:7c:a7:93:94:
         d6:0f:3c:68:23:b8:62:88:64:2f:2a:99:a7:6b:1f:6c:48:c0:
         26:10:45:f7:8c:fa:d9:77:f2:2c:9f:93:9e:2b:76:0e:67:ef:
         76:3f:66:67:0e:e0:9f:d0:6a:57:ab:f2:54:90:c8:b6:55:0d:
         1a:b1:fb:9a:98:08:c9:24:39:87:36:d1:50:c4:a0:5c:b1:33:
         2d:cb:ac:24:f8:c6:d5:2a:cd:0a:ad:60:c8:27:c0:63:59:c0:
         91:af:6b:dc:11:41:e7:92:7e:0e:27:b9:ea:82:e8:bb:44:2c:
         78:c7:32:47:93:78:67:3c:7d:8b:2f:6d:d0:5d:60:d4:30:83:
         80:b6:18:38:79:c5:07:21:5f:72:66:08:55:aa:b3:05:f7:33:
         a4:a3:47:81:b6:e3:3d:11:96:a2:d1:5b:e8:59:d4:0a:a4:14:
         65:ff:ff:c5:16:5f:cf:b7:ed:85:d6:be:b0:fe:b9:72:71:b3:
         e1:6b:90:71:64:fa:ce:14:f7:31:d5:f4:82:78:ad:b8:d5:24:
         30:69:25:36:dd:df:ec:18:5e:4d:25:f2:f9:ca:db:b7:70:6e:
         6a:2f:5d:1e:3c:c0:95:67:ee:81:87:c7:e9:2d:14:aa:8d:02:
         ee:23:8a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org