Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34362e302f32332d3234203d3e203237383433.roa
File:                     3136382e3132312e34362e302f32332d3234203d3e203237383433.roa (raw, json)
Hash identifier:          ZOw8DsXBm1qa3197thgtChXA2+iy9M1GDJf2sLFagWg=
Subject key identifier:   4E:1B:B0:72:A6:1B:62:38:9D:FB:3C:AC:4F:91:DF:E5:E0:51:86:9B
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       3BCDB8B7E657D236F822F68910A969923555B97E
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34362e302f32332d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:45 +0000
ROA not before:           Tue 05 Mar 2024 17:39:45 +0000
ROA not after:            Tue 04 Mar 2025 17:44:45 +0000
asID:                     27843
IP address blocks:        168.121.46.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cd:b8:b7:e6:57:d2:36:f8:22:f6:89:10:a9:69:92:35:55:b9:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:45 2024 GMT
            Not After : Mar  4 17:44:45 2025 GMT
        Subject: CN=4E1BB072A61B62389DFB3CAC4F91DFE5E051869B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cd:1b:8c:66:06:6e:bf:87:0c:d1:44:cf:6e:
                    e4:7b:1c:de:d1:e4:80:51:6c:3e:44:36:c5:28:f8:
                    d0:de:1c:e5:41:65:c7:ba:49:29:ef:0c:f1:2b:1d:
                    f2:c8:48:c4:5e:2d:3e:d3:70:7c:ab:61:82:2e:a5:
                    5d:b8:ba:a0:90:d8:4c:86:60:e2:c6:3d:ef:32:87:
                    86:8c:e6:6d:4c:5f:63:63:dc:d7:7a:38:09:fa:c7:
                    fc:88:b5:33:6f:f1:d8:c1:50:07:0c:9c:17:0d:8b:
                    d1:7a:c9:d8:00:e4:4f:ae:c2:1b:91:2d:0c:cc:a2:
                    b0:36:61:d5:ad:2e:7a:6e:7e:30:20:14:81:ae:a4:
                    7f:12:79:dc:55:e8:e7:dd:8a:74:1c:6b:fd:59:a2:
                    a6:28:d9:2b:6c:5f:21:64:02:5e:0e:fa:c4:de:1d:
                    1d:5a:2f:a7:36:31:78:8c:4e:59:52:61:12:be:bc:
                    9d:e0:d3:99:d0:a2:59:40:a3:01:db:02:3d:68:8d:
                    c3:34:e6:f8:4f:47:41:90:be:85:07:09:1f:c4:fe:
                    d8:59:d6:c9:79:97:be:3e:0d:de:97:bd:75:7d:07:
                    7e:e0:66:80:4d:4e:a7:88:59:f7:9c:12:f0:4d:c9:
                    46:ad:ae:0d:78:6d:92:1c:03:f0:c4:7b:c1:67:77:
                    79:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1B:B0:72:A6:1B:62:38:9D:FB:3C:AC:4F:91:DF:E5:E0:51:86:9B
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34362e302f32332d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:8d:ff:b3:94:4c:b6:d4:50:c1:29:7b:48:b7:4c:62:62:c8:
         1d:f6:91:c3:95:1e:b1:43:fc:21:e0:4f:c0:e7:0a:e7:b0:32:
         34:40:49:97:24:df:53:bf:e5:e3:89:eb:ed:63:5d:3c:1a:f8:
         17:a6:e8:04:9b:63:3d:81:24:c0:3e:36:a1:aa:06:53:8b:ae:
         e5:77:0d:c0:65:e1:22:df:a5:97:7a:48:80:4a:5c:03:ed:ad:
         a5:0e:a3:92:34:66:0b:ad:91:f9:f6:28:db:ee:c7:74:a8:33:
         eb:d5:6c:27:40:05:67:46:f1:26:b6:c2:df:cd:55:ab:1a:66:
         94:c3:f6:07:5b:77:bd:de:2b:0e:bd:b6:eb:e6:ef:fa:7a:0f:
         6f:38:21:2e:88:1e:63:d5:43:77:2c:d1:b8:fb:50:eb:44:5a:
         b3:c8:6f:37:ce:b7:f4:84:00:9a:fe:a2:15:df:ce:61:98:c6:
         77:cf:49:69:27:d3:37:cd:bc:9a:9a:6f:d4:46:30:e7:a8:97:
         f4:7a:d3:78:85:64:30:d0:20:65:f9:4c:b1:12:71:65:11:34:
         6b:09:a3:f2:69:22:55:c2:f6:0f:72:00:bf:a9:a8:d3:77:f1:
         33:1a:ed:e2:c4:c5:14:79:16:13:49:c5:33:3c:d0:6c:fd:04:
         fa:6f:25:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:05 2024 by rpki-client on console-fra.rpki-client.org