Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/3136382e3139352e3131362e302f32322d3234203d3e20323634373539.roa
File:                     3136382e3139352e3131362e302f32322d3234203d3e20323634373539.roa (raw, json)
Hash identifier:          FhRk9PmCuQWj2Z6p0FFSbhd41jvQVGmsRPBltccWpmg=
Subject key identifier:   45:A5:04:CB:1D:16:FD:11:31:64:EB:F1:93:2A:0B:B1:90:C7:76:32
Certificate issuer:       /CN=8749535E400379B62B4631901E5DC801A7E80E13
Certificate serial:       7F77777854ED5603A7E19924B99865C791E69BA4
Authority key identifier: 87:49:53:5E:40:03:79:B6:2B:46:31:90:1E:5D:C8:01:A7:E8:0E:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8749535E400379B62B4631901E5DC801A7E80E13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/3136382e3139352e3131362e302f32322d3234203d3e20323634373539.roa
Signing time:             Tue 05 Mar 2024 17:51:02 +0000
ROA not before:           Tue 05 Mar 2024 17:46:02 +0000
ROA not after:            Tue 04 Mar 2025 17:51:02 +0000
asID:                     264759
IP address blocks:        168.195.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/8749535E400379B62B4631901E5DC801A7E80E13.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/8749535E400379B62B4631901E5DC801A7E80E13.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8749535E400379B62B4631901E5DC801A7E80E13.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:77:77:78:54:ed:56:03:a7:e1:99:24:b9:98:65:c7:91:e6:9b:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8749535E400379B62B4631901E5DC801A7E80E13
        Validity
            Not Before: Mar  5 17:46:02 2024 GMT
            Not After : Mar  4 17:51:02 2025 GMT
        Subject: CN=45A504CB1D16FD113164EBF1932A0BB190C77632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:c4:04:2c:97:30:ae:0e:02:75:cf:73:c9:
                    99:e3:f0:d6:24:a2:76:21:3b:6c:ce:d1:c3:a3:74:
                    6e:3e:84:a4:16:6f:82:c2:ed:46:c1:8d:ed:36:dd:
                    d2:11:40:b5:5f:b1:30:05:8e:24:95:bf:54:52:70:
                    b0:8a:08:5a:5b:98:a1:c4:6d:c0:86:4d:de:d2:49:
                    e0:1c:ad:c4:9f:f2:ff:fb:3b:0e:ec:46:44:66:c5:
                    31:d2:61:94:73:64:8b:4e:bd:34:7b:d8:5b:f2:c7:
                    c9:fa:df:cd:69:32:d7:76:93:ad:75:a9:d7:2b:10:
                    83:30:a2:69:c4:00:70:ff:d6:f1:87:a3:15:60:21:
                    41:8e:75:4f:9f:b1:b5:b8:eb:20:36:92:b6:6b:ad:
                    07:1c:96:6b:ee:f5:1d:c5:ea:86:de:c5:0a:45:1f:
                    e4:39:84:73:85:54:47:62:e3:5e:47:2a:80:b4:af:
                    67:bb:2c:86:11:60:5d:92:b1:53:fb:0b:5d:fa:a0:
                    44:1d:15:8c:17:69:3b:67:e7:46:64:ba:b6:d9:0c:
                    d7:8d:50:b7:79:28:6b:a7:c2:e2:a5:c6:85:19:1b:
                    76:65:fc:18:7a:7c:e0:a9:6d:31:fc:c7:57:66:57:
                    75:7c:83:54:19:3e:18:91:05:82:9d:04:0c:50:b7:
                    8f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:04:CB:1D:16:FD:11:31:64:EB:F1:93:2A:0B:B1:90:C7:76:32
            X509v3 Authority Key Identifier:
                keyid:87:49:53:5E:40:03:79:B6:2B:46:31:90:1E:5D:C8:01:A7:E8:0E:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/8749535E400379B62B4631901E5DC801A7E80E13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8749535E400379B62B4631901E5DC801A7E80E13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A305FBB967C3C42509419EC3ED452F5970AF89354555169E4F7991908A1870F0/0/3136382e3139352e3131362e302f32322d3234203d3e20323634373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:78:13:b6:fc:2e:6e:24:1f:85:54:36:be:78:dc:2f:58:d8:
         24:e6:42:a9:58:7c:af:32:e8:3c:bc:f9:81:3a:99:9e:6d:4d:
         0b:7a:d1:3b:69:a8:0f:6e:31:0c:4e:06:68:b0:86:34:f1:b4:
         4e:fd:aa:cc:f6:f2:df:20:ea:3e:cf:ab:b8:1e:c0:fa:5c:64:
         f8:c8:63:21:19:dc:5d:49:46:fd:e3:58:d5:89:50:3a:5e:3c:
         5a:74:e6:42:05:88:13:ec:d7:08:c7:ac:bd:a0:d3:0c:a6:3b:
         b1:50:a5:6c:39:e3:ed:3f:a5:07:e9:17:bb:af:f6:81:45:47:
         0f:37:b6:83:3f:89:bc:a8:89:99:cb:7a:15:97:66:ed:86:39:
         a6:24:d3:68:ab:5c:0f:74:e8:a5:68:30:2d:32:92:21:f2:46:
         4d:bb:a4:b8:d7:15:7a:a8:17:36:fa:10:5f:fb:71:16:15:9a:
         81:f5:3a:9a:0f:11:e7:30:d5:ba:24:a1:ed:14:3d:12:85:a2:
         3d:e9:8b:42:2d:11:3c:db:9a:b2:1e:45:a4:93:32:43:70:25:
         34:c1:13:bb:6f:d7:ab:71:10:60:db:8d:22:77:28:9e:4b:16:
         eb:3c:93:7f:c8:70:61:4d:7a:dd:7c:40:6e:9a:38:64:5e:19:
         6e:c1:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 17:01:10 2024 by rpki-client on console-fra.rpki-client.org