Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/3136382e3139372e3133352e302f32342d3234203d3e20323633373835.roa
File:                     3136382e3139372e3133352e302f32342d3234203d3e20323633373835.roa (raw, json)
Hash identifier:          1hnFxBtH5ZXUyN3I/f4zCmoQ33Bo+rlDk9o7EiHZGQ0=
Subject key identifier:   A4:6D:2E:A1:BA:30:A7:D7:05:39:39:CB:DA:70:A3:72:D8:72:7D:29
Certificate issuer:       /CN=8B6B14260DFF04983F76B1E93C6710B1CDCCADF4
Certificate serial:       510698C521BA8737A2BDB28061C275C80DE0798E
Authority key identifier: 8B:6B:14:26:0D:FF:04:98:3F:76:B1:E9:3C:67:10:B1:CD:CC:AD:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/3136382e3139372e3133352e302f32342d3234203d3e20323633373835.roa
Signing time:             Thu 02 May 2024 19:35:00 +0000
ROA not before:           Thu 02 May 2024 19:30:00 +0000
ROA not after:            Thu 01 May 2025 19:35:00 +0000
asID:                     263785
IP address blocks:        168.197.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:06:98:c5:21:ba:87:37:a2:bd:b2:80:61:c2:75:c8:0d:e0:79:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B6B14260DFF04983F76B1E93C6710B1CDCCADF4
        Validity
            Not Before: May  2 19:30:00 2024 GMT
            Not After : May  1 19:35:00 2025 GMT
        Subject: CN=A46D2EA1BA30A7D7053939CBDA70A372D8727D29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:81:09:90:3c:9d:53:ca:d0:7f:16:c9:cd:90:
                    6e:21:ef:40:86:7e:66:67:4d:f2:57:1d:87:a5:35:
                    ec:81:73:1c:73:47:5d:1c:57:2e:e3:e8:45:cc:24:
                    b1:da:92:b3:44:45:1c:89:63:4e:ef:83:6b:e8:5d:
                    88:3b:49:e5:6e:c6:85:29:07:eb:a2:2f:0b:44:ff:
                    53:c3:9f:f5:e8:03:c0:b5:23:3b:1c:3a:34:6b:91:
                    9f:99:72:c1:d3:57:2b:0b:6f:eb:e0:f1:d9:f7:1d:
                    b5:51:e3:23:9d:a9:0e:3b:e9:ee:b0:3f:22:1a:3c:
                    ec:3e:2d:f4:ba:f4:e7:62:ce:d6:de:74:2d:f5:1b:
                    25:ba:01:d2:57:1d:cc:ca:ae:50:07:d2:97:1d:2f:
                    30:e1:5a:cd:21:5a:35:33:e2:f8:df:c9:7a:9d:f6:
                    79:29:dc:4f:8e:5f:9f:e3:eb:71:69:ce:03:28:3e:
                    92:e6:61:c7:43:a2:81:6b:52:45:51:76:6a:44:b5:
                    75:e8:ed:e3:a5:fc:30:d8:36:ed:64:29:dd:91:25:
                    ee:1c:2f:03:bc:00:d3:e0:87:0d:f9:bf:f3:2f:37:
                    8f:78:67:19:6a:3e:bc:b9:b1:6c:d1:e9:9c:b0:38:
                    19:9d:87:e1:04:b3:a7:b8:f4:8a:a9:9e:09:b4:d4:
                    87:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:2E:A1:BA:30:A7:D7:05:39:39:CB:DA:70:A3:72:D8:72:7D:29
            X509v3 Authority Key Identifier:
                keyid:8B:6B:14:26:0D:FF:04:98:3F:76:B1:E9:3C:67:10:B1:CD:CC:AD:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B6B14260DFF04983F76B1E93C6710B1CDCCADF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA530C4E9D4C27C690E8775121D77026235B82778608725CA5CB2E98CE8D0B93/0/3136382e3139372e3133352e302f32342d3234203d3e20323633373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:7b:fa:af:60:d4:ff:cc:b5:85:a3:b2:7a:f9:23:62:8f:8a:
         ae:04:54:90:3c:06:77:0c:2a:0f:ab:55:cb:7f:e5:19:48:4e:
         a8:6e:a0:dc:23:f4:c3:1a:e4:9a:18:73:e4:63:9f:85:60:7d:
         e7:21:51:11:e9:5b:28:23:ce:28:ce:72:99:22:4b:bd:3f:70:
         23:10:95:3a:bd:e2:45:23:5b:96:3a:c4:96:20:2c:9a:3c:ae:
         2e:ac:88:16:1e:aa:1f:e1:d2:35:d3:d1:1c:96:63:3e:e0:69:
         1f:72:d0:2d:ad:04:5a:00:e4:a2:e3:dc:80:fa:82:b2:3c:4c:
         45:17:52:72:fa:a9:44:13:39:75:fb:fb:00:9e:4d:fa:5f:79:
         44:2a:39:97:a8:a1:a0:c1:b0:07:31:04:2a:a9:88:00:56:1d:
         51:2f:88:ad:81:4e:cb:1f:da:71:4e:7a:57:cb:bd:9d:f5:7c:
         e7:91:31:ca:15:52:a4:e9:85:17:a4:1b:7d:84:48:f4:21:16:
         53:f5:7c:c7:01:3e:de:a8:55:bd:34:e7:31:7c:3f:32:14:77:
         ac:21:c3:0b:de:d4:9a:e5:0a:57:c9:8b:68:b6:82:e7:61:93:
         8d:0f:ad:a8:20:95:c7:66:c2:05:7e:ce:cf:27:db:a7:c5:e7:
         51:d6:19:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:19 2024 by rpki-client on console-fra.rpki-client.org