Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa
File:                     3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          wuWHqWVN89yOnx3jlMx3PEEUln1aWqQPtxJUe4lnLDM=
Subject key identifier:   01:F2:86:B9:6C:4F:0D:90:67:86:D2:1D:9E:4D:E0:60:62:1A:0F:6B
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       31448119362B23CD9F1225EC11215D089D90C83B
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 05 Mar 2024 18:09:42 +0000
ROA not before:           Tue 05 Mar 2024 18:04:42 +0000
ROA not after:            Tue 04 Mar 2025 18:09:42 +0000
asID:                     263725
IP address blocks:        168.228.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:44:81:19:36:2b:23:cd:9f:12:25:ec:11:21:5d:08:9d:90:c8:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Mar  5 18:04:42 2024 GMT
            Not After : Mar  4 18:09:42 2025 GMT
        Subject: CN=01F286B96C4F0D906786D21D9E4DE060621A0F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:42:ee:82:2a:22:7c:50:48:bc:a1:6f:17:59:
                    59:71:26:f8:77:83:7a:ff:ca:5c:b9:64:f7:3b:17:
                    48:67:6f:10:32:89:f5:65:6b:ac:52:8a:7d:5d:1c:
                    d4:1b:42:11:ca:c2:31:ff:d3:00:11:b5:69:8e:84:
                    2d:fd:5b:af:22:e9:1c:df:ba:8b:71:05:f0:7e:4e:
                    8b:03:0a:bb:a7:c1:f1:08:8d:16:52:f2:4f:68:a2:
                    cf:19:53:84:ff:1d:50:55:d6:90:e1:bc:be:9e:cd:
                    b1:10:c7:a2:d3:29:f7:d5:a1:22:59:f0:4f:21:c0:
                    ff:fa:35:69:5e:a9:59:ea:d9:e0:57:44:42:88:c6:
                    72:5a:a2:30:6c:8a:34:53:87:29:33:66:3e:39:c0:
                    71:d3:59:e7:15:4a:e5:11:60:fc:39:22:bf:96:f1:
                    52:79:99:11:cb:41:fe:56:c5:6a:89:13:38:06:37:
                    68:d5:60:0a:d4:03:51:b2:7c:b6:31:7a:47:38:21:
                    76:6e:21:9e:67:fb:7f:1e:29:de:bc:5a:88:07:bb:
                    5c:5a:9b:fd:ac:e9:40:60:43:8a:2c:aa:2a:ec:73:
                    e9:21:29:19:f5:8e:16:e3:6c:0e:a1:62:49:a8:e8:
                    c3:17:35:2f:54:1a:38:25:05:48:67:b8:d0:d0:3d:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F2:86:B9:6C:4F:0D:90:67:86:D2:1D:9E:4D:E0:60:62:1A:0F:6B
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139332e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:1d:18:77:0e:75:f3:87:7d:24:6b:e0:c7:f3:d6:3f:f8:90:
         c8:18:a9:56:db:af:2d:35:28:78:e0:26:2d:49:c8:b1:f2:bb:
         a0:da:ad:78:8f:6a:2d:2b:5b:b5:b5:19:01:9d:f1:c1:15:ae:
         6b:19:e3:90:3a:27:51:44:c5:89:f2:24:83:15:a9:79:2c:2d:
         2e:bb:9f:33:bc:d3:02:be:d5:09:38:4c:19:fa:65:f5:d7:bc:
         94:a6:8e:93:7a:fd:55:e8:ef:e2:89:4e:50:a0:28:d0:79:61:
         51:74:d1:2d:f2:1b:b2:63:5d:ea:0e:52:a8:bf:67:f3:7c:b2:
         9c:a8:73:8e:2f:12:d0:89:57:35:84:c8:7d:49:ec:a3:ea:af:
         08:dd:05:b0:5c:8f:73:96:f6:1f:d9:e7:9d:42:dc:fc:3d:dd:
         bd:b7:e8:87:c7:89:0a:2a:3e:dd:40:91:d1:95:3a:2d:f2:e7:
         97:a9:30:b8:1f:2f:36:bd:c8:53:6b:3c:a1:6c:0a:ee:84:c6:
         2e:f4:45:3b:33:d2:2f:01:ad:de:51:31:6d:01:a8:0d:ec:49:
         98:f3:86:a3:2d:b0:ca:ef:52:de:64:f2:1f:70:dc:0a:b9:1e:
         94:e0:87:a9:2b:2d:8b:ac:21:c4:0f:b7:ff:62:a0:b9:67:20:
         a0:fe:d9:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:06 2024 by rpki-client on console-ams.rpki-client.org