Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3232203d3e20323634363735.roa
File:                     3136382e3132312e35362e302f32322d3232203d3e20323634363735.roa (raw, json)
Hash identifier:          ZnDx7CqUWL7rbFSi9mFoLvnfDYzKbe4fQtfN5btwmaM=
Subject key identifier:   41:49:C6:21:EA:BE:7C:18:7D:26:3B:33:63:7E:DC:4C:9F:B1:E6:C9
Certificate issuer:       /CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
Certificate serial:       6FD72C0D27BC8E6E809CAD6753EDA851E3CC39AE
Authority key identifier: F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3232203d3e20323634363735.roa
Signing time:             Tue 05 Mar 2024 18:09:47 +0000
ROA not before:           Tue 05 Mar 2024 18:04:47 +0000
ROA not after:            Tue 04 Mar 2025 18:09:47 +0000
asID:                     264675
IP address blocks:        168.121.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d7:2c:0d:27:bc:8e:6e:80:9c:ad:67:53:ed:a8:51:e3:cc:39:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E
        Validity
            Not Before: Mar  5 18:04:47 2024 GMT
            Not After : Mar  4 18:09:47 2025 GMT
        Subject: CN=4149C621EABE7C187D263B33637EDC4C9FB1E6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:92:70:1e:f3:b3:b0:ea:13:45:0c:30:b2:d4:
                    fa:7a:1d:58:21:11:4a:8a:94:13:84:b1:dc:1f:e7:
                    69:1a:38:1e:58:7a:c8:41:bf:f7:42:5a:00:30:c8:
                    8a:46:76:00:f7:94:0f:87:21:66:04:41:3a:f5:0d:
                    68:26:48:b4:c5:27:c9:37:7a:14:c6:2e:63:8e:d1:
                    5b:83:a9:f3:6b:44:07:78:c4:c3:29:d3:9d:a1:00:
                    e1:0f:9d:3c:a4:fe:02:09:4b:a4:87:64:11:01:e2:
                    83:c0:5b:a0:3f:b9:8f:00:05:71:c1:af:5d:f8:58:
                    61:47:ae:67:1a:7e:ce:28:56:03:7c:74:9b:a4:dd:
                    6b:ee:6a:42:ba:58:d3:62:66:1e:11:38:ff:be:9e:
                    c2:5a:79:2c:0d:9a:93:a5:07:ad:1b:85:28:65:ab:
                    49:8c:08:bc:e5:0e:ad:a5:87:72:5d:22:49:94:b2:
                    48:6b:04:ff:29:0f:67:db:4e:9c:16:6e:af:12:ed:
                    55:0d:cd:29:d8:fd:c8:c8:cc:09:3f:51:8c:ea:1d:
                    77:75:3e:a3:4b:87:a4:0b:4f:4f:0d:1f:19:de:4d:
                    f8:55:fa:7e:64:04:5d:d0:f6:ba:e1:85:e4:6f:3f:
                    81:ca:56:e7:b6:e9:c9:43:99:53:26:29:e8:55:fa:
                    a2:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:49:C6:21:EA:BE:7C:18:7D:26:3B:33:63:7E:DC:4C:9F:B1:E6:C9
            X509v3 Authority Key Identifier:
                keyid:F4:D4:85:7F:01:6A:86:FB:FB:D6:05:66:A3:AE:A9:CE:93:B4:CD:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4D4857F016A86FBFBD60566A3AEA9CE93B4CD5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AD6BDD22E9F3DB31890AF596FB95F5737BAB8202CDF99CEDC3890B710EF52702/0/3136382e3132312e35362e302f32322d3232203d3e20323634363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:c4:06:dd:c9:fc:59:cf:62:49:dd:ea:e1:c9:51:16:ad:
         61:51:5c:a2:5a:66:fc:f2:ee:95:b7:00:60:10:ea:74:bc:42:
         c2:ab:fd:7a:4a:5f:a8:64:4d:f2:3b:47:2d:6d:6c:ba:7e:fe:
         cc:6e:16:d4:80:fe:21:1d:8a:7c:e9:29:29:cd:ce:83:11:92:
         33:15:ce:52:e4:1f:a0:b4:4b:08:9b:70:4a:e3:29:ea:0a:85:
         84:80:d2:92:39:02:45:57:37:02:16:0c:10:c1:7f:89:d0:ec:
         b9:45:00:d6:55:9a:21:14:67:ee:e4:2e:26:74:ba:63:78:8e:
         b7:ba:eb:fe:d5:40:a1:28:39:80:b5:75:c6:cb:97:1c:b0:dd:
         d7:d5:81:19:5a:14:11:70:37:c8:4d:95:93:a0:bb:11:53:71:
         8d:fe:79:aa:6e:47:44:91:41:d5:51:6b:10:7b:a2:e1:68:e9:
         41:34:99:c5:0e:a1:aa:b7:01:18:3a:cf:c6:48:e3:33:32:ac:
         05:81:9e:e2:a1:f7:93:02:e9:60:67:a1:ad:37:3a:44:f8:4c:
         49:fd:8b:44:6f:22:6c:d9:6b:d6:1c:c5:00:f4:6b:0e:46:af:
         fc:e7:70:dc:74:21:5c:11:e8:ac:04:ea:fa:91:bc:b5:18:ae:
         db:64:4a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 04:18:04 2024 by rpki-client on console-fra.rpki-client.org