Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa
File:                     3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa (raw, json)
Hash identifier:          0TdNNFl6GvT7hvOlK7Zxb2ruXXqmKHv8+4w/cAjCIxQ=
Subject key identifier:   DD:2B:A6:CC:78:B9:FA:AA:93:96:0E:5A:4E:99:C3:6F:E0:38:CD:EC
Certificate issuer:       /CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
Certificate serial:       743A8D88545B01DC3F6B6FFC66B776239ABBBFBD
Authority key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa
Signing time:             Tue 05 Mar 2024 17:44:28 +0000
ROA not before:           Tue 05 Mar 2024 17:39:28 +0000
ROA not after:            Tue 04 Mar 2025 17:44:28 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:3a:8d:88:54:5b:01:dc:3f:6b:6f:fc:66:b7:76:23:9a:bb:bf:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
        Validity
            Not Before: Mar  5 17:39:28 2024 GMT
            Not After : Mar  4 17:44:28 2025 GMT
        Subject: CN=DD2BA6CC78B9FAAA93960E5A4E99C36FE038CDEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:51:86:3e:26:84:29:7a:36:59:a9:7d:9a:2f:
                    d1:cc:64:3b:d9:69:2a:9b:ac:ae:5c:4f:da:87:cc:
                    0a:1c:90:72:48:1b:a9:16:04:f0:4f:20:d7:66:6a:
                    72:c9:46:ea:5d:f3:f0:69:d8:f0:3b:f0:e5:c6:b7:
                    37:b4:45:fd:a2:46:39:a3:b0:ed:b6:f0:ff:f3:81:
                    ca:a7:1b:ae:61:04:5f:6d:bd:90:22:f3:90:02:5d:
                    32:51:cc:08:bd:fd:4c:8b:98:4d:65:12:97:7b:56:
                    bb:a5:c8:6c:e2:50:0d:58:36:d2:28:3d:de:59:a3:
                    36:27:cf:0b:13:d5:6b:08:95:47:ed:4e:e7:e1:2f:
                    18:a6:a8:cd:7b:19:e4:bd:0c:80:a6:54:48:f7:0d:
                    e7:cc:de:78:a2:4c:e1:7f:73:6d:84:00:1c:fd:3b:
                    51:53:ce:c5:4a:d2:60:a0:c5:ba:85:2e:6a:06:bb:
                    01:8e:64:b2:15:d0:1a:65:a5:6c:f5:ad:82:27:c2:
                    25:95:95:47:4e:93:a3:6b:59:c9:77:18:75:f5:26:
                    5f:7c:b6:b5:44:df:c3:39:55:eb:a5:f5:5d:bb:04:
                    fc:68:c7:7d:41:34:0c:0e:86:9e:38:ba:8a:c7:e0:
                    51:cd:81:24:44:de:55:dc:4e:4a:d8:a0:00:59:30:
                    70:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:2B:A6:CC:78:B9:FA:AA:93:96:0E:5A:4E:99:C3:6F:E0:38:CD:EC
            X509v3 Authority Key Identifier:
                keyid:1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:62:4e:3b:e8:1f:f0:73:ef:05:c4:5e:84:65:90:e2:1f:fd:
         b4:18:f5:52:5e:2c:6d:2c:58:72:6e:f5:20:88:db:9d:03:b7:
         4b:22:2d:22:21:e2:cb:ae:e9:6c:fb:2a:60:d7:ec:ae:ae:f2:
         67:73:0d:30:a3:19:e1:42:69:4c:9e:fd:40:e0:47:2e:68:74:
         1b:08:5f:3b:ab:15:2e:e0:e2:78:39:2c:17:41:67:f2:8f:d5:
         02:2a:e3:7d:83:11:ec:5d:02:44:ed:b4:4e:c6:19:53:4a:4f:
         9b:75:ff:28:33:2d:ad:04:0a:13:fc:a2:c5:d2:92:b9:7a:cd:
         e7:55:fa:22:35:74:f7:32:88:85:70:c1:5b:a6:0b:d6:f5:05:
         78:c4:78:7d:24:6f:70:8d:7e:82:c8:b0:82:b8:c5:84:61:cb:
         33:91:15:bd:ec:a7:70:c3:db:d1:87:33:85:36:12:60:2a:2f:
         22:e6:a4:c2:4a:2b:a7:df:e9:31:93:3f:2c:7d:c5:d8:83:64:
         42:34:ac:68:04:41:9f:4d:c0:e0:7d:0d:41:39:63:93:91:26:
         1c:fb:f7:88:b1:1a:e6:d8:bc:29:62:05:fa:3a:fa:1e:dd:38:
         67:56:c8:33:9f:15:7d:89:ea:fb:0f:af:f1:a2:6b:96:5a:a1:
         e7:00:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org