Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa
File:                     3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa (raw, json)
Hash identifier:          gBiCn5tc6c2xk4WHk/NkQTWA7QlLXk4+lrAksfFkzDw=
Subject key identifier:   8E:D5:CB:32:DD:36:CC:03:2B:EC:5A:84:A2:2A:EE:F0:52:9D:E9:43
Certificate issuer:       /CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
Certificate serial:       7D295C688BB404CA43704BAEEBBC32D29B3D62C2
Authority key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa
Signing time:             Tue 05 Mar 2024 17:44:28 +0000
ROA not before:           Tue 05 Mar 2024 17:39:28 +0000
ROA not after:            Tue 04 Mar 2025 17:44:28 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:29:5c:68:8b:b4:04:ca:43:70:4b:ae:eb:bc:32:d2:9b:3d:62:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
        Validity
            Not Before: Mar  5 17:39:28 2024 GMT
            Not After : Mar  4 17:44:28 2025 GMT
        Subject: CN=8ED5CB32DD36CC032BEC5A84A22AEEF0529DE943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:eb:66:f6:1d:d4:38:8e:6b:5e:cb:a0:cd:ab:
                    8a:72:f5:bd:a6:69:a7:ee:28:a5:23:a8:cd:e7:85:
                    46:29:e0:32:60:51:62:97:4f:43:fd:2b:da:51:f9:
                    e4:e3:a9:dc:3b:d2:1f:4e:10:3c:ed:fa:fc:44:c6:
                    06:5a:10:51:27:50:9f:66:ad:38:08:01:ed:a1:d8:
                    5f:95:f3:76:b7:23:eb:06:94:4a:ee:f7:63:08:9d:
                    b2:e3:7d:f1:5a:32:5b:a3:b3:c4:eb:26:37:c2:15:
                    33:8d:c2:34:f0:e5:d0:2e:77:8b:41:58:ff:f1:11:
                    0a:06:4e:19:a7:ad:a6:75:7e:f4:12:41:4a:55:eb:
                    00:45:95:04:fd:9b:06:90:8a:15:2f:d4:52:46:6f:
                    42:36:16:76:27:10:f1:60:3e:4d:63:75:e5:64:bb:
                    bd:07:ba:f4:00:6d:f8:7f:9e:52:f0:e0:b0:79:ec:
                    bf:7d:29:32:66:5d:4e:b1:b7:87:a2:2c:c4:ae:d8:
                    9c:db:f5:97:ae:9f:c4:e0:af:5a:20:88:fc:82:af:
                    9b:b0:af:9d:61:e9:80:c5:c5:4e:cc:9d:36:03:c9:
                    74:5d:b4:4d:c5:b8:05:87:e2:95:0f:af:ef:59:3d:
                    ae:fc:51:8b:e9:de:cf:ae:ba:06:cb:ed:61:f9:a0:
                    45:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D5:CB:32:DD:36:CC:03:2B:EC:5A:84:A2:2A:EE:F0:52:9D:E9:43
            X509v3 Authority Key Identifier:
                keyid:1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:c0:c3:bb:db:81:c9:74:58:c2:81:3e:9d:3f:ff:03:a6:0f:
         0b:6c:2d:59:7c:7a:b3:b0:e6:15:3a:eb:c9:c6:28:69:cd:1f:
         21:47:d8:c7:e3:a5:6e:62:33:32:5a:28:db:b5:3e:c2:69:01:
         f8:ac:bc:48:3b:03:30:5e:02:44:34:e3:3a:f9:bc:50:98:0c:
         db:a9:4c:a4:cb:d0:78:0d:eb:83:b9:1a:71:e9:6c:2b:d7:64:
         09:07:5c:0a:eb:ed:6c:e3:0b:71:06:0a:7a:60:a2:0a:d7:37:
         30:7c:75:64:02:1c:b8:25:a5:63:4e:4f:9b:ec:7f:bf:0d:b2:
         aa:65:1d:55:29:97:bd:24:ee:bb:19:92:52:44:c6:63:6c:be:
         25:2c:4c:5e:0d:a7:0e:12:57:11:5f:7a:59:0a:d2:23:da:d5:
         9d:a9:72:27:c4:68:23:f7:7f:43:1b:23:25:46:ac:19:99:59:
         14:75:7c:39:4d:5b:80:77:37:f7:26:9b:97:1b:b8:99:95:e7:
         7f:25:7b:a3:2a:e9:6d:8b:ec:33:e5:90:0f:97:43:3f:f1:34:
         5d:7c:4a:c3:40:db:0a:77:f0:c9:7e:e1:58:92:ea:8c:d8:48:
         a5:3f:e3:e0:79:aa:4d:03:00:80:40:ef:78:c4:ea:1e:34:fa:
         77:32:37:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org