Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          +FSU5iZEO3GG1g0zHSzV1NMTTlBXEKk3F5xHzU8xADA=
Subject key identifier:   11:79:19:B7:1E:EA:E2:E2:23:E4:7B:37:6B:34:58:AB:E9:CA:2A:DD
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       3B697838C49B1BB7D62794B6036BB31EC5996261
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 05 Mar 2024 18:10:34 +0000
ROA not before:           Tue 05 Mar 2024 18:05:34 +0000
ROA not after:            Tue 04 Mar 2025 18:10:34 +0000
asID:                     264744
IP address blocks:        168.194.148.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 10 May 2024 21:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:69:78:38:c4:9b:1b:b7:d6:27:94:b6:03:6b:b3:1e:c5:99:62:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Mar  5 18:05:34 2024 GMT
            Not After : Mar  4 18:10:34 2025 GMT
        Subject: CN=117919B71EEAE2E223E47B376B3458ABE9CA2ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b1:05:54:c0:07:d9:9b:3f:ff:46:1f:48:6d:
                    c0:a3:da:41:72:4d:8d:56:74:e0:45:f3:1d:6e:d4:
                    a1:aa:07:0f:f2:cd:2b:84:33:ca:c2:70:8a:ad:e2:
                    85:ea:fd:50:92:5f:de:6f:d0:47:49:74:eb:af:4b:
                    50:0b:d8:56:a9:50:74:b5:c8:be:da:d5:e9:34:b5:
                    75:46:91:a4:48:7d:cb:da:d2:03:30:5b:20:89:37:
                    cd:90:13:33:2b:67:0b:0c:8a:0c:1a:79:aa:08:ed:
                    f3:3b:5e:97:52:6e:a3:7e:ac:d8:48:95:50:a8:33:
                    c8:2c:40:18:9c:0e:a7:a2:64:60:ad:40:c3:ff:48:
                    24:eb:f0:29:01:02:2b:76:ea:c4:a7:42:63:49:b4:
                    bf:47:86:20:c9:44:0a:e7:2d:fc:da:7f:63:a5:79:
                    c8:72:c5:2f:56:a8:1c:9a:81:f5:b1:21:11:c0:f0:
                    f6:15:57:35:4b:0a:ec:d9:41:e2:c6:57:52:53:2b:
                    bd:cc:93:8a:11:bb:bb:32:e2:87:42:14:1c:91:eb:
                    a2:29:bb:5b:3f:72:f0:9b:9c:8d:b0:f0:19:26:3a:
                    5d:c5:ef:7a:be:53:a6:eb:07:d8:cb:6b:a8:77:e1:
                    4e:5c:20:56:49:b0:b1:83:40:4e:29:ff:48:27:68:
                    95:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:79:19:B7:1E:EA:E2:E2:23:E4:7B:37:6B:34:58:AB:E9:CA:2A:DD
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3134382e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:70:2e:ed:f3:2d:e4:11:6e:87:11:e1:30:38:b6:6c:43:8e:
         93:eb:e8:f0:d9:00:4f:62:c3:16:10:9e:d4:a3:de:d5:7d:ba:
         5f:98:d2:ac:09:0b:c5:a6:db:d3:ae:32:94:a4:9e:80:d6:b2:
         55:81:81:ee:96:7f:5b:7f:ff:79:3a:60:d6:c6:62:a9:6d:58:
         03:a8:40:73:00:6b:40:34:6b:5f:ad:f0:00:8b:a8:0c:1e:ac:
         29:f2:93:19:16:0a:65:a0:91:24:15:51:fc:7a:df:ab:ae:4f:
         97:ab:b0:a8:70:4e:fe:cb:91:e4:9b:73:91:87:4c:0e:86:c1:
         c6:5a:47:b6:fb:ae:3e:2f:f7:ba:77:21:ca:f1:c2:c3:64:2e:
         ef:5a:c8:ac:b2:32:e5:9e:ea:ef:b3:4e:c6:13:6e:b7:43:4f:
         94:0c:52:13:74:5e:68:d7:85:20:b0:37:e1:7c:66:3a:b1:1b:
         9a:a7:d5:9b:93:06:c6:42:38:91:55:69:30:2f:73:09:06:e3:
         73:65:f0:50:05:f4:3a:6b:d1:cc:3f:5c:47:d7:01:aa:41:40:
         d5:e1:f9:f2:f1:41:fb:3f:ec:6f:66:97:a4:24:9b:4c:c5:45:
         2e:b8:4b:7e:c9:49:33:35:79:50:b9:20:1f:fe:3c:a4:31:e4:
         a2:b9:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 20:16:40 2024 by rpki-client on console-ams.rpki-client.org