Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
File:                     3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          qsD6htR69vlg3JzJc8JeWM8VsPp7LovqiH6Ya9FrKoU=
Subject key identifier:   74:21:F7:D2:1C:49:BE:4A:E2:36:E5:46:0B:08:80:5F:80:C8:D5:B7
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       0CA10DDE995F09B9713CF8B2246C122CD2E95C93
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:44 +0000
ROA not before:           Tue 05 Mar 2024 17:56:44 +0000
ROA not after:            Tue 04 Mar 2025 18:01:44 +0000
asID:                     28099
IP address blocks:        168.194.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a1:0d:de:99:5f:09:b9:71:3c:f8:b2:24:6c:12:2c:d2:e9:5c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:44 2024 GMT
            Not After : Mar  4 18:01:44 2025 GMT
        Subject: CN=7421F7D21C49BE4AE236E5460B08805F80C8D5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:77:bc:ab:ff:57:54:14:57:62:5e:5c:d2:45:
                    65:07:2d:09:2a:3f:16:8a:e4:db:2c:a5:e5:88:5f:
                    58:6e:23:32:3d:a2:5b:ad:97:e4:44:1a:bb:0a:b4:
                    ac:19:7a:c0:c7:6f:7f:37:2c:e4:7b:c7:05:72:69:
                    0f:c1:de:99:01:cd:07:53:12:76:c1:3c:9b:c5:4d:
                    1d:c2:a9:b8:a7:21:4b:4b:cc:f8:70:d7:fa:a8:cf:
                    ee:27:6a:32:04:d4:f1:51:ec:e8:f0:8d:34:9c:5d:
                    ce:73:b2:96:99:50:34:ee:65:2b:40:d6:21:5a:cd:
                    f9:ec:1d:96:7a:e2:49:92:c8:40:f3:46:22:5d:0d:
                    b8:9a:70:6b:ef:26:42:2e:b1:22:7f:a9:c0:34:a5:
                    5e:17:fd:61:29:16:e6:6c:3c:0b:e0:8c:f5:5e:7a:
                    5a:9c:40:9a:02:8e:f1:ee:4f:d6:12:90:7c:9c:07:
                    44:9e:8e:a3:2b:87:42:73:f5:45:b6:14:2e:57:50:
                    de:b7:23:c4:40:fa:10:1d:96:03:d9:06:14:33:dd:
                    c4:31:78:99:41:42:61:32:47:6b:ca:fa:b4:ce:da:
                    1d:df:53:72:e0:ff:ca:eb:1b:d0:85:59:81:c7:da:
                    72:4e:a7:6f:5d:ee:21:41:6c:05:9f:05:fb:1d:d2:
                    58:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:21:F7:D2:1C:49:BE:4A:E2:36:E5:46:0B:08:80:5F:80:C8:D5:B7
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139362e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:89:3d:7e:ed:b1:c1:ac:c9:8f:67:16:24:d0:65:49:e0:0f:
         4d:b1:8b:79:3b:a3:c3:32:31:e9:e1:53:35:7f:dc:19:ea:e0:
         e1:ea:9b:0f:a3:6b:4d:75:6a:78:da:1e:c4:86:19:95:de:f8:
         dd:17:e9:41:a7:30:7a:f4:0c:46:86:5a:b2:f7:16:c2:98:68:
         ce:8a:0d:69:f0:90:cd:82:7f:e0:86:05:90:1d:0a:ee:71:48:
         f3:27:4e:8e:27:0a:0f:5f:2f:c6:95:62:f9:13:5d:f5:ea:eb:
         f4:d9:3e:c6:7b:54:bc:37:e1:fd:00:0d:cd:5b:75:16:00:c4:
         2c:0c:2c:52:9d:07:b1:1e:17:8c:0c:6e:83:c1:f0:5e:b7:27:
         18:0b:f1:8e:e7:00:c2:3a:fa:c7:d1:d0:2e:3f:2e:d6:78:52:
         78:aa:7d:11:83:ea:22:af:60:dd:6f:37:71:c4:e3:87:c6:1b:
         6e:d4:f9:24:6e:f5:e0:e0:b1:c4:a3:37:84:d6:07:47:a6:45:
         fe:6e:fc:0a:ed:53:66:82:f9:52:96:bb:16:7f:f8:82:ab:e9:
         e4:c4:cc:e7:6d:b0:34:36:9d:85:8d:db:d1:95:19:1b:10:08:
         49:7e:53:aa:fb:46:71:ca:99:4b:c5:51:c7:30:3f:f3:98:3c:
         ef:ff:89:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:08:43 2024 by rpki-client on console-fra.rpki-client.org