Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
File:                     3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          eqt2aR8E1azI1qUb8qVvJ5TVBeZtpawdWlgVyIKVKB0=
Subject key identifier:   90:16:0F:FC:73:DB:54:5D:EA:5B:8C:2C:92:D0:82:C3:91:8D:C9:4E
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       1C7CC17DD62CA02A352774CACEB1E66395FA2057
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 05 Mar 2024 18:01:42 +0000
ROA not before:           Tue 05 Mar 2024 17:56:42 +0000
ROA not after:            Tue 04 Mar 2025 18:01:42 +0000
asID:                     28099
IP address blocks:        168.194.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:7c:c1:7d:d6:2c:a0:2a:35:27:74:ca:ce:b1:e6:63:95:fa:20:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Mar  5 17:56:42 2024 GMT
            Not After : Mar  4 18:01:42 2025 GMT
        Subject: CN=90160FFC73DB545DEA5B8C2C92D082C3918DC94E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2c:ab:52:3d:fe:5e:c6:17:a5:26:68:de:25:
                    37:46:9a:59:95:01:e5:b0:1b:e2:4a:c5:af:46:d7:
                    14:0e:a5:a7:30:08:79:8f:27:f1:9b:14:3f:40:ab:
                    1a:4d:61:bd:93:ef:95:8e:19:5b:da:16:0e:b6:f6:
                    5e:50:bf:98:83:5b:e0:e7:f0:d8:3a:3b:b6:d6:8e:
                    bb:76:0c:e0:2c:aa:54:e3:d8:6d:55:f8:e2:d3:40:
                    27:5a:bb:6a:1a:3b:d7:fe:75:21:9c:b6:a6:94:69:
                    91:e5:5d:10:83:b0:2e:a8:21:dd:21:b9:cb:77:80:
                    b7:f9:d2:27:88:6f:b8:f9:c1:14:53:22:74:88:eb:
                    97:01:14:ff:8d:96:0b:42:c4:7a:c0:ca:9f:88:d8:
                    4b:22:84:a3:fc:07:4c:05:57:1b:20:cb:ea:6f:36:
                    55:21:13:93:57:93:7b:df:94:51:4a:fe:fb:ab:f5:
                    90:44:07:81:e7:e3:e6:d8:0b:ef:20:7b:78:19:29:
                    89:26:d4:a5:75:c7:5a:cd:46:58:8d:19:0c:00:d1:
                    80:df:8a:eb:7b:94:cd:72:50:9e:20:bb:be:f1:43:
                    d9:5a:4c:78:57:0e:31:2f:99:f3:f4:48:46:79:4e:
                    51:e5:23:7c:4c:65:e5:d8:4c:60:b9:3d:b6:11:81:
                    b2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:16:0F:FC:73:DB:54:5D:EA:5B:8C:2C:92:D0:82:C3:91:8D:C9:4E
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:a0:5f:ae:dd:dd:bd:7c:88:93:22:d4:a1:ab:1d:11:85:de:
         14:c6:63:0f:b9:c0:fa:54:9e:d1:0a:ca:35:32:fc:21:40:44:
         fe:38:82:a4:dc:ff:cb:fa:e5:7c:20:5e:c1:c3:81:ce:36:2a:
         d6:65:33:7e:00:da:f9:4d:89:88:b7:de:96:f7:b9:f5:ec:b7:
         e3:92:c8:ad:c7:0d:86:f9:83:9b:79:d6:ba:0e:75:82:c8:a6:
         95:36:9b:16:fd:c6:82:fa:ac:6d:c6:b7:d2:3e:a4:70:04:21:
         23:e1:ae:11:be:07:a6:49:af:32:2c:d9:c0:e6:28:70:23:57:
         37:62:75:fe:3a:fe:7b:d6:f1:74:37:aa:35:9d:ee:b0:12:b6:
         12:c7:0e:a6:be:20:d6:64:bc:43:3d:38:60:38:8a:3d:ec:13:
         e3:e0:ec:1b:4b:fd:a4:be:7c:7d:0a:46:90:9f:36:d5:d8:6b:
         31:a2:6e:89:21:77:a7:86:ff:f5:91:10:c5:4a:2a:ac:3a:b8:
         be:bc:80:b5:a1:44:43:aa:70:37:92:87:d8:c0:4a:99:ba:a2:
         df:82:e1:a4:1c:6a:db:c8:01:e3:8b:03:6b:ca:85:5e:60:52:
         52:cb:a0:19:d3:01:9a:81:3e:ca:78:86:6d:a4:a2:e7:35:f3:
         4a:da:ee:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:11:06 2024 by rpki-client on console-ams.rpki-client.org