Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa
File:                     3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa (raw, json)
Hash identifier:          27uLBZ40ox647EWxmm3EuYruuxOR/ms7d/uhWuJTlDc=
Subject key identifier:   F9:A0:D0:F8:3A:32:F3:38:ED:82:FC:A4:10:6C:09:B4:50:71:23:23
Certificate issuer:       /CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985
Certificate serial:       33A44C777A79C995DE185AEE24DE1525FE02433E
Authority key identifier: 32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa
Signing time:             Tue 05 Mar 2024 17:40:35 +0000
ROA not before:           Tue 05 Mar 2024 17:35:35 +0000
ROA not after:            Tue 04 Mar 2025 17:40:35 +0000
asID:                     28005
IP address blocks:        168.121.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:a4:4c:77:7a:79:c9:95:de:18:5a:ee:24:de:15:25:fe:02:43:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=325C30A62A28F1CC676DEC2EF97AF660C7A29985
        Validity
            Not Before: Mar  5 17:35:35 2024 GMT
            Not After : Mar  4 17:40:35 2025 GMT
        Subject: CN=F9A0D0F83A32F338ED82FCA4106C09B450712323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c5:4b:57:fb:7a:8f:6e:af:fe:3e:fe:e3:12:
                    c8:df:37:e6:b6:d5:4c:12:d8:27:e9:86:ec:1b:29:
                    c3:f2:2e:27:10:88:36:a7:90:09:ab:be:f2:82:ad:
                    f0:f0:77:5a:ab:a7:da:ab:a5:57:19:e3:15:11:85:
                    a2:26:c3:41:6c:30:a6:58:bf:a9:ce:a8:e4:48:48:
                    7b:15:5e:98:3c:73:f0:ba:a7:26:92:f2:bc:b4:5f:
                    04:5c:06:51:e2:cb:19:64:bf:73:8b:79:56:72:0c:
                    b8:a5:fa:af:49:cb:79:63:29:b1:24:8f:42:82:4b:
                    63:f9:b7:fd:a8:a0:0e:0b:e3:6e:52:4d:d2:e7:94:
                    6f:9e:03:42:cb:23:d7:49:2c:07:09:0f:aa:29:ed:
                    6f:76:fe:f2:2a:a4:79:a0:ec:8d:38:b7:37:bf:5d:
                    af:71:c7:a8:a0:5b:c3:4f:89:1c:8e:23:de:a6:a9:
                    a5:fc:72:f5:70:d1:e4:d5:e2:89:bd:bc:c3:bf:e3:
                    f9:7f:9f:63:b3:79:72:8a:01:64:58:00:1e:0c:25:
                    75:5d:23:75:c0:7f:b7:b3:cb:8c:40:55:83:01:0f:
                    96:ef:d5:f4:ad:29:d8:71:90:2c:2a:0d:30:71:88:
                    88:65:3a:db:b0:d1:37:bd:d6:93:3a:1f:65:bc:2b:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:D0:F8:3A:32:F3:38:ED:82:FC:A4:10:6C:09:B4:50:71:23:23
            X509v3 Authority Key Identifier:
                keyid:32:5C:30:A6:2A:28:F1:CC:67:6D:EC:2E:F9:7A:F6:60:C7:A2:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/325C30A62A28F1CC676DEC2EF97AF660C7A29985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B33407204E1A9AE7F95A1E7B194891E7ABAF6CC5CEA77650DFB96B0DE6DC7B8F/0/3136382e3132312e3132382e302f32322d3232203d3e203238303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:a1:84:95:25:c5:3a:c2:23:0f:12:c0:47:23:04:c0:b4:c7:
         1e:43:67:8c:de:49:90:b2:82:4f:a7:a6:7b:16:21:29:20:80:
         2f:30:b9:a1:06:a6:c3:1a:21:65:f7:87:e9:e5:12:df:95:09:
         a2:1c:60:60:76:38:fe:68:16:81:4d:2f:a6:6e:50:06:6c:8e:
         5a:49:fa:ad:b4:94:3c:d5:ee:a6:d0:5e:15:89:b1:0b:db:f1:
         12:dc:57:ac:e4:e2:c3:76:e7:60:ff:8e:7e:f5:c2:85:fa:b3:
         d1:31:63:85:26:22:0b:c0:cb:c4:eb:57:8f:a3:7b:d5:cd:9c:
         3e:ad:a5:51:1d:f6:52:09:51:bc:f6:8a:61:6b:c9:cb:19:52:
         5f:aa:db:12:fd:33:71:23:ea:24:28:9b:8a:95:b0:3a:87:23:
         dd:86:38:8d:55:a1:d9:7c:d5:31:bd:b4:ad:27:f5:6f:2a:13:
         59:b2:9e:0c:bf:ce:1c:08:34:6b:9d:46:30:89:cd:7c:9b:59:
         54:6d:a9:8f:0e:d3:80:13:fc:75:35:24:67:a9:71:65:06:e9:
         1b:2d:c0:ea:3a:62:b6:a6:bd:3d:26:23:64:f8:31:2d:8f:b4:
         41:c9:1f:2b:d7:62:ea:fa:9d:c7:9c:2d:a1:60:d6:6e:7b:54:
         cc:1d:55:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org