Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e3234302e302f32332d3234203d3e2033353937.roa
File:                     3136382e39362e3234302e302f32332d3234203d3e2033353937.roa (raw, json)
Hash identifier:          g5ePnsClJ00TqtlTDNvlEp40t3di/KjLOq+Fcx1A5Is=
Subject key identifier:   BB:5D:9D:77:3C:75:EC:CF:42:32:DC:D9:88:2E:8D:25:2C:E5:F7:0C
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       439103EC247AA5C78FFC74E85E44EB0268598F6A
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e3234302e302f32332d3234203d3e2033353937.roa
Signing time:             Tue 05 Mar 2024 18:19:59 +0000
ROA not before:           Tue 05 Mar 2024 18:14:59 +0000
ROA not after:            Tue 04 Mar 2025 18:19:59 +0000
asID:                     3597
IP address blocks:        168.96.240.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 18 May 2024 01:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:03:ec:24:7a:a5:c7:8f:fc:74:e8:5e:44:eb:02:68:59:8f:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Mar  5 18:14:59 2024 GMT
            Not After : Mar  4 18:19:59 2025 GMT
        Subject: CN=BB5D9D773C75ECCF4232DCD9882E8D252CE5F70C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:26:8c:8d:7c:79:fc:63:d6:07:ac:6f:e0:
                    bc:af:d2:e0:3e:b1:05:8b:23:54:ae:61:74:d1:f8:
                    d1:0d:51:d7:bb:a9:4a:75:8a:53:14:dd:3d:c4:8c:
                    f5:39:96:de:65:84:9d:7e:fc:9b:03:c3:b2:e9:9a:
                    75:a8:94:57:cb:fa:60:21:ae:9d:7a:a5:ad:eb:c5:
                    86:c3:75:0a:00:ba:86:e6:cb:54:9a:19:b0:5e:52:
                    09:8e:af:a5:9e:9b:95:32:0e:ea:c0:c2:53:57:94:
                    ec:95:e6:bb:54:e7:03:54:18:6b:9e:5a:2f:63:54:
                    fa:20:3b:ac:1d:89:50:62:60:7d:8d:86:b4:69:13:
                    cb:6e:1e:52:92:46:5b:45:99:b3:87:02:2a:de:7f:
                    c6:d3:6a:50:f7:aa:ee:27:49:44:d5:02:ff:13:2a:
                    b2:99:d1:7d:c6:f0:93:4d:6b:f2:b1:82:b9:57:fe:
                    52:00:25:5f:80:3c:72:c8:59:ac:bd:98:72:8c:17:
                    74:d9:7b:c6:7c:29:95:99:d3:1b:4d:45:3c:23:52:
                    0f:ab:80:6d:26:24:f1:27:0b:af:d7:69:fc:83:7d:
                    82:05:5b:ab:8b:f6:24:11:d6:e3:7f:f8:71:be:8f:
                    93:e8:31:32:c1:a9:6b:49:c9:9f:c8:32:fd:88:d0:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:5D:9D:77:3C:75:EC:CF:42:32:DC:D9:88:2E:8D:25:2C:E5:F7:0C
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/3136382e39362e3234302e302f32332d3234203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:77:26:a6:4e:ad:85:40:2f:1c:ba:85:67:c1:b9:90:12:
         b9:1d:10:cb:27:bb:0e:b8:94:53:fc:0a:3c:7d:9d:4f:db:81:
         a8:bf:6d:93:15:91:0b:91:d7:a5:39:94:eb:b9:25:b0:00:f6:
         89:a7:51:69:49:ff:38:2f:63:ad:07:86:52:1c:7c:f5:d2:94:
         37:10:fc:34:c1:d9:65:ed:44:d6:24:75:d2:ca:bd:af:64:a8:
         a3:71:bc:57:59:eb:4e:49:a0:f9:49:3d:f9:b6:d0:ca:88:08:
         e5:d7:a4:7f:9c:46:75:64:94:8f:81:58:fb:20:d2:19:d8:a2:
         cf:a1:5d:9e:bd:61:e1:ca:d8:a0:75:a5:ca:6b:2a:3c:a5:49:
         f8:61:33:f4:70:df:b7:90:a5:c0:7a:ac:d5:f9:c0:e4:4f:7b:
         aa:df:c6:97:bf:c1:dc:6e:25:79:1b:fe:32:ec:4d:72:c8:56:
         c6:9a:a7:f8:01:de:2d:01:4d:ff:b3:30:82:89:66:87:ae:23:
         75:e0:b3:85:ba:91:72:09:e9:8f:dc:87:3a:07:85:df:37:c3:
         6a:4c:11:f7:98:06:ee:0e:43:e1:2b:d6:9f:6c:84:40:af:4e:
         5b:4d:65:ea:a8:61:8a:03:21:bd:5a:84:74:01:4f:e4:fe:72:
         b2:74:da:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 02:23:15 2024 by rpki-client on console-fra.rpki-client.org