Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa
File:                     3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa (raw, json)
Hash identifier:          IHvouc6J3JRNfdreeq/JQ/Mt6UfGv6kHezan60KjrNo=
Subject key identifier:   12:51:9F:46:BE:03:4F:7E:CB:12:94:DF:BA:43:C8:96:5F:35:9C:A8
Certificate issuer:       /CN=6F2E85684756BECBED992F0B17433B71F691DBB2
Certificate serial:       7E6A4FCE37F88873837C37A242CD9E5431CF335D
Authority key identifier: 6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa
Signing time:             Fri 12 Apr 2024 20:15:00 +0000
ROA not before:           Fri 12 Apr 2024 20:10:00 +0000
ROA not after:            Fri 11 Apr 2025 20:15:00 +0000
asID:                     265770
IP address blocks:        164.163.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 20 May 2024 05:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:4f:ce:37:f8:88:73:83:7c:37:a2:42:cd:9e:54:31:cf:33:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2E85684756BECBED992F0B17433B71F691DBB2
        Validity
            Not Before: Apr 12 20:10:00 2024 GMT
            Not After : Apr 11 20:15:00 2025 GMT
        Subject: CN=12519F46BE034F7ECB1294DFBA43C8965F359CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a4:59:88:cd:c5:08:55:57:95:d5:9c:62:7a:
                    11:fe:2a:84:cd:74:4b:c1:e2:44:73:4e:73:bc:1e:
                    b5:24:e5:a7:1e:27:3f:25:8d:c2:9e:00:37:00:e5:
                    37:03:fc:30:e3:84:6d:e8:33:b1:0d:48:c9:30:a0:
                    b8:bc:ad:40:49:bc:82:d1:9a:83:71:58:ea:e7:66:
                    19:4f:c3:c4:29:20:5c:b9:94:08:e4:cb:b7:45:b1:
                    57:bc:88:23:31:b1:80:be:2c:97:d1:2b:9a:28:2f:
                    c5:b1:09:26:57:bd:05:c2:25:93:3c:fd:10:68:a2:
                    d7:a1:40:13:be:0c:8a:55:eb:8d:1f:a5:c1:49:71:
                    9c:69:5d:19:88:7b:a3:6d:c3:d3:48:c3:35:f6:90:
                    68:07:32:e4:17:5e:6a:6c:e7:53:71:ff:3b:c6:fb:
                    b1:ac:3b:6c:db:98:14:dc:f6:c3:5e:96:d1:eb:4e:
                    2b:3e:80:0d:88:e7:f7:3b:c7:ab:e9:a4:34:1c:c8:
                    6f:29:69:f0:21:4b:77:fb:03:f2:d2:70:6e:dc:5b:
                    5d:38:dd:36:9d:69:16:f0:c5:83:73:9a:b6:be:9d:
                    44:7b:b8:87:22:0b:da:ba:a9:97:00:c7:9f:eb:9b:
                    6a:61:69:07:a3:42:b8:de:25:30:a8:ad:09:3a:96:
                    04:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:51:9F:46:BE:03:4F:7E:CB:12:94:DF:BA:43:C8:96:5F:35:9C:A8
            X509v3 Authority Key Identifier:
                keyid:6F:2E:85:68:47:56:BE:CB:ED:99:2F:0B:17:43:3B:71:F6:91:DB:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/6F2E85684756BECBED992F0B17433B71F691DBB2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2E85684756BECBED992F0B17433B71F691DBB2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C4D72FDA9D9D4649BACD178B2C0FCCBD56680A1D743605C0A204D1487A56E154/0/3136342e3136332e3132342e302f32322d3234203d3e20323635373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:47:c1:a6:d2:1a:90:2f:92:e8:d6:4a:29:2f:84:c3:d6:
         b2:e9:aa:0c:a1:7e:11:21:8e:bb:76:26:c7:8f:6f:3e:5b:ed:
         87:47:d9:19:b7:35:5d:92:55:19:9e:ef:42:be:49:19:21:53:
         d1:84:94:05:67:bb:5f:7f:b9:6c:7a:78:16:be:34:6d:86:a2:
         76:8b:6a:a8:e4:28:45:65:dd:e2:73:34:1f:28:87:55:5a:61:
         64:d4:aa:15:27:27:59:ea:7c:55:a9:72:b5:a7:03:69:66:79:
         00:0b:5f:8a:39:f1:fa:e3:00:b2:5f:93:ee:29:aa:38:6f:59:
         7a:8a:3f:2e:e1:ea:dd:0f:92:1e:22:b0:e8:d1:77:3c:4d:3f:
         6c:30:a7:5e:5b:af:e9:78:b6:74:22:7d:4f:58:12:09:37:87:
         47:96:46:1d:75:56:d5:3a:17:63:0f:e9:ce:f0:05:52:72:48:
         34:1f:75:a7:98:fe:ce:c0:35:17:7e:53:a0:04:13:a6:09:5a:
         88:40:e1:cc:cc:ee:5f:61:ab:53:75:f6:81:cc:40:3b:0e:71:
         e2:40:34:2f:d7:3b:6b:ab:73:69:f9:e1:8d:27:7f:d6:f3:ae:
         6d:cb:d6:d1:9a:a0:05:78:ae:8f:b3:c8:01:23:cc:38:0b:73:
         48:3c:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:05:58 2024 by rpki-client on console-ams.rpki-client.org