Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          5+IFecQJEB1dnf7oy9VdK00bN5MFRwt8vOQTihKcDZc=
Subject key identifier:   A4:49:04:92:66:D2:9D:39:71:75:CD:56:D8:C6:FD:DC:19:B5:4F:5D
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       42F602FB498FDD952BE080B2C3D76B273F951CCF
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 17:44:36 +0000
ROA not before:           Tue 05 Mar 2024 17:39:36 +0000
ROA not after:            Tue 04 Mar 2025 17:44:36 +0000
asID:                     10778
IP address blocks:        168.196.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f6:02:fb:49:8f:dd:95:2b:e0:80:b2:c3:d7:6b:27:3f:95:1c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Mar  5 17:39:36 2024 GMT
            Not After : Mar  4 17:44:36 2025 GMT
        Subject: CN=A449049266D29D397175CD56D8C6FDDC19B54F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:2e:9f:28:28:57:98:6b:ab:23:2b:fb:b1:
                    7d:05:08:22:99:ae:22:59:09:07:6a:05:73:e1:e0:
                    d4:aa:5a:57:47:49:25:d4:67:88:95:20:9c:56:31:
                    b5:24:6c:ec:10:2f:7e:f8:c7:4d:40:37:60:4e:4d:
                    f9:fd:01:ff:00:b8:9a:94:eb:36:25:bc:18:30:27:
                    12:a7:52:6f:cf:75:59:7b:46:88:32:9d:f2:c9:91:
                    38:a5:87:1b:fa:0a:d0:92:53:9a:12:14:a3:77:49:
                    f6:a4:94:0e:29:81:44:50:f7:9c:25:a3:d4:90:d7:
                    df:62:db:d0:27:3a:d0:22:c2:d5:26:73:d8:1d:bc:
                    af:dc:35:b3:55:21:0e:c3:d1:2f:0d:cc:4b:5f:13:
                    60:19:14:92:ef:91:7d:29:db:fc:ca:44:31:f9:8c:
                    db:52:b2:f3:a3:3b:54:2f:7a:81:dc:e9:c8:b0:36:
                    58:84:70:cd:9c:06:c5:49:08:e6:83:87:af:9a:11:
                    41:8f:d2:10:38:e8:ee:b3:e5:32:8c:5e:dd:4a:bf:
                    a7:1e:85:23:59:df:af:59:84:d4:2b:1c:71:bf:dd:
                    b3:3b:48:75:d3:2e:00:56:dc:eb:a8:31:f4:09:af:
                    36:87:5f:a5:0f:eb:63:0c:8d:9f:02:42:f1:63:af:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:49:04:92:66:D2:9D:39:71:75:CD:56:D8:C6:FD:DC:19:B5:4F:5D
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:ba:c2:fe:a6:44:7f:c6:28:b6:05:24:db:e4:f4:31:35:b0:
         4e:02:53:01:9a:21:ed:6b:f0:86:74:0f:e2:20:72:fa:d0:dc:
         7a:ec:df:e9:91:4c:42:8f:31:5b:47:2d:d8:85:58:1d:4d:1a:
         c8:1e:ad:e4:2b:04:0c:5e:bd:1e:33:db:68:b6:fa:0e:51:fc:
         01:9b:97:fa:d1:c4:1c:7f:09:a2:0a:99:c4:b3:e3:6c:5c:58:
         f3:d2:f4:33:b7:e2:57:ed:47:f6:8f:8a:11:1b:8d:6d:1e:67:
         66:5f:c4:23:0b:75:82:88:1f:e8:ee:ac:0d:f1:6e:a9:76:1c:
         5a:7e:55:28:e3:51:8c:59:b6:57:3e:56:20:3c:46:7e:fe:c0:
         92:3a:c2:76:ee:3a:86:7a:89:d8:0b:11:35:15:39:f1:0d:15:
         26:7d:a0:4e:a2:9a:40:0c:58:0a:91:5c:fa:7c:cc:fc:b9:3d:
         ef:1d:c7:e1:4a:c7:a0:c0:67:ff:33:b3:f2:be:2e:b7:7f:db:
         70:d7:fc:00:3c:a8:ef:f2:42:80:1d:97:86:f7:63:c9:e9:75:
         ec:3d:86:d7:e6:d5:ad:26:e2:92:02:29:2b:2d:91:cf:a7:48:
         0b:43:76:4b:a6:0f:67:ef:31:a3:dd:9b:7d:1f:c1:e5:f6:ef:
         d2:43:0b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 22:36:38 2024 by rpki-client on console-ams.rpki-client.org