Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          zHaMamNDXuwDJB1yu2UVI/gbxbLtmxO6ZhULgWEjg1k=
Subject key identifier:   ED:46:8B:36:58:6C:74:0E:82:20:16:3F:3F:23:4E:CB:10:63:54:0B
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       68C388D6253E5CF46DEF335CBFE647007046E441
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 17:44:35 +0000
ROA not before:           Tue 05 Mar 2024 17:39:35 +0000
ROA not after:            Tue 04 Mar 2025 17:44:35 +0000
asID:                     10778
IP address blocks:        168.196.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:c3:88:d6:25:3e:5c:f4:6d:ef:33:5c:bf:e6:47:00:70:46:e4:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Mar  5 17:39:35 2024 GMT
            Not After : Mar  4 17:44:35 2025 GMT
        Subject: CN=ED468B36586C740E8220163F3F234ECB1063540B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6b:00:0b:4f:a1:22:d1:a9:23:9d:45:4d:34:
                    5c:ec:14:b1:4a:e2:3d:40:fc:ce:ab:38:9a:b9:22:
                    ed:0b:36:9c:9e:32:b5:14:ad:43:ff:3a:29:3c:69:
                    d4:76:12:c4:8e:3d:8c:a7:e0:84:01:40:77:91:cc:
                    89:60:a6:5c:f7:07:14:f2:d4:d9:31:d3:80:61:45:
                    56:65:27:69:74:21:dd:49:8a:98:32:36:2a:6c:47:
                    21:48:19:2c:be:3b:91:4a:ee:f2:cd:44:c4:e6:c9:
                    da:75:a1:e3:a0:16:a3:a6:3f:e3:ea:0e:23:5c:80:
                    bc:03:6f:5b:93:1c:e2:8c:2f:34:f3:47:36:a2:82:
                    40:fb:7b:49:5c:fe:8b:d4:ee:2c:99:d4:cb:2b:3c:
                    58:57:88:8f:20:f6:da:1a:b4:c2:2b:48:fd:3b:38:
                    cb:2b:e8:24:75:0c:2c:0d:9e:13:4f:86:eb:5f:9b:
                    81:01:0c:01:e3:fe:55:7e:78:7d:01:30:4a:84:9a:
                    74:a9:c4:dc:57:5f:98:ca:76:89:13:c9:1f:66:05:
                    e9:9d:d0:c9:c2:d8:3e:06:b5:54:6a:40:03:81:28:
                    68:34:15:f4:d3:3d:72:fc:db:8e:6a:c6:80:e5:29:
                    33:67:61:d7:f9:d9:c7:cd:99:98:91:be:15:3d:a1:
                    f7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:46:8B:36:58:6C:74:0E:82:20:16:3F:3F:23:4E:CB:10:63:54:0B
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138352e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:87:01:dc:be:e3:71:60:23:f3:eb:3c:62:88:7e:3b:20:07:
         a7:26:c5:2c:86:c8:bc:7e:c9:be:f0:21:e2:6c:be:f8:54:42:
         e5:ad:75:b6:03:03:94:41:0b:91:86:39:bf:93:cc:85:37:43:
         d6:41:44:fb:29:92:47:5f:ff:f8:ff:04:16:38:d0:2a:59:fc:
         b9:7e:ad:d4:05:90:1e:2f:6b:fd:be:69:cf:86:e1:4d:63:fa:
         35:31:91:01:e6:0e:5a:8f:9c:27:3c:b1:8f:5a:2b:fe:e5:42:
         bd:fe:65:41:7f:f3:88:85:10:49:a9:5e:b8:0d:6e:14:12:87:
         22:e8:de:c2:d2:ce:85:82:45:77:84:61:19:5d:44:f0:6c:84:
         cc:97:b1:4e:06:71:52:32:1d:c0:43:6b:bd:01:d7:d9:06:76:
         6c:e0:08:31:ca:b2:20:75:5c:c8:91:3a:57:ed:4c:fd:d7:c6:
         3b:06:9d:eb:ad:03:d5:0d:76:17:ed:5a:d3:ba:ba:b8:8e:b2:
         ba:77:94:1f:a4:70:e0:9f:d7:e4:42:9d:6d:d7:7b:61:76:21:
         c9:86:52:1a:a9:46:9f:75:37:51:95:9f:9a:2f:98:1e:dd:b4:
         dc:e2:67:35:69:a4:74:d5:4f:1d:6c:9f:fb:95:81:1e:2d:d4:
         72:0f:9f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org