Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          Gv/95ZaeKS/oSaW1z4RoKPMQD6N90AH6etcCuI4e5rw=
Subject key identifier:   2C:B8:CA:21:08:2A:B0:05:40:97:CB:B4:F0:EC:50:53:39:CB:8A:7B
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       4AC861B0BAB9EF0C5437BEDF83E383DB94E7F6F1
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 17:44:34 +0000
ROA not before:           Tue 05 Mar 2024 17:39:34 +0000
ROA not after:            Tue 04 Mar 2025 17:44:34 +0000
asID:                     10778
IP address blocks:        168.196.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c8:61:b0:ba:b9:ef:0c:54:37:be:df:83:e3:83:db:94:e7:f6:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Mar  5 17:39:34 2024 GMT
            Not After : Mar  4 17:44:34 2025 GMT
        Subject: CN=2CB8CA21082AB0054097CBB4F0EC505339CB8A7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fb:85:69:c0:1f:e5:08:d8:07:65:57:fc:e3:
                    28:81:da:c6:55:56:99:d9:36:79:27:e9:30:95:0d:
                    80:f3:08:ba:41:b9:cd:d4:d8:ac:88:cf:8c:d1:e5:
                    a5:67:57:5b:c8:d4:d8:84:f7:22:6e:7c:44:ce:69:
                    c8:e8:87:a9:f4:cb:2a:6f:eb:1a:c0:c4:f7:65:b3:
                    4b:29:20:db:b3:d3:4d:30:2d:10:eb:7c:8d:5b:c3:
                    b8:aa:d6:bf:0a:df:da:51:42:2a:ab:13:ce:38:dc:
                    33:f0:94:4b:ac:a2:36:a2:77:d7:08:36:b0:15:3a:
                    e8:47:bc:30:58:0b:c0:f2:ad:5a:ea:ac:f4:73:54:
                    93:4c:de:7a:92:02:46:76:f6:76:2e:56:dc:0a:ab:
                    f8:c1:88:ad:8f:3f:9b:ee:b2:76:ce:22:70:5f:eb:
                    1c:30:53:ee:83:5c:fa:d3:f4:4a:35:d5:3f:19:08:
                    fe:86:47:a0:af:8a:f2:58:84:a5:17:16:13:8a:f5:
                    79:6e:a6:4e:a5:74:10:f7:4a:b0:da:a4:0e:1b:2b:
                    0e:cb:5c:16:00:5c:73:b8:7a:eb:56:d3:36:59:97:
                    1d:73:e7:69:0a:33:78:13:53:20:cb:ba:a4:0d:f7:
                    05:76:54:b0:38:d3:06:9a:0a:93:9c:7f:12:64:ed:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B8:CA:21:08:2A:B0:05:40:97:CB:B4:F0:EC:50:53:39:CB:8A:7B
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:90:ee:5d:65:e7:8b:0f:b1:a1:76:5d:cd:24:0a:36:36:d9:
         54:de:eb:89:b1:e8:92:b6:ad:c4:31:46:dc:d5:45:27:11:5c:
         cf:96:ac:3d:5b:90:2f:d9:6e:89:88:5e:29:43:d9:a2:c6:78:
         8d:43:38:c3:bc:98:5d:0e:0a:29:cf:83:d7:96:17:83:63:8e:
         79:38:47:21:f4:8a:45:b4:38:24:0d:1c:86:94:7e:af:8f:62:
         c7:e9:71:55:5b:f3:0d:59:05:64:e2:82:f4:45:32:5c:15:71:
         bc:21:91:21:fa:b7:50:53:a9:d0:06:3a:2d:01:05:73:d8:ca:
         f8:90:62:58:47:29:cb:b1:d9:81:68:45:f8:0e:f6:d0:82:74:
         2d:fa:9e:44:eb:a9:b5:e9:1e:bf:cf:40:34:3b:b7:e2:51:b1:
         ae:b4:07:9d:96:07:00:14:52:ae:57:39:ca:54:eb:ab:71:3e:
         30:9e:fc:f0:75:26:83:10:32:6a:f9:d3:b6:a8:51:74:70:42:
         99:2a:d0:17:4a:52:04:49:a8:6a:1b:18:a8:8a:8e:9b:0d:cf:
         d1:3c:9c:b3:66:47:84:5e:16:69:6d:a0:b0:0e:4b:3c:1a:c4:
         8a:6d:45:36:4a:14:66:66:ba:e2:f5:a4:6f:d0:62:85:06:82:
         71:25:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org