Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          Txg3h394WJOO8z2NzdwIRbEYABwVjUNyxd6GjrVEGhc=
Subject key identifier:   92:5F:59:03:E1:64:DA:E4:6F:98:2A:C9:02:E3:18:2B:F1:C0:C8:AE
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       298EC012599103D251094CA063D4B4F76B14F622
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 05 Mar 2024 17:44:34 +0000
ROA not before:           Tue 05 Mar 2024 17:39:34 +0000
ROA not after:            Tue 04 Mar 2025 17:44:34 +0000
asID:                     10778
IP address blocks:        168.196.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8e:c0:12:59:91:03:d2:51:09:4c:a0:63:d4:b4:f7:6b:14:f6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Mar  5 17:39:34 2024 GMT
            Not After : Mar  4 17:44:34 2025 GMT
        Subject: CN=925F5903E164DAE46F982AC902E3182BF1C0C8AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:55:d2:40:aa:d1:49:6d:50:24:02:89:01:
                    21:17:70:b3:37:7b:2b:7f:c9:d7:85:d3:f0:b3:c6:
                    e9:95:b5:e5:31:a4:bd:e8:71:75:2b:6f:93:8d:b8:
                    9a:61:56:38:23:2c:7e:a9:f9:d2:9e:fc:bd:a6:6a:
                    b3:54:ff:14:73:fc:9c:00:09:a4:a6:07:18:12:bd:
                    d2:1d:8b:86:1a:0d:af:22:bd:ff:0c:aa:84:41:95:
                    45:ae:b1:f0:23:5d:11:04:f3:65:d5:92:19:c7:42:
                    1f:6e:b2:f0:cf:37:10:c5:5f:a2:2e:45:07:ff:91:
                    a4:cc:3b:0a:68:05:6d:67:83:b6:e2:cb:ee:b5:39:
                    dd:e7:27:77:d7:d8:16:8f:88:52:62:92:fa:4f:4a:
                    58:ff:62:26:72:47:5d:e7:2c:54:be:50:96:9a:a0:
                    33:8c:96:c0:5d:7f:20:69:b3:6b:e8:8b:96:e1:15:
                    fd:ec:fb:8a:52:06:59:67:93:b3:1f:b2:b7:d4:c3:
                    68:39:70:b1:26:28:ef:b2:db:bd:60:9d:c0:a0:07:
                    cd:8e:4d:43:69:a7:4e:55:e6:0a:66:17:a4:64:a3:
                    b0:8b:ea:5f:05:a5:95:26:01:af:ed:e3:19:87:a8:
                    8a:c9:be:f8:25:33:f4:8f:5e:c4:0c:4e:46:62:a5:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5F:59:03:E1:64:DA:E4:6F:98:2A:C9:02:E3:18:2B:F1:C0:C8:AE
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138372e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:c3:b3:d4:2b:17:8e:a3:53:54:cb:98:32:32:cb:2f:db:
         b9:c8:59:db:1d:43:85:6b:31:46:0f:7d:57:6a:cb:cc:24:c9:
         e9:58:e3:ee:32:d9:2c:d1:d7:bd:ff:3b:27:3e:8d:f9:6a:c4:
         3d:ee:37:7f:af:5b:8b:34:a2:a7:c5:cb:bc:cc:d7:a4:12:b6:
         d0:77:3e:cf:0a:b6:31:c7:1f:d7:e8:99:47:56:bb:fd:34:25:
         4d:cc:dd:45:29:4b:c9:63:fd:a5:f2:d5:01:41:bd:17:f5:06:
         13:89:1a:7a:37:12:29:da:64:2b:33:b2:1a:02:ba:52:87:ca:
         41:52:1a:36:83:68:74:06:5b:94:41:bd:c3:80:d7:7e:7b:67:
         58:c0:2b:51:eb:56:75:34:69:0c:18:db:96:03:89:96:6d:f4:
         e0:6f:29:0d:8d:ca:9b:dd:bd:35:7e:94:e2:50:61:f1:0d:e1:
         7a:88:6d:30:81:98:d1:52:5b:d9:36:8b:fa:a2:81:d2:ea:26:
         fa:89:ca:82:ac:97:f2:1d:0c:ca:65:6c:12:fa:03:f9:a1:59:
         ba:86:fa:e8:27:53:e8:74:ef:7c:c3:6f:c9:20:f1:96:8e:a5:
         1b:0f:cc:7e:d6:e5:43:d5:b7:63:83:f8:34:7f:52:be:a0:0a:
         c3:49:7a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org