Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
File:                     3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa (raw, json)
Hash identifier:          hrqm5EXTIZelLKRJPKPWts37TqHKGaX5cSyk8QZgbkE=
Subject key identifier:   76:33:1D:7D:C3:1C:6E:3F:E9:F5:84:D4:67:5A:A0:FF:83:70:4D:0D
Certificate issuer:       /CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
Certificate serial:       0982B3A6247E79056B18545D40686219912955D5
Authority key identifier: 15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa
Signing time:             Tue 05 Mar 2024 17:59:07 +0000
ROA not before:           Tue 05 Mar 2024 17:54:07 +0000
ROA not after:            Tue 04 Mar 2025 17:59:07 +0000
asID:                     264701
IP address blocks:        168.232.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Jun 2024 02:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:82:b3:a6:24:7e:79:05:6b:18:54:5d:40:68:62:19:91:29:55:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15C3449293AE91B65244E89A1B4AEEC7DC01935D
        Validity
            Not Before: Mar  5 17:54:07 2024 GMT
            Not After : Mar  4 17:59:07 2025 GMT
        Subject: CN=76331D7DC31C6E3FE9F584D4675AA0FF83704D0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:d7:28:9b:f4:67:e2:16:48:fe:eb:ca:17:
                    2b:54:f0:a0:d1:52:bc:84:65:a9:97:6a:64:20:77:
                    e0:c0:a2:d8:3f:ad:ad:f3:00:95:c9:55:5a:00:64:
                    d1:1f:80:4d:21:13:04:e7:1c:af:25:44:5c:8f:03:
                    b8:a6:c0:86:45:de:38:7c:08:c7:0b:91:4d:8d:f0:
                    3c:cc:14:bb:3b:ac:aa:4a:89:32:62:8b:d5:16:7f:
                    ed:41:40:3e:e3:4b:60:92:76:9e:03:a5:24:72:4b:
                    3b:9d:cf:ce:38:61:c4:86:4a:8c:03:e2:bf:18:ca:
                    f9:64:de:db:68:d0:3e:ed:6e:2b:6f:69:74:86:9c:
                    a9:0c:e2:82:d9:d1:a3:79:31:5b:27:46:87:95:13:
                    ad:e0:bf:83:8d:7b:bc:cf:d2:31:01:6c:ec:14:ec:
                    e7:ed:ba:04:d9:7b:30:d4:7f:4e:06:5f:04:f8:71:
                    b2:72:5d:40:c6:a7:18:c3:87:3b:2a:b5:41:3d:6a:
                    a6:0d:06:94:20:41:04:59:1c:72:f4:08:3e:7e:a0:
                    dc:90:ef:39:35:82:e9:7f:de:28:33:55:60:4f:90:
                    94:ea:64:72:86:4e:8d:2c:cc:e9:0b:af:c4:aa:f8:
                    0a:9b:00:a6:a6:92:0a:b5:7d:10:f4:0b:02:bc:8e:
                    2c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:1D:7D:C3:1C:6E:3F:E9:F5:84:D4:67:5A:A0:FF:83:70:4D:0D
            X509v3 Authority Key Identifier:
                keyid:15:C3:44:92:93:AE:91:B6:52:44:E8:9A:1B:4A:EE:C7:DC:01:93:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15C3449293AE91B65244E89A1B4AEEC7DC01935D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB12907E027AF40E1C6DB641E5A62803E834083F17E5175F4C9E4CE0FC03CD54/0/3136382e3233322e3234382e302f32342d3234203d3e20323634373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:70:04:f1:b5:24:38:d6:fa:31:c5:c1:2a:db:c7:af:3c:7b:
         25:56:3b:35:ac:8c:53:60:d5:0c:b2:af:c1:c5:ab:0b:41:07:
         ca:fc:77:49:48:14:82:38:d4:d2:0f:ae:2f:b7:03:c4:9e:c2:
         06:31:d0:4e:5e:23:41:32:70:52:0f:80:18:9c:32:e0:51:70:
         80:8e:ac:9a:0e:11:aa:7b:1d:c8:92:82:6c:23:f6:c1:a7:5e:
         78:e4:6a:da:50:e1:2d:29:4b:32:7b:a5:85:ec:e5:b5:d9:c2:
         f3:0e:49:18:30:52:5c:84:42:04:1a:d4:b7:c2:e6:57:9e:23:
         82:c9:43:8b:14:f2:37:53:c5:b5:5a:03:8f:be:e4:74:d1:06:
         f5:88:8a:dd:50:e7:2d:71:ba:c1:35:93:58:35:08:eb:68:71:
         63:5e:43:14:a0:f0:24:34:aa:d7:55:56:f1:e1:6e:6c:21:07:
         a6:3c:43:7e:1a:ce:b6:0c:2f:d1:19:db:84:5b:a1:7a:5e:ee:
         b8:4b:7c:aa:74:92:ad:04:6d:50:ad:80:4c:3b:6a:a8:ee:0c:
         eb:b7:d4:05:d7:41:7a:20:87:84:5b:3e:92:a4:b4:bd:d2:59:
         04:0f:69:76:d0:e4:a9:6d:0d:ea:c4:ff:a6:fb:21:b0:11:91:
         e7:a0:87:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 17:32:13 2024 by rpki-client on console-ams.rpki-client.org