Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa
File:                     3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa (raw, json)
Hash identifier:          v9erEhdZFGpQPcJvw6RNLfWGHFu3P0Dy+d7vzsDu6gY=
Subject key identifier:   87:84:61:7A:34:59:3E:E5:6D:20:0F:0C:FE:E4:62:7A:C2:C3:8D:3B
Certificate issuer:       /CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
Certificate serial:       3E4D00656EF08948AD840D29A1B7A366F88C4B7A
Authority key identifier: 68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa
Signing time:             Tue 05 Mar 2024 17:48:38 +0000
ROA not before:           Tue 05 Mar 2024 17:43:38 +0000
ROA not after:            Tue 04 Mar 2025 17:48:38 +0000
asID:                     264773
IP address blocks:        168.197.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4d:00:65:6e:f0:89:48:ad:84:0d:29:a1:b7:a3:66:f8:8c:4b:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4
        Validity
            Not Before: Mar  5 17:43:38 2024 GMT
            Not After : Mar  4 17:48:38 2025 GMT
        Subject: CN=8784617A34593EE56D200F0CFEE4627AC2C38D3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:40:b9:be:38:35:6f:24:7f:48:c9:d8:78:
                    a0:1e:cb:8a:91:23:e5:8e:fb:eb:de:12:52:d6:39:
                    34:c2:a8:75:80:bc:40:4d:d2:a9:b6:32:ef:10:22:
                    9a:d4:37:6b:51:d1:2f:75:79:9e:97:2f:22:51:77:
                    9c:5a:9f:b1:7c:07:37:c0:37:8a:22:c0:e2:76:01:
                    d4:e9:2b:fa:b3:38:34:4a:dd:3a:7d:78:00:6b:a0:
                    e1:1f:ca:1d:ec:8a:1d:e5:72:ce:9a:28:2e:c0:c9:
                    7c:56:ce:67:71:71:d0:3d:50:a0:c3:7a:12:49:f7:
                    52:d4:ad:bd:e7:70:a4:cc:c4:a9:36:60:01:36:14:
                    9c:31:50:c7:35:32:a1:11:d1:91:a4:f5:71:f1:ce:
                    91:92:c3:96:0f:26:a3:e2:51:ed:cd:30:a6:38:97:
                    fb:66:a2:97:af:c3:11:b8:c4:bf:5e:90:cf:73:46:
                    98:a0:e7:04:c5:81:c0:8e:f5:ff:dd:b9:c8:0c:9e:
                    3d:e5:06:1f:6d:0a:8c:9e:fe:86:d6:ea:99:ba:37:
                    11:6b:cf:c8:29:b4:18:17:86:0d:c5:29:ef:21:86:
                    bd:ad:6f:c9:f1:c4:07:dd:c3:d5:ee:4c:b1:d6:f2:
                    35:e9:ee:6d:64:40:f8:25:3b:4b:29:8e:07:87:c0:
                    06:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:84:61:7A:34:59:3E:E5:6D:20:0F:0C:FE:E4:62:7A:C2:C3:8D:3B
            X509v3 Authority Key Identifier:
                keyid:68:C8:54:2A:3C:A3:8B:CC:76:73:F1:7E:9F:11:BA:5D:D5:1B:25:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68C8542A3CA38BCC7673F17E9F11BA5DD51B25E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E9194624D3A085A0ED6E22542D018E88E162B88413FDE3977251B20446CEA008/0/3136382e3139372e3137322e302f32322d3234203d3e20323634373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:6c:dd:54:3e:12:36:83:7c:be:b9:f1:52:9e:bf:b1:03:d6:
         e6:18:d5:ec:e8:1b:8f:68:d2:20:59:e5:b6:e7:d3:e3:44:68:
         31:17:5d:8e:e0:0a:9e:32:39:39:24:ed:e2:e1:d6:f6:b6:d7:
         e3:58:5f:65:8b:e8:77:9e:1a:92:d9:bf:e4:57:fa:64:75:c4:
         03:9a:76:3e:c8:35:3f:66:12:25:c5:a3:43:4f:8b:8c:b2:a9:
         78:a2:17:cc:f1:b0:d7:7d:da:21:79:4f:e8:bf:01:3d:b8:b0:
         36:aa:7c:46:c5:22:c8:2c:91:d0:98:76:e8:60:bf:2e:7d:23:
         17:ba:79:70:79:f4:b5:b7:da:c0:72:4a:e5:63:ac:67:e9:8d:
         85:80:01:15:11:02:78:00:4e:07:71:81:8d:8b:ca:b4:b9:a3:
         c0:c3:63:73:52:65:ee:10:b8:12:e3:5a:04:99:a9:7f:ca:a0:
         f0:80:9a:25:97:1c:cb:71:6c:a5:bd:f1:5b:ed:f4:bf:59:66:
         b6:8c:16:91:7d:18:fb:ae:b3:99:c9:fe:ba:80:a1:49:79:4d:
         93:44:32:3e:19:9f:b5:ef:8f:0a:b0:a2:b2:f4:b3:98:6c:2b:
         2f:13:41:16:c4:00:53:5a:ca:ea:e4:5a:66:d6:1a:05:c2:f6:
         81:7c:e8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:38:47 2024 by rpki-client on console-fra.rpki-client.org