Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa
File:                     3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa (raw, json)
Hash identifier:          f07A78rfPRsdcVed0ALt84KiXnMFIJCSpZFJCV+C4Uw=
Subject key identifier:   EB:F3:00:AD:22:CD:FD:7D:54:83:34:D5:2B:8E:56:AF:68:C4:8C:93
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       6C8CE6AF99B6F9BCE503606F25645D87A1BF1A71
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa
Signing time:             Tue 05 Mar 2024 18:13:37 +0000
ROA not before:           Tue 05 Mar 2024 18:08:37 +0000
ROA not after:            Tue 04 Mar 2025 18:13:37 +0000
asID:                     265761
IP address blocks:        164.163.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:8c:e6:af:99:b6:f9:bc:e5:03:60:6f:25:64:5d:87:a1:bf:1a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Mar  5 18:08:37 2024 GMT
            Not After : Mar  4 18:13:37 2025 GMT
        Subject: CN=EBF300AD22CDFD7D548334D52B8E56AF68C48C93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:62:ed:69:94:83:79:41:9b:fb:e7:a8:7d:
                    2a:5f:de:12:d3:c0:b2:32:a6:c6:a0:b2:c1:f2:0a:
                    01:df:62:9a:af:e6:3d:c9:30:bd:3b:84:d8:c3:ef:
                    9c:b2:dc:8c:72:e3:2a:15:a5:d7:ed:42:57:a8:52:
                    04:97:ab:92:d5:c8:b6:31:92:22:b6:f0:23:8b:14:
                    35:2f:e8:3b:84:46:5a:7b:e2:a4:e1:1f:24:d9:35:
                    0e:da:dd:64:ea:ae:22:7e:53:21:14:4b:62:39:7c:
                    f4:62:67:65:17:3e:18:bb:5a:fa:30:cf:8a:a7:1a:
                    1b:f3:84:1a:bb:38:5e:be:b3:66:74:9b:c4:14:1f:
                    cb:52:39:7a:fa:1a:f1:60:7b:db:4d:e0:b3:2a:24:
                    c3:e4:c9:3a:5a:e6:1c:e5:97:35:65:f2:ce:4c:a6:
                    a1:1c:59:7e:39:fe:b5:31:aa:79:36:53:92:01:0a:
                    c4:07:17:a9:20:69:f8:2d:9a:bb:d6:fe:66:30:ae:
                    c9:ad:79:ce:69:3d:c5:e5:0a:a6:3a:ac:83:7c:0b:
                    0e:40:6a:00:5f:c5:b1:71:0d:b4:5b:c0:c8:4e:83:
                    3c:ee:ff:63:9d:3b:9c:fd:ae:a5:72:17:32:44:c0:
                    bb:e1:12:d2:66:39:da:67:aa:93:a3:8e:5e:d6:7e:
                    7d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:00:AD:22:CD:FD:7D:54:83:34:D5:2B:8E:56:AF:68:C4:8C:93
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:1d:e9:db:db:16:1b:76:e2:0a:13:9c:b1:14:6d:00:a9:5b:
         12:4c:20:56:33:fa:52:d7:f4:58:f1:15:eb:a7:96:1f:00:03:
         b7:c2:b4:8a:8e:86:db:43:1b:13:6f:44:49:30:10:a1:e7:1b:
         c5:ca:17:3a:bc:d0:30:42:21:d4:43:51:8d:0e:c9:12:ec:0f:
         8b:01:e8:ad:42:51:a6:b3:ac:b8:7d:42:37:94:fd:3f:63:42:
         ee:76:6e:26:0b:26:40:20:c9:b5:05:59:35:e1:98:88:0b:14:
         4e:c3:51:0e:60:a6:eb:37:54:af:37:3c:a9:1a:21:fa:7c:6d:
         4d:22:7a:21:84:6a:b6:5b:78:1a:30:eb:67:d2:f7:9d:94:8b:
         7d:78:53:1c:75:08:78:5d:27:8a:6d:14:ce:7e:24:47:cc:46:
         34:9f:e8:63:9a:bb:5b:4a:30:d2:e5:92:35:3d:a2:4a:87:bf:
         58:a0:4d:dd:f1:40:dd:24:b2:eb:65:f2:79:22:40:44:f4:f2:
         7d:e0:d2:88:66:fa:ed:07:71:2f:c2:53:ca:e7:58:21:11:8c:
         11:ec:ff:c6:35:73:4b:59:11:34:a2:21:45:f9:e9:54:8d:27:
         16:8e:48:18:93:28:61:c7:d2:f2:91:9e:9f:72:ab:9f:51:60:
         bb:1f:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:32 2024 by rpki-client on console-fra.rpki-client.org