Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32342d3234203d3e20323635373631.roa
File:                     3136342e3136332e382e302f32342d3234203d3e20323635373631.roa (raw, json)
Hash identifier:          1/aRsQLyY0JgBtY8XydS15bMS1nq2JFUSWrD4x+KxsI=
Subject key identifier:   46:6E:D7:09:D0:E3:15:56:34:CD:63:C1:66:2F:A1:8B:2E:F9:72:3E
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       507D1D804DF599C9EB08D37FB3C57A71A5750BA3
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32342d3234203d3e20323635373631.roa
Signing time:             Tue 05 Mar 2024 18:13:36 +0000
ROA not before:           Tue 05 Mar 2024 18:08:36 +0000
ROA not after:            Tue 04 Mar 2025 18:13:36 +0000
asID:                     265761
IP address blocks:        164.163.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7d:1d:80:4d:f5:99:c9:eb:08:d3:7f:b3:c5:7a:71:a5:75:0b:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Mar  5 18:08:36 2024 GMT
            Not After : Mar  4 18:13:36 2025 GMT
        Subject: CN=466ED709D0E3155634CD63C1662FA18B2EF9723E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2a:c7:fb:04:94:aa:49:5c:a5:4e:a4:53:35:
                    97:47:50:79:b0:ea:ab:e7:67:c2:3c:5a:99:95:23:
                    de:73:01:03:e4:47:84:3c:25:c9:a7:2e:30:08:fb:
                    bc:b8:f6:fc:67:e8:52:de:ad:61:73:cc:82:f8:f9:
                    22:ef:9c:35:e6:5d:69:dd:43:f0:93:d3:ed:b9:fe:
                    af:a9:4d:02:95:6c:a7:1e:81:2f:58:1f:0c:ed:83:
                    1f:d5:45:5c:71:06:18:61:cf:d6:02:96:c4:f6:75:
                    e9:c9:ff:d0:4d:98:17:8b:fa:09:d6:5e:fc:ad:b1:
                    ba:35:cd:b0:8b:fe:6a:1d:56:11:64:e2:a2:f5:95:
                    cd:85:d3:8f:c8:b1:90:00:e5:6d:71:8c:4a:9f:22:
                    71:b8:1a:37:34:73:2a:da:4c:16:9a:45:60:4c:cd:
                    50:6a:ec:52:8e:45:78:1a:e2:dc:9c:d4:eb:21:5c:
                    5f:32:bd:89:b3:d8:13:c2:f6:9f:5b:b3:bd:c4:af:
                    5c:e8:5d:c7:88:f0:13:0f:b0:4f:b1:57:17:bb:20:
                    eb:ea:55:81:ab:99:e8:15:5b:d0:ed:ae:b8:67:4d:
                    20:1f:32:2c:97:47:21:14:9b:f0:37:17:2f:b6:f7:
                    0a:15:d3:71:bd:87:6a:6e:77:97:d1:cd:94:95:46:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6E:D7:09:D0:E3:15:56:34:CD:63:C1:66:2F:A1:8B:2E:F9:72:3E
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e382e302f32342d3234203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:58:99:8c:50:24:45:08:1b:dc:ab:81:85:b6:12:8e:ed:8a:
         80:60:3a:a9:19:a9:03:5e:43:f1:c8:45:38:3d:5f:c3:64:f6:
         b1:a3:ed:08:46:77:81:fb:37:b7:1e:44:0c:53:af:8e:6a:2a:
         ac:2c:6b:b4:c5:b1:6c:1c:1e:63:9d:c0:fe:1e:45:79:6e:1a:
         cb:0b:eb:57:2c:54:07:56:23:ef:d1:42:5f:f1:29:d8:f3:2d:
         34:2b:3d:8c:d6:20:0f:3b:f6:e8:20:e3:cb:b2:e2:70:a3:08:
         d8:93:84:a6:76:6c:d8:86:11:df:7c:d6:32:1d:38:62:96:94:
         b1:f4:c0:d5:c0:5c:3c:56:bf:33:37:19:0e:5f:2f:65:7e:cd:
         3e:c7:70:0b:a9:81:9d:3a:9c:a6:2b:a6:df:72:00:6a:56:aa:
         f6:37:79:a7:93:46:76:f7:8b:5e:6f:68:60:5f:94:a1:fb:7d:
         80:51:6d:8e:c0:8a:06:a4:e4:23:14:98:7a:67:d3:a6:43:f9:
         83:24:ae:43:2c:fd:23:a6:85:20:27:67:4c:56:2c:b3:a9:69:
         da:8f:b1:c3:d2:81:03:8d:87:e4:38:8c:d6:8f:8a:bd:a2:d4:
         3d:84:9a:e7:61:de:2b:17:77:43:19:f1:6c:ed:9b:ad:ee:99:
         fd:22:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:32 2024 by rpki-client on console-fra.rpki-client.org