Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa
File:                     3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa (raw, json)
Hash identifier:          0d8ezsPYbNhi2D4dCkoDdEuIveuDQt0xL7SiWS9+v24=
Subject key identifier:   6A:66:46:49:D9:79:6C:DC:0C:BB:F6:40:1B:4D:52:89:68:DC:D6:E4
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       493DEA0054AE96B18FB8B2A6D5325D9D60FF78E2
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa
Signing time:             Tue 05 Mar 2024 17:52:04 +0000
ROA not before:           Tue 05 Mar 2024 17:47:04 +0000
ROA not after:            Tue 04 Mar 2025 17:52:04 +0000
asID:                     263777
IP address blocks:        168.227.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3d:ea:00:54:ae:96:b1:8f:b8:b2:a6:d5:32:5d:9d:60:ff:78:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Mar  5 17:47:04 2024 GMT
            Not After : Mar  4 17:52:04 2025 GMT
        Subject: CN=6A664649D9796CDC0CBBF6401B4D528968DCD6E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:0a:01:fd:f4:81:6f:b9:a0:51:95:d3:35:
                    34:e9:34:5d:3e:78:3d:a9:bb:e1:b9:16:6e:fc:8c:
                    b2:7a:9e:0d:bd:0d:f2:37:23:b9:ef:08:39:f3:21:
                    9a:9d:b1:4a:4b:f9:d6:70:ad:56:85:1e:1d:ef:77:
                    94:52:6e:3d:3e:e1:30:c6:ae:db:40:ad:e9:37:97:
                    d8:41:bc:ca:15:fb:92:68:4e:f5:71:0e:f3:00:cf:
                    bf:5f:ae:5f:2b:e3:e7:89:0b:fe:cf:f0:d2:fd:6b:
                    ea:0f:b0:39:90:30:9b:2e:e1:11:2a:3f:4f:fa:38:
                    7e:96:6b:29:4e:c8:9d:dc:af:36:50:67:81:3f:49:
                    17:98:50:91:63:6a:95:0a:1c:95:87:53:73:0f:c0:
                    a9:2a:f1:bc:cb:2e:ad:d7:a1:c7:8f:97:e7:32:00:
                    0d:59:c6:55:11:80:0b:54:e1:98:af:e1:9d:b1:63:
                    ce:07:d6:9f:f0:ca:2d:5c:11:c2:4b:5b:16:2f:6b:
                    70:5d:d9:13:6f:5a:57:05:3e:cf:62:69:fc:58:ad:
                    6e:c2:9b:b1:8e:44:60:ab:1a:1c:37:4e:26:3c:34:
                    00:63:81:73:e0:cc:74:16:a3:ef:46:17:2e:2c:23:
                    9c:23:56:d3:d1:f0:ea:2b:8b:64:ac:5d:8a:17:24:
                    96:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:46:49:D9:79:6C:DC:0C:BB:F6:40:1B:4D:52:89:68:DC:D6:E4
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3136382e3232372e3235322e302f32322d3234203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:50:db:df:d1:9f:a1:0f:2e:6b:d2:09:94:7f:b7:d0:13:04:
         6c:d5:f4:9d:1e:2c:7a:f5:a9:4a:92:be:a4:72:d7:fe:d6:c1:
         c0:d3:c6:91:ca:c1:c5:d6:d4:dd:02:e5:66:bc:2b:2a:e7:08:
         07:59:83:60:22:d9:19:1d:fc:c8:64:fa:c2:fb:da:57:29:a7:
         c3:1a:9f:db:57:a1:3b:7f:15:33:df:5c:a1:98:61:a2:70:03:
         72:aa:a0:76:63:fc:3e:e6:f8:af:e8:ee:b3:08:a2:69:93:83:
         3d:20:da:0c:2c:93:a7:02:36:53:21:ed:43:0b:60:2b:68:6d:
         53:24:37:30:43:f2:38:8a:98:9a:79:b0:16:82:94:f5:1a:12:
         fb:49:2a:4a:fe:f9:36:17:29:61:9f:e8:b9:2d:e7:f2:02:04:
         c0:18:ce:14:09:59:b9:8d:e2:55:86:75:b8:67:52:90:4b:5d:
         75:54:d2:2f:37:1d:67:a0:c4:a7:c5:ba:b8:b9:f0:ab:46:cc:
         38:0f:56:c0:1f:03:d1:d2:40:ab:0d:4b:89:6e:7e:62:72:74:
         15:e2:1f:04:f1:38:b6:51:90:6c:a9:fd:8b:bc:aa:71:87:52:
         95:a7:d0:9b:23:4a:46:ec:56:9f:fb:ac:a5:44:49:33:75:0c:
         c8:28:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:36:44 2024 by rpki-client on console-fra.rpki-client.org