Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          vcqKEtEBLxd3ToPm7JqdwgxxAqhPXwq4A8lKa+ctbCY=
Subject key identifier:   DC:46:1C:F7:6A:05:63:88:9E:C3:2E:FC:1B:40:12:67:C1:80:63:EF
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       7CC559B531184C7EF54F528256E685D130518FD5
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 19 Mar 2024 21:30:01 +0000
ROA not before:           Tue 19 Mar 2024 21:25:01 +0000
ROA not after:            Tue 18 Mar 2025 21:30:01 +0000
asID:                     264696
IP address blocks:        168.232.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c5:59:b5:31:18:4c:7e:f5:4f:52:82:56:e6:85:d1:30:51:8f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Mar 19 21:25:01 2024 GMT
            Not After : Mar 18 21:30:01 2025 GMT
        Subject: CN=DC461CF76A0563889EC32EFC1B401267C18063EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:86:29:25:b6:05:be:d8:97:92:d6:8c:42:
                    f5:09:77:ea:5e:6b:cb:3d:7d:8b:42:1d:29:a3:de:
                    e1:af:3d:27:56:72:e1:a7:90:0d:86:6c:f5:56:aa:
                    83:38:e9:0c:03:4f:bc:d3:b6:67:ef:6f:17:ef:12:
                    76:7b:a4:15:55:98:2b:49:3e:b3:1b:8c:3e:70:85:
                    65:7e:98:1f:bf:80:2c:1b:b0:41:ad:37:92:4c:ce:
                    8c:47:97:1f:4b:9e:53:ce:bd:53:d1:06:bf:c8:f6:
                    ec:21:d4:0c:68:3f:8d:6d:cc:83:ff:3a:d4:32:22:
                    c6:76:44:7c:03:61:b0:8c:a1:98:7e:22:da:31:a7:
                    36:34:ee:5b:ff:dc:49:fe:53:48:8c:58:6f:98:2e:
                    f9:45:4f:ae:b9:c8:ec:04:29:2b:ba:b3:0b:d2:51:
                    86:db:34:a9:d6:88:4b:c0:0c:d6:4b:69:a7:8a:1a:
                    44:d4:79:5d:60:8e:30:ac:7d:e0:ee:a0:a4:6b:b2:
                    45:cb:5b:4b:a5:31:b7:f0:f5:c2:cc:b2:98:46:ad:
                    e1:82:ee:12:84:ac:ce:6b:ff:f4:42:b2:a4:d0:18:
                    fc:67:21:e1:1b:b7:10:fb:23:45:6c:8b:19:cd:8b:
                    bd:f3:b4:08:b9:68:26:c6:e9:9f:8b:f4:73:6b:51:
                    7d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:46:1C:F7:6A:05:63:88:9E:C3:2E:FC:1B:40:12:67:C1:80:63:EF
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136392e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:da:8d:c2:75:c9:06:1d:c2:4b:09:8d:1c:69:ff:61:a8:3b:
         b8:39:fe:38:63:66:16:02:fb:de:b5:6a:1f:af:8b:73:61:16:
         60:1e:4d:0a:0c:0e:29:94:56:64:cc:79:83:67:5c:83:db:4f:
         54:3f:4a:61:5e:4d:b7:ec:c3:d7:c0:1c:e6:9f:ff:d8:2a:80:
         ba:09:bd:54:bc:8e:0b:79:e4:cd:0b:b9:b3:bf:5b:9f:56:39:
         f5:f7:88:20:f4:ba:a4:f6:36:7a:98:85:2c:bd:e0:66:43:84:
         6d:7c:c5:0c:f4:30:d2:36:6b:ed:71:45:c2:c7:3e:c0:0b:6a:
         ad:2b:ce:07:44:a9:b4:fc:a9:f7:cc:70:57:ad:b0:e9:12:3c:
         db:1c:5a:91:ac:37:cb:d2:14:dd:da:14:89:fc:15:d2:6e:b0:
         e2:59:b1:53:f4:0a:97:16:9f:0e:51:aa:66:12:d1:dc:95:d4:
         96:ab:52:ba:32:5b:a7:83:27:f9:bf:22:e7:a5:ea:a5:32:a7:
         02:d9:c1:01:3e:f7:78:c9:8c:6d:54:b2:1d:28:ad:5c:39:d9:
         ae:06:e8:23:59:64:76:bb:39:f5:40:31:49:61:da:37:ec:e1:
         5a:47:67:45:da:8a:1c:dc:f2:50:88:7e:08:4e:ce:93:58:6f:
         16:9b:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 03:16:33 2024 by rpki-client on console-ams.rpki-client.org