Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          S+HJNyOjQc8GyPy0e0NfALdYz+7a9tV4uXt1XVEFxnA=
Subject key identifier:   DB:65:22:BE:40:FE:97:44:40:91:B4:39:B2:8B:39:E3:8D:C4:84:C7
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       175800A52ECA2492FF26B23659809DA752C90E1D
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 19 Mar 2024 21:30:01 +0000
ROA not before:           Tue 19 Mar 2024 21:25:01 +0000
ROA not after:            Tue 18 Mar 2025 21:30:01 +0000
asID:                     264696
IP address blocks:        168.232.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:58:00:a5:2e:ca:24:92:ff:26:b2:36:59:80:9d:a7:52:c9:0e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Mar 19 21:25:01 2024 GMT
            Not After : Mar 18 21:30:01 2025 GMT
        Subject: CN=DB6522BE40FE97444091B439B28B39E38DC484C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e6:9c:72:9f:d8:92:6b:90:d0:bf:d6:63:8e:
                    65:30:ec:fb:c3:c5:ef:94:74:7d:dc:26:e3:8c:0f:
                    a9:fb:14:f5:2e:e4:6a:d4:51:0f:32:3d:0f:1d:e2:
                    7d:bd:b1:e0:e4:2c:54:f9:f4:ef:5b:92:d1:61:3e:
                    dd:ff:aa:4c:de:8c:23:07:21:94:e1:11:0a:7f:14:
                    0b:2b:f0:ce:7b:0d:aa:47:8d:7e:6f:df:e5:33:eb:
                    66:6e:fb:7c:36:85:50:a5:5d:61:1c:9c:4b:9f:ab:
                    a8:3b:9c:7e:f0:9f:ed:ef:90:e7:ed:f0:36:a8:4b:
                    25:13:45:a4:b9:3f:4b:82:02:97:15:1a:ca:47:86:
                    51:b8:75:a9:a5:d5:27:34:34:fd:11:12:03:1e:61:
                    46:b1:58:02:b0:d5:40:cc:c4:8f:7b:66:dd:88:b8:
                    7c:fc:6d:5c:a3:1e:a5:98:51:4a:b1:e9:42:24:2b:
                    6a:4d:d2:cd:18:07:8f:0f:4a:9a:4c:a3:b3:cc:73:
                    66:73:d9:3b:8e:74:2c:f0:49:6d:54:28:03:5a:8b:
                    78:43:66:f7:5b:ee:74:96:f2:e2:9c:03:0b:f7:8e:
                    64:9b:af:1a:bf:1a:ae:97:f8:8e:68:a5:2a:db:22:
                    1b:cf:2a:4a:d0:4b:3c:ea:ae:4e:2e:65:76:fc:0b:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:65:22:BE:40:FE:97:44:40:91:B4:39:B2:8B:39:E3:8D:C4:84:C7
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:55:1e:c0:0d:74:ed:f8:28:70:1c:cc:e4:14:d3:aa:07:
         71:3b:87:32:6f:08:70:ae:bf:de:64:7d:9b:9e:cf:a4:c6:4c:
         8f:a3:e7:88:40:71:9a:3b:70:82:13:7d:99:78:15:e3:bf:78:
         96:ab:bb:f9:6b:dc:f9:d6:76:c1:60:1f:06:17:94:4c:a3:ef:
         bd:9a:99:75:e7:8f:35:37:64:be:61:5d:ab:e4:fc:ef:57:3b:
         47:5b:49:d3:07:9a:c9:d9:83:6f:54:6d:9f:10:de:5b:d0:89:
         5f:f3:ba:e0:06:84:dd:1f:9e:35:36:b6:3d:fb:7d:95:58:3f:
         ce:a9:64:b6:a8:93:f5:66:8f:2b:99:dd:3d:c9:e6:4a:44:5f:
         87:d3:fc:36:aa:03:13:00:f6:e1:8a:95:f9:5a:93:bb:9a:f1:
         dc:13:9d:16:3c:d5:92:c8:e5:17:38:e0:41:0d:b0:3a:71:f5:
         30:5c:a9:7b:fb:35:6c:1d:a4:a8:7f:92:0a:24:79:5d:3b:09:
         e3:63:f9:f8:85:e9:74:26:d0:f4:77:50:d7:c4:86:d2:e6:4b:
         0e:98:a6:3b:a8:91:af:60:c2:74:d4:83:b4:3c:f8:b1:da:3e:
         96:e6:5d:aa:42:e1:44:cd:e4:39:8f:7b:66:2b:28:bd:e5:9d:
         f8:91:6a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:03 2024 by rpki-client on console-ams.rpki-client.org