Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
File:                     3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa (raw, json)
Hash identifier:          0RhTb/hos7g/fLU1X/Czjwg8xJ3eFy8uTz5IseyiDiM=
Subject key identifier:   1C:BB:8B:CF:1E:A1:1D:D3:1B:C2:7F:88:7B:3C:7B:7D:BC:A3:87:C4
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       4AF01D3AF49D2C18A326C1AEC20B5B9DDF3557FE
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa
Signing time:             Tue 05 Mar 2024 18:10:31 +0000
ROA not before:           Tue 05 Mar 2024 18:05:31 +0000
ROA not after:            Tue 04 Mar 2025 18:10:31 +0000
asID:                     19169
IP address blocks:        168.197.188.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:f0:1d:3a:f4:9d:2c:18:a3:26:c1:ae:c2:0b:5b:9d:df:35:57:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:31 2024 GMT
            Not After : Mar  4 18:10:31 2025 GMT
        Subject: CN=1CBB8BCF1EA11DD31BC27F887B3C7B7DBCA387C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:d4:46:7d:da:56:ec:df:b7:13:ee:f7:93:
                    ee:89:61:93:b1:8d:38:00:52:c8:ff:76:50:e9:c6:
                    45:10:6a:26:71:96:40:32:0c:93:82:82:53:44:46:
                    fa:1b:85:5d:58:ca:df:94:da:cf:fd:76:7d:23:c1:
                    52:c9:ac:02:e8:ac:bd:84:54:43:37:29:79:1d:ed:
                    fe:f8:b0:f6:f9:ae:93:09:29:a3:cb:bc:f2:7a:59:
                    87:3f:38:07:2d:2c:91:9b:af:2e:93:77:c0:a5:86:
                    b4:eb:ac:b0:70:b5:79:fb:5f:c2:8e:61:be:40:b7:
                    ab:be:2c:10:84:aa:8e:d9:c7:58:e1:ac:88:b9:df:
                    ac:3b:e6:2a:01:cc:10:f7:b0:7b:df:96:83:6d:cb:
                    44:51:a0:ce:3d:f5:1f:0c:3a:bd:5b:87:26:6e:61:
                    5d:e4:52:b6:f7:c7:82:a1:21:d3:83:85:3b:95:c5:
                    ff:3b:bf:e3:6a:f7:1f:c0:09:f5:f6:06:a7:30:88:
                    72:d4:b8:fd:7f:c8:00:41:5c:88:b8:3e:01:f0:c7:
                    a7:8c:f0:9a:6c:2a:43:eb:47:ed:a7:b4:09:b9:a7:
                    26:93:3e:cd:da:2e:c7:db:fe:bc:a7:82:6b:a2:f2:
                    f5:ff:c3:bc:f2:25:64:99:15:d2:06:18:66:91:72:
                    a7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:8B:CF:1E:A1:1D:D3:1B:C2:7F:88:7B:3C:7B:7D:BC:A3:87:C4
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32322d3234203d3e203139313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         54:0f:d6:98:52:5f:bc:86:d4:ae:39:c1:b6:76:92:0f:a4:60:
         4e:43:78:fd:cc:4b:c2:bb:79:ac:0e:2f:e6:06:da:f4:24:5c:
         7a:4f:5b:a0:8d:95:9f:88:fc:12:42:be:01:b3:55:30:cf:d0:
         da:56:a7:85:7f:61:96:1f:2f:5e:9b:1b:e0:36:8c:1c:eb:a6:
         a4:6b:b5:63:7a:ad:3d:f5:7c:51:ee:41:59:95:b3:5f:42:86:
         22:69:a1:e3:cc:25:5c:ab:46:a3:7a:b9:46:06:e7:29:d9:b3:
         bb:25:53:9d:12:dd:ba:7c:fd:55:c7:2a:1f:66:33:1a:2c:41:
         87:15:d0:9c:75:a3:31:9f:08:28:ed:f0:5b:12:c3:08:2f:88:
         1e:a7:5d:8b:14:26:65:7b:46:4f:21:c3:3c:55:d3:2d:03:66:
         17:03:01:0c:43:ef:07:75:92:d1:8f:e1:74:c1:33:c8:26:0a:
         ca:e3:c9:87:d7:9b:76:a8:03:81:61:3c:07:e0:ba:66:0b:3d:
         15:1b:0f:90:08:81:dc:f2:7f:d7:89:a2:7e:c5:df:69:71:7c:
         35:fe:e8:52:5a:e5:84:d3:55:12:50:1d:0d:a2:bc:f3:96:c9:
         16:af:fa:14:df:d4:41:d0:9b:ac:1d:1d:a9:90:ec:47:86:c1:
         72:35:3b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:47 2024 by rpki-client on console-fra.rpki-client.org