Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
File:                     3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa (raw, json)
Hash identifier:          SyHY5q8raibS8U5YTe7aPdaIq4PEhdU3mjbd5CvB9mQ=
Subject key identifier:   8D:D9:5A:C7:99:A9:27:55:65:3E:1E:53:0C:AA:9F:E8:71:5A:53:94
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       7E6FFD2E56A643D4CA09C4AD1C5663144FFC0944
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa
Signing time:             Tue 05 Mar 2024 18:10:24 +0000
ROA not before:           Tue 05 Mar 2024 18:05:24 +0000
ROA not after:            Tue 04 Mar 2025 18:10:24 +0000
asID:                     266688
IP address blocks:        168.197.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 08 May 2024 16:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6f:fd:2e:56:a6:43:d4:ca:09:c4:ad:1c:56:63:14:4f:fc:09:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Mar  5 18:05:24 2024 GMT
            Not After : Mar  4 18:10:24 2025 GMT
        Subject: CN=8DD95AC799A92755653E1E530CAA9FE8715A5394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:8c:30:9b:7e:1a:0f:cc:db:45:57:e3:2c:
                    c2:87:99:0c:7b:6a:bd:89:a6:a7:35:de:a5:eb:58:
                    84:3e:9a:6f:a3:69:40:b8:65:04:20:72:84:8b:7c:
                    e0:6c:3f:d5:e7:dc:9a:70:3f:76:f8:9f:00:fc:3c:
                    b0:27:f9:6e:fc:e2:d2:cc:2d:41:58:54:21:d8:b3:
                    19:58:84:39:66:97:db:e0:bd:17:3e:d5:c6:42:af:
                    28:93:a5:cd:c9:47:a1:92:e9:5e:7e:d7:b0:f5:a0:
                    34:62:ef:db:0d:f0:ae:68:b6:95:70:6d:b1:86:fe:
                    46:b5:32:54:61:8c:86:3e:c9:32:ea:0c:9e:b4:9a:
                    c7:19:27:b1:b8:58:cd:b3:ed:d7:ee:b6:a0:eb:65:
                    82:89:06:e3:99:76:cc:ef:02:2e:80:93:07:9a:14:
                    da:75:af:73:3e:81:0b:c9:d4:d7:ae:ab:ed:4e:d6:
                    1c:68:8b:99:5f:7a:9c:6e:18:0e:ba:6b:1c:0d:5f:
                    7a:fe:68:3f:af:66:26:67:c4:66:0d:2f:1f:aa:fb:
                    b7:7a:e4:50:da:d3:ef:63:2f:06:a2:c4:02:fa:c4:
                    dd:e4:64:60:17:30:2f:62:34:3e:9f:c1:c1:35:84:
                    4a:7a:d5:ff:ae:a7:bd:ec:b5:a6:fd:a1:4a:6f:9d:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D9:5A:C7:99:A9:27:55:65:3E:1E:53:0C:AA:9F:E8:71:5A:53:94
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/3136382e3139372e3138382e302f32342d3234203d3e20323636363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:ce:e3:85:4f:51:79:b2:09:64:15:75:6a:f6:b4:2b:f0:
         5a:9d:14:d8:00:7b:c7:0d:0b:1a:99:9d:85:dc:12:e0:38:ff:
         bd:8d:46:b5:ea:85:06:4c:e0:b3:5a:36:8d:e1:57:8e:e0:32:
         4a:1f:8e:66:0b:1d:eb:60:26:40:8b:6c:d5:af:2c:e9:af:46:
         55:3a:ab:bf:87:ba:1b:e1:cc:06:b4:c7:78:8b:af:07:8d:7e:
         5e:b6:e3:d0:48:44:49:6d:c5:fb:eb:4c:96:7f:1a:29:b5:e3:
         4e:6c:c7:24:ca:98:23:39:de:31:d4:27:35:a3:a3:69:53:f3:
         af:42:71:23:f2:17:e3:ae:24:1d:48:42:0f:52:11:f3:ba:b9:
         c6:85:d3:ed:ee:b6:cf:23:4a:f2:15:fd:76:26:50:18:7f:38:
         f0:de:0f:4f:d8:ff:ce:61:c9:f4:fe:6b:42:90:b9:e5:10:47:
         eb:35:e9:77:d9:78:cb:38:ad:52:25:2f:c5:c7:46:1d:b3:a6:
         1a:7f:70:a1:d6:82:24:43:66:52:06:a6:eb:ab:56:d0:55:12:
         fc:f7:e7:a5:84:8e:fe:a4:78:d5:1a:f7:38:90:5d:eb:d9:31:
         0a:1c:5d:4d:8e:5c:9a:65:59:52:3e:8b:1d:2c:53:cc:78:e3:
         d3:90:b3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:06:19 2024 by rpki-client on console-fra.rpki-client.org