Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35342e302f32332d3233203d3e20323634373338.roa
File:                     3136372e3234392e35342e302f32332d3233203d3e20323634373338.roa (raw, json)
Hash identifier:          E/vR/lTb031xf77fv9nxt3sTPXvsdvl7mYTvkAYsjkk=
Subject key identifier:   9C:C7:88:30:DF:19:37:F4:9B:5A:DE:19:4F:62:FF:01:A6:FE:8E:37
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       4C389E7B475796E2328BFDF67BEE1D136ABE91E3
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35342e302f32332d3233203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 18:19:55 +0000
ROA not before:           Tue 05 Mar 2024 18:14:55 +0000
ROA not after:            Tue 04 Mar 2025 18:19:55 +0000
asID:                     264738
IP address blocks:        167.249.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:38:9e:7b:47:57:96:e2:32:8b:fd:f6:7b:ee:1d:13:6a:be:91:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:55 2024 GMT
            Not After : Mar  4 18:19:55 2025 GMT
        Subject: CN=9CC78830DF1937F49B5ADE194F62FF01A6FE8E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:00:32:be:a4:11:38:3c:4c:1d:93:dc:3b:
                    82:e1:5e:b9:a1:f7:0d:ab:dd:59:8f:4c:ed:2d:a9:
                    2c:a4:45:d8:e4:01:25:6e:0d:e7:3e:0b:f7:d3:08:
                    e0:32:f0:b1:39:6e:d7:d9:f6:46:76:01:7a:7e:4c:
                    9e:26:a7:0f:53:1d:0c:a6:b8:c0:82:29:7f:3e:fc:
                    a1:a6:fa:4d:f2:9d:85:b0:24:0c:9e:0d:0b:f0:61:
                    9f:78:3a:19:4e:75:38:15:a8:8a:82:8c:16:ee:28:
                    f5:99:89:41:b9:83:5b:cc:e6:5a:86:74:f2:b3:a8:
                    5e:a7:68:c6:eb:0f:4c:6c:ed:3d:01:48:1b:66:38:
                    83:dc:aa:a2:d1:cd:b3:84:e5:b9:d3:c4:82:b6:28:
                    a7:ef:07:ca:98:32:b7:b5:ba:e2:51:59:ee:88:6f:
                    6d:29:76:ac:1f:ad:12:18:ba:b6:f2:85:17:5d:03:
                    26:79:1e:0e:22:dc:07:af:49:81:30:1d:6f:ea:05:
                    e0:09:36:c5:2d:fa:60:fb:9c:bb:d9:ec:f4:d5:f9:
                    70:ba:e7:6a:e2:13:5c:82:1c:f5:cc:5c:66:fe:59:
                    3e:86:1c:29:a3:cc:d6:e2:73:9b:b0:c3:64:bf:39:
                    31:35:65:29:00:c8:32:2c:e7:01:2c:98:50:13:ee:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C7:88:30:DF:19:37:F4:9B:5A:DE:19:4F:62:FF:01:A6:FE:8E:37
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35342e302f32332d3233203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:39:66:38:0b:c4:c1:7d:0e:83:e9:df:fd:fc:fa:7f:e1:fe:
         41:c4:36:ee:6f:4b:a2:b0:0e:e2:ee:2b:3e:3d:58:f0:31:ad:
         12:c3:e1:7b:73:5a:5e:bb:a0:5f:a0:b9:60:c4:8a:34:d0:33:
         6c:bf:25:88:4b:ea:01:5d:b1:5a:d0:39:fb:cd:93:a8:91:a4:
         1d:df:b0:60:b7:1d:80:42:bc:3c:a8:85:98:71:62:35:72:53:
         07:db:74:2a:c6:47:bf:fe:9b:c6:fb:4c:a0:b6:b8:8e:03:c0:
         5f:d0:8d:10:d2:54:4c:d1:bc:5c:d8:2a:3b:ee:aa:be:c1:0d:
         2a:bd:28:10:93:06:7d:72:a4:ae:36:08:e4:9c:a8:31:8e:cb:
         8a:6b:5c:e0:10:e4:2f:c6:6e:d5:75:f3:64:2b:a4:e2:c4:1f:
         15:60:d1:1d:ef:f8:8c:cb:9d:b3:bc:42:05:97:77:06:b7:b1:
         cd:f1:b1:12:98:1d:d4:40:71:df:e6:61:7c:14:6e:22:e0:5a:
         3e:b8:a8:12:63:2c:70:0b:10:23:06:0d:87:4d:19:a5:8c:e5:
         f7:bc:d2:44:55:d4:d7:61:a0:b3:4e:26:85:a7:f4:4a:01:73:
         eb:73:20:12:c4:b6:7e:2d:7a:a4:e0:7a:cd:70:c0:db:31:28:
         dd:29:d1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:57:32 2024 by rpki-client on console-ams.rpki-client.org