Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35352e302f32342d3234203d3e20323634373338.roa
File:                     3136372e3234392e35352e302f32342d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          rJ0X65B9ZuX6ce2D8aSGALhuldkhsn9/ShqClF9b8ao=
Subject key identifier:   AE:C2:BB:0A:02:F9:8C:83:7C:EE:B2:D3:B5:7B:E3:25:2D:C6:54:98
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       39787FF2B83447FABFC29C5DE87D400BD9B8F659
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35352e302f32342d3234203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 18:19:57 +0000
ROA not before:           Tue 05 Mar 2024 18:14:57 +0000
ROA not after:            Tue 04 Mar 2025 18:19:57 +0000
asID:                     264738
IP address blocks:        167.249.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 31 May 2024 02:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:78:7f:f2:b8:34:47:fa:bf:c2:9c:5d:e8:7d:40:0b:d9:b8:f6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:57 2024 GMT
            Not After : Mar  4 18:19:57 2025 GMT
        Subject: CN=AEC2BB0A02F98C837CEEB2D3B57BE3252DC65498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9a:6b:3f:1e:67:6d:8e:45:54:6c:d2:15:df:
                    05:da:e7:85:88:24:12:2c:b4:73:3f:a1:28:88:8e:
                    5d:81:c2:83:7d:ec:08:3c:90:53:8e:d2:7f:55:75:
                    cb:04:77:52:71:0c:87:f4:71:a4:79:9b:9a:7e:83:
                    03:1f:2a:e4:eb:cb:a5:8e:f1:56:a4:85:e5:86:51:
                    04:41:3d:eb:c5:c0:22:cc:97:78:9a:a6:bb:cc:e7:
                    44:bb:54:14:03:fe:c6:e0:db:65:e1:90:54:61:33:
                    3d:4d:7d:26:56:1b:e6:3c:f3:85:67:d4:51:f1:95:
                    e2:29:e1:89:79:3b:b9:de:b7:cd:76:4c:74:47:70:
                    a9:2c:a4:c8:29:da:bc:7b:f0:48:b0:14:82:b7:8b:
                    35:da:4b:a3:18:aa:63:c6:0b:f3:54:61:32:34:a6:
                    78:f9:88:6c:f3:c3:12:79:ec:f4:a0:46:f3:d3:59:
                    b6:aa:83:00:91:3b:ad:7d:1d:f0:68:f1:77:cc:5f:
                    00:f7:51:52:09:82:bc:15:c5:9b:82:92:97:ec:8b:
                    2c:01:b8:fe:cf:c3:e8:8e:55:f2:5f:10:0c:4d:42:
                    7f:86:db:c3:51:d1:9d:f0:0e:68:18:fb:b5:13:92:
                    43:0e:c5:ca:3f:db:7b:2f:76:91:bb:bf:26:97:d1:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C2:BB:0A:02:F9:8C:83:7C:EE:B2:D3:B5:7B:E3:25:2D:C6:54:98
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3136372e3234392e35352e302f32342d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:97:a2:26:df:23:3e:f2:4c:2e:b5:a6:2a:80:b6:03:53:58:
         70:83:06:3b:f1:15:b7:a1:d4:72:d5:a3:aa:b3:13:31:87:23:
         fb:5b:61:5a:ef:8e:3d:cf:7c:e6:d1:b2:61:4d:a3:ab:e5:c9:
         d8:fb:53:54:a7:c6:5f:9f:6d:e3:df:ee:d9:16:a7:42:c8:4d:
         6a:b1:b1:09:8c:45:de:63:ef:41:d8:2a:bd:e4:a1:ca:50:46:
         97:07:35:97:87:42:9a:99:f1:d4:c9:e2:39:dd:0a:0a:64:f9:
         a0:e3:fd:68:c1:d3:7d:2c:f6:02:1a:7e:8f:bc:e6:de:2c:a3:
         2a:3c:2d:21:6d:06:67:f4:31:5a:dd:fb:b5:34:63:be:d9:bc:
         e9:c2:f2:da:5a:d7:e6:64:83:f7:60:83:79:91:c0:21:93:a5:
         65:0a:dc:fb:29:bf:20:b0:61:50:14:ae:7d:b4:87:a5:5c:cc:
         35:4e:53:ed:17:03:3d:9f:2d:03:92:6d:7f:f8:8f:37:83:60:
         6a:78:cb:e5:0a:75:3b:d0:8e:37:ba:4b:ca:0a:36:26:4b:a9:
         5e:db:1f:7c:b5:54:ca:74:de:af:77:b8:79:7f:2a:bc:9f:36:
         98:b1:12:38:d8:70:43:65:7a:d5:f7:ee:ee:2f:75:55:d4:74:
         71:bb:4b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 04:53:15 2024 by rpki-client on console-fra.rpki-client.org