Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
File:                     3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          HWnUi0aU9lSEsro9qGUyJu7auxcCJgwXqiFTv2aQM3s=
Subject key identifier:   31:96:E8:16:03:92:0E:5B:CB:62:23:BA:6C:4F:4D:7A:DD:7C:27:00
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       3941FA0FC837045ECFF0715D642E0A7A3B1B8B8F
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 05 Mar 2024 18:21:03 +0000
ROA not before:           Tue 05 Mar 2024 18:16:03 +0000
ROA not after:            Tue 04 Mar 2025 18:21:03 +0000
asID:                     263829
IP address blocks:        168.181.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:41:fa:0f:c8:37:04:5e:cf:f0:71:5d:64:2e:0a:7a:3b:1b:8b:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Mar  5 18:16:03 2024 GMT
            Not After : Mar  4 18:21:03 2025 GMT
        Subject: CN=3196E81603920E5BCB6223BA6C4F4D7ADD7C2700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:ec:c0:43:b6:41:0f:a0:3a:ef:a1:ab:c8:
                    3a:6d:ec:0c:a1:9c:4f:74:f2:c5:a5:e4:38:58:3c:
                    bd:dd:72:8f:8b:a7:7b:dc:f2:84:03:f0:cf:4f:be:
                    53:56:32:b3:71:cb:aa:b8:92:d6:4b:a9:e4:1c:9d:
                    0c:80:ac:0d:34:92:db:d2:5a:70:15:1d:b5:33:f1:
                    17:27:d1:01:7a:57:d9:69:d0:e1:88:2a:c4:47:8d:
                    b7:97:2c:1c:25:71:8e:d5:10:ed:8f:42:26:0a:db:
                    8a:6d:f0:59:7c:bb:30:80:c4:bf:07:d2:c3:63:91:
                    8c:14:76:e3:b5:9b:1f:44:5c:a3:eb:44:ca:a6:ad:
                    79:4f:98:53:c5:1e:60:6d:82:09:58:24:e7:90:e2:
                    9a:29:63:c7:db:ca:9f:4d:68:a5:b5:a1:9a:be:a0:
                    9a:ce:e4:d8:16:48:3f:7d:b6:fe:57:88:ec:4a:5c:
                    e5:73:41:30:63:69:3f:62:59:62:40:c6:ba:cd:18:
                    ec:e6:ff:33:bc:ef:ab:e7:6e:93:89:91:f4:c5:b9:
                    0c:d1:fb:e0:2a:95:f5:a1:5a:d3:9e:0c:29:52:48:
                    fd:09:5b:2e:1a:13:1a:a0:03:48:22:f1:e5:ce:65:
                    72:4f:20:e0:9b:bd:d2:cf:26:53:2a:58:90:d6:d5:
                    fd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:96:E8:16:03:92:0E:5B:CB:62:23:BA:6C:4F:4D:7A:DD:7C:27:00
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3136382e3138312e3232382e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:72:23:05:2f:bc:8b:22:98:37:09:a7:08:8f:5a:e8:e2:64:
         37:3b:48:f4:80:a4:5d:2b:a8:2a:57:97:3b:16:6a:47:d7:c5:
         25:9a:23:fc:83:de:e5:55:cc:e5:e5:68:03:03:61:e2:62:64:
         26:a9:3e:fd:19:b2:21:fe:d3:3d:8e:e2:23:cb:17:e5:99:93:
         b9:e6:b9:4a:01:fd:23:86:e6:a7:90:f8:d7:50:f2:7e:e1:27:
         39:5c:d9:fb:0d:0a:53:51:9f:c8:d9:0e:12:a6:c3:6f:ab:ce:
         a9:7c:50:b3:ec:76:59:86:10:09:3e:f8:ae:e5:54:55:74:d4:
         99:94:cb:a2:70:3f:3b:70:af:0d:90:db:c0:f2:2f:23:16:a2:
         cd:ae:fe:e3:49:6d:9b:79:d0:6a:12:bf:20:1c:37:d0:af:80:
         3a:f8:f5:2f:f6:7f:9e:89:86:f3:62:fe:b0:af:08:ee:35:78:
         dc:1f:9d:4a:ff:80:cf:5d:4c:1f:d0:eb:0f:ea:46:a0:b2:9d:
         ae:f9:c0:35:28:d6:c3:dd:07:64:ba:e5:79:b2:f7:5b:28:1e:
         27:69:32:7d:d7:e4:11:4c:71:ea:12:0f:35:6f:53:f6:f5:88:
         27:46:e3:4a:7f:65:1c:07:48:1f:50:21:f8:d7:b6:55:c1:47:
         d1:48:e4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:43 2024 by rpki-client on console-ams.rpki-client.org