Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa
File:                     3136382e3132312e36302e302f32342d3234203d3e203238343039.roa (raw, json)
Hash identifier:          aB67DxZ1LCy9Ky+336Havr5pBPd0NmNFwGsPMLUQjQg=
Subject key identifier:   15:59:63:B0:22:98:CF:C7:4A:73:33:C0:0A:40:2D:CF:1D:50:6D:5B
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       3A401E16B1DCC7DD5CCDCF15E0047CA38EEE53EC
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa
Signing time:             Tue 04 Feb 2025 18:31:28 +0000
ROA not before:           Tue 04 Feb 2025 18:26:28 +0000
ROA not after:            Tue 03 Feb 2026 18:31:28 +0000
asID:                     28409
IP address blocks:        168.121.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:40:1e:16:b1:dc:c7:dd:5c:cd:cf:15:e0:04:7c:a3:8e:ee:53:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Feb  4 18:26:28 2025 GMT
            Not After : Feb  3 18:31:28 2026 GMT
        Subject: CN=155963B02298CFC74A7333C00A402DCF1D506D5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b2:9f:5b:5e:30:ae:5b:e5:46:ce:a0:6e:75:
                    9c:eb:60:0a:4c:cc:3e:f5:ed:e5:1e:46:96:d3:ca:
                    8c:96:16:89:39:9c:11:2e:5d:3a:93:5e:da:ff:cd:
                    1d:c6:9d:77:61:67:1c:e8:dc:5f:20:03:93:45:87:
                    c0:5a:95:24:27:2a:7d:26:0b:a2:e1:e1:3c:49:40:
                    59:9d:1f:f9:de:a0:d3:c2:40:97:02:da:93:61:3b:
                    a0:4b:82:be:a4:d3:15:fe:72:46:e6:1e:1a:ce:92:
                    3c:84:ff:ef:74:be:db:6b:e7:69:9f:5d:c8:1c:55:
                    ac:6e:0d:35:fb:54:99:e9:9c:e3:af:75:b5:85:ee:
                    8c:e9:03:7c:93:d3:78:d7:30:fe:3a:c1:9b:c6:c9:
                    99:ba:33:85:30:a2:6a:55:ce:c6:d0:02:31:00:9d:
                    3f:f1:1e:77:9a:29:11:7f:c2:74:a9:67:51:1f:f8:
                    35:29:bf:e4:ed:87:c9:ac:e0:e0:5f:c1:82:5d:41:
                    a6:c5:d2:40:10:b1:ef:aa:40:8b:09:ce:34:44:ca:
                    c5:42:22:d2:4e:7a:21:c6:76:81:e3:12:32:73:ba:
                    39:31:d0:5f:40:3b:ed:e7:aa:ee:e5:26:f0:2d:df:
                    60:bb:71:fb:ea:53:c1:6d:b9:6f:5a:10:6f:ab:95:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:59:63:B0:22:98:CF:C7:4A:73:33:C0:0A:40:2D:CF:1D:50:6D:5B
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36302e302f32342d3234203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:07:94:bb:c8:8d:fd:ab:b7:88:61:8d:d9:55:89:63:bc:a5:
         82:bd:df:49:31:19:b5:a0:93:dc:da:e4:b4:a2:c0:c5:44:59:
         ff:6d:08:f5:49:bd:9e:05:a5:68:7e:ca:88:94:e5:50:b3:8a:
         e8:aa:52:a9:e3:67:dc:04:0b:69:bd:1d:76:7d:d1:5f:3f:cf:
         00:e4:24:aa:d1:3b:6a:71:18:0a:88:b3:c8:48:37:87:31:ee:
         29:b7:0d:82:c4:06:25:03:93:b4:ce:05:87:e3:5b:4f:00:2a:
         f0:15:c3:7b:67:75:bf:05:ea:1f:10:20:20:84:73:e4:20:22:
         c8:b3:30:f4:bd:3b:7a:02:46:a3:18:2f:90:e4:80:b3:cc:01:
         5d:56:52:30:f7:7f:b0:7a:d8:3f:23:99:fa:60:f8:25:b1:c7:
         8f:ec:43:c3:28:7b:96:1f:72:94:05:6f:16:9e:da:4f:a2:19:
         18:3a:a5:9a:44:5e:f1:82:1d:8a:3e:88:7c:5a:77:5f:13:2f:
         77:9b:5b:1b:3e:9f:09:9e:63:9c:47:2e:07:0d:78:72:ec:f5:
         fd:d0:ee:d1:02:f3:ca:c4:5f:23:14:ce:7c:23:c2:f1:81:9d:
         cf:c8:2a:02:b8:0b:43:4b:e4:9f:1d:85:bd:45:7e:18:74:6e:
         74:af:8c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:53:42 2025 by rpki-client