Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa
File:                     3136382e3132312e36322e302f32342d3234203d3e203238343039.roa (raw, json)
Hash identifier:          LcIMG4Jm7zGaB5pY8avdfMRRMgtmg/tbfcEzoKDhaRo=
Subject key identifier:   3B:C3:26:E8:09:69:F1:1A:E0:07:F3:53:92:7D:04:43:C6:67:56:1E
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       570E38FCA7551B8D809C11B65DE1B9DAAACCE41B
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa
Signing time:             Tue 04 Feb 2025 18:31:29 +0000
ROA not before:           Tue 04 Feb 2025 18:26:29 +0000
ROA not after:            Tue 03 Feb 2026 18:31:29 +0000
asID:                     28409
IP address blocks:        168.121.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:0e:38:fc:a7:55:1b:8d:80:9c:11:b6:5d:e1:b9:da:aa:cc:e4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Feb  4 18:26:29 2025 GMT
            Not After : Feb  3 18:31:29 2026 GMT
        Subject: CN=3BC326E80969F11AE007F353927D0443C667561E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:1c:ba:20:26:c8:8c:29:89:de:77:b8:35:
                    21:fd:a2:96:98:d4:e7:57:6c:9d:49:7d:5a:16:2e:
                    4d:0f:13:12:f3:b4:bb:5c:64:51:80:aa:4f:97:e9:
                    02:6e:20:6f:a1:7c:e3:ef:aa:0e:a3:b2:86:f8:d3:
                    57:bc:8f:55:60:eb:0b:00:37:66:3c:55:2b:79:69:
                    ee:80:34:20:ce:70:52:20:20:9a:bf:2d:fb:15:d0:
                    65:80:50:78:27:73:a1:49:6e:f0:2a:02:8d:5e:50:
                    92:e7:11:3b:e6:0e:3e:c3:24:99:5e:cb:e3:95:d2:
                    6f:07:51:e6:60:51:dc:0f:9a:64:49:d6:dd:ab:d0:
                    f5:76:2e:26:72:25:c9:af:1e:14:a2:ae:51:6d:07:
                    9e:0f:59:1b:d8:d2:64:34:85:d8:50:9f:6c:97:be:
                    63:8a:a7:e7:f8:f3:28:6c:78:1c:7b:3a:ff:a3:c8:
                    93:31:41:81:85:0a:e9:54:d1:8d:e4:ac:b7:cb:32:
                    31:4a:04:27:d9:f7:d9:91:cb:5b:79:67:f4:1c:91:
                    34:ac:fe:91:14:08:d9:16:1c:67:09:82:68:32:94:
                    cc:6e:7b:25:63:db:59:83:b9:07:6b:04:8e:40:7f:
                    96:d0:a3:cc:28:f7:b8:6c:e7:d3:5d:e0:f9:b1:19:
                    75:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C3:26:E8:09:69:F1:1A:E0:07:F3:53:92:7D:04:43:C6:67:56:1E
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36322e302f32342d3234203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:a0:3c:c2:2f:b7:e4:e9:45:96:15:fc:e8:53:67:72:bf:4d:
         43:89:48:b1:4c:1f:62:02:09:a0:74:83:f6:bd:6f:a3:59:5f:
         df:fd:2e:70:33:f2:da:14:8d:12:27:59:09:ba:02:6b:a6:1b:
         63:01:32:29:6e:3e:95:4c:e9:15:a3:6c:e9:31:86:fb:00:38:
         51:9b:26:57:7b:c4:04:da:63:63:60:ce:f4:27:5a:85:76:74:
         77:c9:4d:5d:0d:cc:61:a6:d4:35:fb:a6:2c:23:9a:c0:12:fc:
         5f:6e:55:05:cc:4d:31:b1:61:3e:50:67:59:a6:76:0e:7a:ef:
         03:5f:58:5d:d6:04:b9:da:fc:7f:c3:b3:38:4a:bd:a9:ea:9c:
         e7:cc:64:da:3b:e3:a9:b9:68:19:ac:e4:fd:ee:da:0d:9d:c5:
         eb:68:39:73:89:c2:fe:a3:e7:02:ac:86:33:bc:97:1e:df:87:
         2e:ec:12:4b:61:da:33:b3:d7:a1:4f:62:39:d8:c2:38:d4:d8:
         e3:a3:a7:87:00:ea:93:74:a4:a6:f7:68:86:fd:12:50:14:f3:
         81:c1:9b:ed:6c:3e:2d:14:f4:fa:3d:ec:f6:5b:c2:fb:cc:b2:
         ea:fd:bc:81:27:ff:e2:91:c6:dc:e8:ae:ee:df:e9:f7:e9:ae:
         b9:58:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:49:29 2025 by rpki-client