Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36332e302f32342d3234203d3e203238343039.roa
File:                     3136382e3132312e36332e302f32342d3234203d3e203238343039.roa (raw, json)
Hash identifier:          VI8ylk5/WtZvmUfukirxgOGwKZb717/SNSCAQflT9LU=
Subject key identifier:   7C:C0:EB:ED:DB:D2:FC:5B:97:A2:FA:9A:92:FC:81:3C:60:43:88:37
Certificate issuer:       /CN=913C600205F778BCEADE53F31FD3D65A46D53467
Certificate serial:       0EBC4A462669D128578701B4A03FB0FD8FE23708
Authority key identifier: 91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36332e302f32342d3234203d3e203238343039.roa
Signing time:             Tue 04 Feb 2025 18:31:28 +0000
ROA not before:           Tue 04 Feb 2025 18:26:28 +0000
ROA not after:            Tue 03 Feb 2026 18:31:28 +0000
asID:                     28409
IP address blocks:        168.121.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 06:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:bc:4a:46:26:69:d1:28:57:87:01:b4:a0:3f:b0:fd:8f:e2:37:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=913C600205F778BCEADE53F31FD3D65A46D53467
        Validity
            Not Before: Feb  4 18:26:28 2025 GMT
            Not After : Feb  3 18:31:28 2026 GMT
        Subject: CN=7CC0EBEDDBD2FC5B97A2FA9A92FC813C60438837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:d4:ba:f6:c8:99:28:2b:83:0f:80:6d:5e:
                    dd:ae:c6:ed:8a:9b:97:b7:87:21:0a:8f:39:10:b2:
                    f3:fb:bd:52:b9:15:75:dc:a1:c4:d5:a3:98:78:d1:
                    c5:71:be:0e:3b:0c:67:ee:6c:1c:22:58:86:b1:39:
                    4f:41:d6:51:5e:fd:07:e7:c3:c3:46:cb:95:d9:07:
                    23:82:f6:9e:ad:79:09:d4:14:40:66:2b:d6:88:c7:
                    52:b3:14:1b:50:38:06:30:05:45:23:fa:ab:33:d7:
                    64:ff:13:c1:9a:0d:95:c9:4d:f3:cd:ab:5c:23:3a:
                    30:bb:aa:42:5d:45:04:15:cd:f8:69:01:88:61:5d:
                    c8:d4:65:d3:44:22:ea:ea:4f:40:99:9e:5f:69:80:
                    99:d7:f0:b9:ee:f8:b2:eb:42:11:bb:f3:3f:dd:c0:
                    ea:f6:45:41:90:33:c1:ca:a2:f4:b6:be:42:0f:fe:
                    3d:b9:51:50:56:94:15:38:ff:6c:73:33:83:c9:a4:
                    99:7a:7a:61:c3:ad:37:a0:7c:29:8d:53:1b:81:ab:
                    20:4a:95:41:61:a9:6d:db:c0:e4:f7:7f:c0:3b:17:
                    f1:8a:3c:a4:4b:bc:63:56:75:1e:31:81:b5:9f:80:
                    cf:1d:6f:83:ab:3b:ac:ef:c7:e5:56:cb:72:20:42:
                    22:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C0:EB:ED:DB:D2:FC:5B:97:A2:FA:9A:92:FC:81:3C:60:43:88:37
            X509v3 Authority Key Identifier:
                keyid:91:3C:60:02:05:F7:78:BC:EA:DE:53:F3:1F:D3:D6:5A:46:D5:34:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/913C600205F778BCEADE53F31FD3D65A46D53467.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/913C600205F778BCEADE53F31FD3D65A46D53467.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11ECB110B91860A0913CF170F5CFB709DE98DF7D0391B8F3DEC5531F64337675/0/3136382e3132312e36332e302f32342d3234203d3e203238343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:50:39:48:aa:49:df:97:ba:87:c0:c7:4d:0c:6b:3a:76:ac:
         48:4a:a0:65:8a:a9:21:67:03:b8:78:af:0c:2c:d5:68:34:58:
         17:e2:73:1a:5c:dc:39:57:8f:41:bd:6b:3f:35:b3:4a:5b:85:
         eb:58:40:1d:bd:d1:eb:3b:50:00:af:af:c9:fe:a8:58:a5:a2:
         dd:06:03:ec:28:e3:ee:e4:bf:08:b7:52:4d:7e:06:a6:4f:d0:
         80:2a:e1:4b:1a:ae:02:a7:b4:d5:df:50:73:44:80:af:54:8b:
         c9:43:fa:4f:a6:5d:7e:9b:1d:f3:53:3b:f8:2d:2b:fa:e8:c9:
         18:1e:80:66:ab:38:bc:a0:45:57:35:f9:c1:e2:e8:e0:95:56:
         8d:c0:66:03:36:de:da:28:fa:61:8c:c9:ca:84:09:9d:76:30:
         01:27:6d:a1:76:68:5e:c4:39:54:dc:ce:97:e1:8d:88:7c:22:
         bb:73:4a:39:2c:82:f3:e2:11:de:2c:f9:76:a9:2e:4a:86:91:
         38:50:be:ee:6c:04:b7:c4:27:ca:0b:b8:22:b9:99:22:36:d0:
         37:15:eb:e6:b6:5a:a8:08:71:d0:d2:6b:93:08:7d:42:8d:dc:
         47:34:52:3a:55:b8:c8:99:44:b6:85:a6:4c:8b:8a:f7:e8:cb:
         ea:e4:35:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:52:57 2025 by rpki-client