Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa
File:                     3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa (raw, json)
Hash identifier:          For23n1hSqTVJchl5F9t+TaU345QFOWw8hXGkLoRCHo=
Subject key identifier:   63:05:7D:1D:84:53:AB:25:82:83:B3:31:C7:66:E6:EE:7B:76:5B:53
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       62D83B936A3583E59F198AD0B395D541CD949605
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa
Signing time:             Tue 04 Feb 2025 18:20:33 +0000
ROA not before:           Tue 04 Feb 2025 18:15:33 +0000
ROA not after:            Tue 03 Feb 2026 18:20:33 +0000
asID:                     27773
IP address blocks:        168.243.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 09:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d8:3b:93:6a:35:83:e5:9f:19:8a:d0:b3:95:d5:41:cd:94:96:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Feb  4 18:15:33 2025 GMT
            Not After : Feb  3 18:20:33 2026 GMT
        Subject: CN=63057D1D8453AB258283B331C766E6EE7B765B53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:45:81:5d:e2:1f:13:84:86:0b:e5:2f:55:
                    16:ee:ca:7f:7c:5f:63:ad:27:85:f5:2f:f1:eb:dc:
                    e8:3f:ee:3d:ec:54:56:7e:3f:ce:f2:21:e8:a3:91:
                    0c:fd:70:61:86:66:ea:62:28:cc:6f:b3:96:a7:36:
                    17:a9:7e:ad:a0:68:ed:42:f5:88:be:39:cc:15:d0:
                    90:c7:de:f2:a2:2c:21:2f:78:f1:44:3c:b8:22:d4:
                    5e:b3:08:ab:90:99:a9:2b:a3:d2:7d:ad:f2:d7:82:
                    ef:24:c1:84:c9:af:d1:6e:c0:23:22:c0:32:dc:1e:
                    8c:71:ee:bb:05:4e:07:b5:1c:a1:e4:60:e3:db:04:
                    3c:f2:5f:38:ea:a6:fd:d8:f8:a4:1f:cc:40:64:ef:
                    be:b6:f9:6f:a2:2c:95:1e:21:6a:35:e2:09:97:cd:
                    78:1c:2c:47:80:8c:1a:d4:48:32:8a:3b:7e:8a:e3:
                    d8:b3:b1:ea:0b:29:48:ce:37:d9:a8:be:b1:9b:1e:
                    e7:d8:cf:32:e6:0d:fb:fc:50:71:6c:2a:42:27:41:
                    20:21:79:04:53:61:33:fc:30:ac:94:52:6a:67:e8:
                    9a:13:f6:0d:92:99:c2:46:44:ab:24:1f:b1:ed:a0:
                    ea:29:c5:14:92:db:91:2b:fb:d7:4f:cd:c4:04:b6:
                    36:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:05:7D:1D:84:53:AB:25:82:83:B3:31:C7:66:E6:EE:7B:76:5B:53
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3131392e302f32342d3234203d3e203237373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:34:e6:d0:bb:2b:be:1b:ba:f5:25:5a:12:51:83:b4:5e:f0:
         48:fb:79:65:27:62:35:e2:e8:ac:1c:62:45:0f:d7:90:a7:c7:
         95:c2:6d:be:ee:c3:4e:ac:a6:75:e0:93:bf:9c:44:eb:9c:a9:
         34:47:0b:ee:fe:ab:c9:dd:e2:d5:9a:e9:44:78:7d:fc:3b:75:
         be:16:47:5a:69:4c:12:8d:a4:04:9d:ac:e7:df:1d:40:3b:42:
         9c:c5:19:19:c5:76:01:4c:1f:27:31:d4:36:bc:9b:9a:2c:33:
         1f:64:2e:20:fb:e1:54:7b:5c:68:f6:33:6b:0e:d2:1b:6c:30:
         d7:42:d9:e9:b7:3b:64:74:05:c1:00:d7:79:31:ef:71:83:e1:
         9c:5d:55:71:3c:06:89:5e:12:b4:09:92:75:15:2e:67:48:72:
         b7:ca:0d:ff:71:7c:65:71:22:b0:4a:31:30:3a:5b:db:f5:5d:
         c1:51:17:20:36:d2:35:4d:61:01:c2:01:ca:3a:3b:22:0a:f3:
         7a:6f:37:e5:0e:37:7b:6a:04:c2:ba:49:2a:3a:63:cc:77:53:
         2d:a2:d4:a2:e2:b3:d5:15:19:bd:5f:90:e8:c2:85:89:c5:73:
         ea:4b:e6:41:7f:bd:5c:04:f6:fa:37:0c:6f:c3:55:18:b9:ee:
         8f:db:fd:04
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUYtg7k2o1g+WfGYrQs5XVQc2UlgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNTAyMDQxODE1MzNaFw0yNjAyMDMxODIwMzNaMDMxMTAvBgNV
BAMTKDYzMDU3RDFEODQ1M0FCMjU4MjgzQjMzMUM3NjZFNkVFN0I3NjVCNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCom0WBXeIfE4SGC+UvVRbuyn98
X2OtJ4X1L/Hr3Og/7j3sVFZ+P87yIeijkQz9cGGGZupiKMxvs5anNhepfq2gaO1C
9Yi+OcwV0JDH3vKiLCEvePFEPLgi1F6zCKuQmakro9J9rfLXgu8kwYTJr9FuwCMi
wDLcHoxx7rsFTge1HKHkYOPbBDzyXzjqpv3Y+KQfzEBk7762+W+iLJUeIWo14gmX
zXgcLEeAjBrUSDKKO36K49izseoLKUjON9movrGbHufYzzLmDfv8UHFsKkInQSAh
eQRTYTP8MKyUUmpn6JoT9g2SmcJGRKskH7HtoOopxRSS25Er+9dPzcQEtjZpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUYwV9HYRTqyWCg7Mxx2bm7nt2W1MwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzMTMxMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzczNzMzLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPN3
MA0GCSqGSIb3DQEBCwUAA4IBAQCpNObQuyu+G7r1JVoSUYO0XvBI+3llJ2I14uis
HGJFD9eQp8eVwm2+7sNOrKZ14JO/nETrnKk0Rwvu/qvJ3eLVmulEeH38O3W+Fkda
aUwSjaQEnazn3x1AO0KcxRkZxXYBTB8nMdQ2vJuaLDMfZC4g++FUe1xo9jNrDtIb
bDDXQtnptztkdAXBANd5Me9xg+GcXVVxPAaJXhK0CZJ1FS5nSHK3yg3/cXxlcSKw
SjEwOlvb9V3BURcgNtI1TWEBwgHKOjsiCvN6bzflDjd7agTCukkqOmPMd1MtotSi
4rPVFRm9X5DowoWJxXPqS+ZBf71cBPb6Nwxvw1UYue6P2/0E
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:46 2025 by rpki-client