Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa
File:                     3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa (raw, json)
Hash identifier:          9Z8TIiwNuCFGgNQwV5jt8vVrrzBhpDEuGfO1FGY5IMc=
Subject key identifier:   94:46:31:DB:3B:F9:19:59:CB:8E:AB:94:19:AA:96:2A:3E:FF:E5:D4
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       133500D9603A097327519A70EF85E21976A15D69
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa
Signing time:             Tue 04 Feb 2025 18:20:32 +0000
ROA not before:           Tue 04 Feb 2025 18:15:32 +0000
ROA not after:            Tue 03 Feb 2026 18:20:32 +0000
asID:                     17079
IP address blocks:        168.243.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:35:00:d9:60:3a:09:73:27:51:9a:70:ef:85:e2:19:76:a1:5d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Feb  4 18:15:32 2025 GMT
            Not After : Feb  3 18:20:32 2026 GMT
        Subject: CN=944631DB3BF91959CB8EAB9419AA962A3EFFE5D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e0:94:5e:31:5e:9d:1a:96:d4:c0:39:75:03:
                    c4:fe:23:4c:11:98:47:40:f1:19:69:10:d9:c1:05:
                    54:ee:3a:09:ab:1b:e5:80:b9:ed:28:24:62:6c:f0:
                    37:8d:54:3f:d6:c2:80:20:26:83:f0:ac:b9:ce:48:
                    0b:8b:32:a9:fe:69:b5:c3:e9:1a:2c:b8:c7:e4:a8:
                    c1:e8:ff:c7:68:54:fd:a3:26:4d:1c:53:02:c6:c5:
                    b0:e3:36:05:ab:39:4d:82:fd:87:16:c8:28:1c:c5:
                    08:a8:00:16:a2:7b:f3:57:c1:99:5c:06:e4:f7:25:
                    4c:b5:0b:21:db:dd:f0:6c:a9:50:34:88:03:fc:75:
                    80:d8:12:82:89:a8:bf:c0:d3:9e:da:a3:fe:c9:c4:
                    07:3b:bf:ce:c6:1c:76:1c:8a:21:ee:48:68:b0:92:
                    c1:30:c4:f9:ac:e9:c9:36:3c:87:b3:a8:51:25:62:
                    04:1e:f7:35:40:a2:2a:c5:18:08:d3:7a:7b:1d:b5:
                    3f:68:7e:3e:80:e6:db:b0:d1:55:69:31:06:e9:6a:
                    fc:37:94:3c:01:0f:8a:4a:5f:3c:21:5b:0f:54:3f:
                    31:d4:2e:4d:e0:01:6f:8d:53:7b:7a:8b:e7:e6:f8:
                    57:2e:89:77:38:ea:9a:1e:b0:74:2d:f4:c4:f9:1e:
                    6b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:31:DB:3B:F9:19:59:CB:8E:AB:94:19:AA:96:2A:3E:FF:E5:D4
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3137362e302f32302d3234203d3e203137303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         35:f8:9a:76:aa:b7:90:fc:ff:82:47:02:ff:e3:41:1b:81:94:
         ab:78:a1:67:f1:21:66:56:11:a1:02:a5:bc:fb:f1:f0:cf:2b:
         0b:d5:6b:7c:9c:16:3d:a5:c2:61:2d:dd:67:d2:1b:9f:3e:97:
         36:2a:d7:42:d2:24:0a:c0:d2:55:65:57:57:2b:9c:a2:08:a8:
         40:7f:e6:b4:31:af:cc:9f:24:6c:8c:25:66:1a:24:f4:b4:49:
         cc:33:e1:1d:ef:32:92:95:13:5f:60:53:37:c4:c3:f1:13:fb:
         bc:99:47:ef:4b:be:1f:ce:b3:f6:30:20:a4:f6:d7:b9:09:31:
         c5:23:db:61:85:86:d9:c0:1d:2e:b1:93:e7:e8:c9:43:a6:64:
         78:3f:56:fd:b9:d2:9f:d2:99:6a:25:53:76:1e:3e:6f:88:63:
         81:93:a5:2a:c1:e4:18:23:6d:b4:0c:b1:71:cf:33:e3:6e:d5:
         bc:87:19:69:ea:fd:36:1b:a8:f5:23:6c:b3:71:e1:c2:3c:1b:
         c3:7d:e7:c3:84:00:3b:f4:59:e1:6c:e1:2b:83:a1:25:9b:b5:
         7b:ec:9c:1b:ad:7a:bc:a7:a6:3f:aa:97:be:79:e9:65:47:3a:
         99:b1:c8:de:02:d1:2c:62:0b:fa:1d:f1:10:e9:5d:90:3a:31:
         bb:76:7b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:13 2025 by rpki-client