Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa
File:                     3136382e3234332e37322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          A7M3OcLr1Q6UBmt62hXDHcLKc2zoOH8TqhWizAK+ujk=
Subject key identifier:   64:22:34:49:79:4B:4E:1B:AE:15:3E:02:6E:14:4F:A0:7F:8E:94:02
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       0B83054750389727C992E9DDE48F787181DE13F2
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa
Signing time:             Tue 01 Apr 2025 14:05:00 +0000
ROA not before:           Tue 01 Apr 2025 14:00:00 +0000
ROA not after:            Tue 31 Mar 2026 14:05:00 +0000
asID:                     834
IP address blocks:        168.243.72.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Apr 2025 20:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:83:05:47:50:38:97:27:c9:92:e9:dd:e4:8f:78:71:81:de:13:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Apr  1 14:00:00 2025 GMT
            Not After : Mar 31 14:05:00 2026 GMT
        Subject: CN=64223449794B4E1BAE153E026E144FA07F8E9402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:87:76:57:e2:7d:80:74:d3:9e:99:15:c0:
                    0b:e7:40:fd:ab:7c:f8:fd:a0:4e:22:e0:13:c4:f0:
                    b1:be:c7:61:dd:3d:52:f8:a0:8e:66:3c:f5:7f:92:
                    a4:7f:d1:38:d1:68:5b:69:65:6b:03:06:cc:b3:0a:
                    d6:b3:ce:81:b5:90:7e:b1:c7:b1:45:b9:23:b5:23:
                    95:32:14:84:7e:23:55:f0:ac:d7:92:b6:1c:3e:51:
                    0b:ab:a1:fd:cf:61:b6:db:07:44:02:27:d1:c7:37:
                    ea:f4:20:99:fd:f8:f8:ff:db:63:89:ee:8c:7c:c3:
                    d5:b7:e3:c8:fd:c2:48:36:1b:cd:86:89:59:ce:94:
                    b3:f4:65:dc:c8:59:c2:ca:94:92:6e:81:12:4d:fe:
                    b5:66:53:6d:69:31:82:8b:e9:0a:39:8b:92:67:7a:
                    35:19:a3:07:06:32:22:37:2b:a7:8f:91:23:1a:a0:
                    38:9a:ff:95:05:fe:e8:81:6d:f3:9c:c6:a7:59:2f:
                    02:9b:51:17:c1:bc:bf:4c:9a:5b:5d:88:59:e9:cc:
                    c2:f1:94:b7:12:70:d0:5c:c8:ee:dd:88:de:6d:88:
                    ac:0a:fe:b7:93:fc:78:f1:24:8c:82:d7:30:12:6b:
                    e3:b9:d0:5d:25:3f:05:e1:30:f9:f9:45:ca:89:41:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:22:34:49:79:4B:4E:1B:AE:15:3E:02:6E:14:4F:A0:7F:8E:94:02
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:61:0a:80:0d:0b:39:e0:72:d3:cf:35:02:84:b4:95:59:cc:
         bb:66:98:8b:84:46:e7:90:e6:4a:36:5f:0b:67:f2:02:37:a5:
         37:8a:3e:91:d5:d7:cb:3b:c4:b7:8b:38:48:b3:8a:6d:9a:a3:
         24:d8:4d:52:37:d2:58:c0:cb:d3:04:cf:ff:b3:1d:94:b3:d2:
         15:33:2b:a0:07:6f:b0:1a:54:94:ed:20:57:88:37:c8:6a:77:
         ab:ce:ac:db:a4:4c:c2:09:56:fb:c7:65:97:8d:91:1a:74:fa:
         72:2d:e5:66:db:75:59:20:d9:8f:4d:b7:e3:e6:58:6c:07:9f:
         ac:e0:b5:fb:e4:52:7c:23:4e:18:03:b7:8a:d3:d0:1a:ef:06:
         7f:32:8d:95:54:34:86:bc:42:ea:3b:e3:74:d5:63:52:cb:7e:
         9d:d8:de:00:fa:5f:c7:3a:d5:71:ba:2d:b8:2e:f4:88:ea:bb:
         de:3e:5e:af:67:28:1b:e3:cd:99:69:84:4a:b4:b9:c5:9e:76:
         e3:f1:89:d6:73:58:71:a2:00:76:fb:80:4a:a6:53:35:a8:bf:
         4a:23:92:af:8e:0e:4b:74:06:76:50:4d:70:ac:4b:55:a3:43:
         26:af:15:78:2b:d0:4f:9e:02:a6:57:95:d5:ce:71:b3:d7:15:
         52:0e:40:36
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUC4MFR1A4lyfJkund5I94cYHeE/IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNTA0MDExNDAwMDBaFw0yNjAzMzExNDA1MDBaMDMxMTAvBgNV
BAMTKDY0MjIzNDQ5Nzk0QjRFMUJBRTE1M0UwMjZFMTQ0RkEwN0Y4RTk0MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCfod2V+J9gHTTnpkVwAvnQP2r
fPj9oE4i4BPE8LG+x2HdPVL4oI5mPPV/kqR/0TjRaFtpZWsDBsyzCtazzoG1kH6x
x7FFuSO1I5UyFIR+I1XwrNeSthw+UQurof3PYbbbB0QCJ9HHN+r0IJn9+Pj/22OJ
7ox8w9W348j9wkg2G82GiVnOlLP0ZdzIWcLKlJJugRJN/rVmU21pMYKL6Qo5i5Jn
ejUZowcGMiI3K6ePkSMaoDia/5UF/uiBbfOcxqdZLwKbURfBvL9MmltdiFnpzMLx
lLcScNBcyO7diN5tiKwK/reT/HjxJIyC1zASa+O50F0lPwXhMPn5RcqJQTALAgMB
AAGjggLEMIICwDAdBgNVHQ4EFgQUZCI0SXlLThuuFT4CbhRPoH+OlAIwHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzNzMyMmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqPNIMA0GCSqG
SIb3DQEBCwUAA4IBAQBWYQqADQs54HLTzzUChLSVWcy7ZpiLhEbnkOZKNl8LZ/IC
N6U3ij6R1dfLO8S3izhIs4ptmqMk2E1SN9JYwMvTBM//sx2Us9IVMyugB2+wGlSU
7SBXiDfIanerzqzbpEzCCVb7x2WXjZEadPpyLeVm23VZINmPTbfj5lhsB5+s4LX7
5FJ8I04YA7eK09Aa7wZ/Mo2VVDSGvELqO+N01WNSy36d2N4A+l/HOtVxui24LvSI
6rvePl6vZygb482ZaYRKtLnFnnbj8YnWc1hxogB2+4BKplM1qL9KI5Kvjg5LdAZ2
UE1wrEtVo0MmrxV4K9BPngKmV5XVznGz1xVSDkA2
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:42:11 2025 by rpki-client