Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e203139333138.roa
File:                     3136382e3234332e37392e302f32342d3234203d3e203139333138.roa (raw, json)
Hash identifier:          QBSjWzt7YaisS/lWfxUdAWrDYwncnU+Xnv+x5kpWVj8=
Subject key identifier:   9E:1C:22:FF:86:36:6E:83:F1:C2:AB:B1:66:AB:5E:3F:76:E0:EA:74
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       466D0944FD4694ED7A179658281A5386B94B5F6C
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e203139333138.roa
Signing time:             Wed 28 May 2025 22:15:00 +0000
ROA not before:           Wed 28 May 2025 22:10:00 +0000
ROA not after:            Wed 27 May 2026 22:15:00 +0000
asID:                     19318
IP address blocks:        168.243.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 06 Jun 2025 08:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6d:09:44:fd:46:94:ed:7a:17:96:58:28:1a:53:86:b9:4b:5f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May 28 22:10:00 2025 GMT
            Not After : May 27 22:15:00 2026 GMT
        Subject: CN=9E1C22FF86366E83F1C2ABB166AB5E3F76E0EA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:78:b8:7a:89:ee:3d:b1:22:b5:36:36:0f:b4:
                    ee:b0:ab:e4:80:6c:31:ec:6a:20:3e:7d:1e:f8:fc:
                    49:68:b6:fe:3d:ca:6b:49:6d:e9:3a:3d:ce:1b:e8:
                    05:27:9c:1e:b9:68:35:16:fc:0b:b8:a4:6b:de:eb:
                    06:c1:b3:0d:78:f3:aa:b0:36:21:76:cc:e5:5a:b2:
                    ba:05:40:38:05:25:cb:f6:99:a3:d4:54:e4:a8:38:
                    bd:a8:e0:bd:c2:e7:f4:a2:b8:b8:03:04:71:5d:2f:
                    ba:6f:53:c6:28:82:94:2b:85:97:fd:54:57:fd:e6:
                    6e:de:ae:c7:1b:02:fe:ed:12:f4:a0:ae:40:c2:19:
                    74:b5:e4:60:cb:c6:fd:b0:5c:11:ee:0d:9c:09:aa:
                    8b:f5:5a:45:81:7e:26:52:93:e7:40:c9:a2:4b:e7:
                    e3:c8:ba:82:04:a2:b5:e0:59:31:9f:22:67:42:ef:
                    28:48:38:ef:8b:43:99:24:95:cc:2a:be:76:2e:11:
                    c0:fd:aa:c8:8c:01:91:02:67:04:a7:c3:5c:64:17:
                    20:a3:3b:4e:65:37:b1:6c:0c:4f:87:2f:ad:ed:ce:
                    9e:f0:6c:7f:1c:26:ac:f6:0d:51:c2:67:56:3a:d8:
                    42:b0:aa:4e:b9:16:aa:32:8c:8e:97:ce:52:d2:7e:
                    9a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1C:22:FF:86:36:6E:83:F1:C2:AB:B1:66:AB:5E:3F:76:E0:EA:74
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37392e302f32342d3234203d3e203139333138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:10:6c:77:77:c9:94:22:d2:93:76:49:47:f9:20:de:a9:2c:
         4d:e4:a8:4d:82:ef:85:f1:20:78:88:08:c1:01:b3:77:94:49:
         b8:c0:bc:7e:02:92:3b:c8:fe:3a:87:c6:bd:64:b1:0c:5c:de:
         ad:6a:fe:8d:08:7a:12:10:7d:69:d4:ad:8e:4b:28:a9:c2:59:
         c6:e2:0e:0e:a2:e5:32:a5:3f:67:0e:83:44:7b:75:fc:ca:b1:
         c3:ac:96:ed:bf:64:db:ac:3c:5d:48:87:07:d9:41:3d:69:c0:
         26:1f:b4:0e:37:72:48:f6:01:8a:50:7e:ab:80:de:ce:4e:16:
         51:05:d9:13:64:ff:bc:00:ca:d2:42:00:ba:41:98:e7:77:ab:
         29:6e:95:47:b6:72:c7:20:ce:a0:69:d6:69:1f:e4:80:3e:65:
         cd:1b:c6:7d:c0:69:41:96:55:76:39:46:00:92:b1:7b:e2:85:
         6e:c3:a3:8a:a1:8d:d0:23:31:53:5b:a7:52:a5:f0:f1:34:db:
         26:bf:7d:fe:30:92:5a:61:cf:f9:09:79:bd:4e:1e:52:65:b5:
         b7:1d:63:09:43:09:1c:b7:07:65:8b:11:00:db:f1:37:fd:c7:
         da:b3:08:16:25:e1:a9:b2:6d:62:0e:ab:59:33:22:5c:e5:eb:
         81:66:ef:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 17:28:30 2025 by rpki-client