Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
File:                     3136382e3139352e37362e302f32322d3232203d3e203532343439.roa (raw, json)
Hash identifier:          zdL32Ps9USKGW78GJ5il+geILSyPaF6s19BszvBf/Qk=
Subject key identifier:   66:73:2F:F0:27:D4:E1:C7:53:62:5A:BB:EF:50:98:A6:36:51:C5:BC
Certificate issuer:       /CN=A6092CA6DF0448374137DE890AB584D961C1028E
Certificate serial:       07F55DAE79B8F966D22F0054D623EB3052C8A76D
Authority key identifier: A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa
Signing time:             Tue 04 Feb 2025 18:34:03 +0000
ROA not before:           Tue 04 Feb 2025 18:29:03 +0000
ROA not after:            Tue 03 Feb 2026 18:34:03 +0000
asID:                     52449
IP address blocks:        168.195.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f5:5d:ae:79:b8:f9:66:d2:2f:00:54:d6:23:eb:30:52:c8:a7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6092CA6DF0448374137DE890AB584D961C1028E
        Validity
            Not Before: Feb  4 18:29:03 2025 GMT
            Not After : Feb  3 18:34:03 2026 GMT
        Subject: CN=66732FF027D4E1C753625ABBEF5098A63651C5BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a8:e0:c1:e2:69:30:46:2a:9e:47:7d:d6:fa:
                    c7:ef:74:9d:3a:e4:60:1c:64:2f:70:4c:d9:96:1d:
                    e2:8d:a7:1e:94:88:c2:20:e6:e0:12:45:77:30:0a:
                    d8:ed:cd:5d:d4:e5:13:fc:46:d3:a7:06:fa:4e:7b:
                    f4:01:12:45:6a:1c:98:52:3b:68:1a:2b:86:fc:fd:
                    17:6a:b8:e2:a4:24:ae:52:10:9a:22:c1:1d:a7:0d:
                    9d:5c:bf:70:53:11:60:d5:bb:e3:8f:f8:9b:46:88:
                    fe:3c:3b:2f:58:d3:1b:36:4a:28:41:91:d9:fa:14:
                    a9:bf:ca:1b:63:65:36:2e:de:ea:dd:fd:2e:dd:2f:
                    e9:0d:21:f5:db:23:6c:3e:ef:fb:63:44:3d:78:d2:
                    a8:9e:5c:a3:78:6f:eb:5b:d8:52:3a:f3:ba:ce:ce:
                    59:43:8d:22:d9:e9:97:42:7c:82:0f:f7:14:9d:49:
                    88:26:57:95:9c:0b:9e:64:69:f8:77:0a:a6:0e:e7:
                    3c:d6:47:b8:b7:c6:c0:f8:c2:17:11:c5:5a:38:c7:
                    23:d1:bd:41:b2:17:94:60:3c:e5:28:1f:a5:ca:06:
                    b4:97:95:bf:6d:91:a0:a4:c5:b6:7d:6f:66:87:8e:
                    72:28:a0:32:3e:26:3a:ce:7f:8d:5f:93:38:75:c1:
                    4d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:73:2F:F0:27:D4:E1:C7:53:62:5A:BB:EF:50:98:A6:36:51:C5:BC
            X509v3 Authority Key Identifier:
                keyid:A6:09:2C:A6:DF:04:48:37:41:37:DE:89:0A:B5:84:D9:61:C1:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/A6092CA6DF0448374137DE890AB584D961C1028E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6092CA6DF0448374137DE890AB584D961C1028E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1125F809A6DEDDE6D10AB06AFA3D36E79A73795912C90F47FCE7817A54CA41C9/0/3136382e3139352e37362e302f32322d3232203d3e203532343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:3a:4f:9c:33:49:dd:f4:ed:bb:e2:25:ea:ea:01:dd:11:ee:
         f5:1f:1e:df:6e:ae:f8:f1:0a:ba:ff:70:35:9f:4f:c0:ba:f6:
         94:62:be:09:6f:68:af:b5:a1:f7:d0:8d:37:f8:39:ec:64:33:
         86:b1:5e:0c:06:e1:4c:e7:73:14:30:8a:88:97:2d:f8:d4:48:
         83:18:ba:28:81:5f:b4:df:bb:1e:da:7b:a1:25:60:60:7a:28:
         f4:fd:a6:6b:51:2c:94:27:81:c4:db:62:c1:8e:d9:84:a1:c2:
         b6:0d:c1:e7:13:a0:0b:6b:b3:34:4a:2d:92:0c:ad:5b:c2:b2:
         c7:d9:ba:27:c5:97:f3:9c:b1:17:4b:6f:47:fb:e6:8f:26:87:
         69:c2:18:e3:8c:65:32:4c:95:c3:93:e3:ae:b5:fa:87:4c:c7:
         1f:5a:7b:df:68:5e:d2:da:a2:8c:78:7e:0d:25:10:45:b8:be:
         d4:25:d3:58:8b:8b:58:67:fa:fe:15:d6:9c:07:bf:ab:17:0f:
         be:2c:4a:5d:56:2c:64:2c:21:84:ce:f9:fa:5a:4d:c4:13:f5:
         af:86:1c:55:a1:45:f2:db:88:2b:d9:67:f1:ce:c2:33:2a:54:
         07:63:8e:88:60:5e:9a:d3:12:57:78:45:ee:93:3e:1e:e8:e1:
         b2:2b:b9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 17:42:59 2025 by rpki-client