Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
File:                     3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          2kYkkaJ9STSPWHXh4TI4pf2XIbEXU2u4+2AYEOD1YIE=
Subject key identifier:   B1:7C:13:03:20:95:D8:9C:86:0F:E7:77:C8:73:E9:0F:37:27:62:FC
Certificate issuer:       /CN=B3AC8703592539ADD492A1BDC08E997B67459567
Certificate serial:       0E5C06ACE0A4E20C7353A0C736E68A7209055F04
Authority key identifier: B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:25:11 +0000
ROA not before:           Tue 04 Feb 2025 18:20:11 +0000
ROA not after:            Tue 03 Feb 2026 18:25:11 +0000
asID:                     61466
IP address blocks:        168.205.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:55:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:06:ac:e0:a4:e2:0c:73:53:a0:c7:36:e6:8a:72:09:05:5f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3AC8703592539ADD492A1BDC08E997B67459567
        Validity
            Not Before: Feb  4 18:20:11 2025 GMT
            Not After : Feb  3 18:25:11 2026 GMT
        Subject: CN=B17C13032095D89C860FE777C873E90F372762FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:6b:6a:a8:ec:37:a6:70:65:20:d1:97:d9:
                    b7:db:2d:df:1b:4e:9d:c7:d7:f5:70:d9:2f:53:76:
                    c9:50:9e:62:0a:90:4d:bc:11:51:7f:cc:eb:e8:5b:
                    19:72:21:39:83:d0:fe:d8:b0:31:98:e2:28:d3:f3:
                    f5:c8:f6:68:3f:61:44:88:78:e4:15:b0:d2:cf:02:
                    da:c3:20:33:fd:a1:93:c5:f4:74:da:6a:e5:fc:c6:
                    7a:03:df:e2:ae:fe:98:74:11:a6:e1:bd:0c:33:23:
                    c6:10:6d:db:1f:f4:7b:53:e3:89:19:71:a1:cb:13:
                    f0:c2:74:0d:b7:28:84:1d:e3:2a:c0:74:5e:f9:db:
                    f1:4b:9a:40:ce:21:61:b4:ef:29:1a:62:88:34:44:
                    7a:b6:ff:5f:4e:0d:d6:af:49:48:27:5c:76:7b:d3:
                    49:70:25:36:84:fd:9f:08:ad:4c:57:07:fb:0a:36:
                    dc:fd:71:01:d7:ac:f3:55:ed:2f:a3:0c:aa:65:43:
                    5c:57:e0:98:d3:a9:70:b9:8b:36:7a:51:8f:28:ce:
                    4b:65:c5:71:4b:0e:35:aa:2c:a4:5a:fa:8e:db:01:
                    f7:e6:07:4e:60:f1:71:b7:2b:8f:34:8f:61:32:ca:
                    62:2d:a4:45:23:10:09:a4:aa:c5:06:29:a7:88:c1:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7C:13:03:20:95:D8:9C:86:0F:E7:77:C8:73:E9:0F:37:27:62:FC
            X509v3 Authority Key Identifier:
                keyid:B3:AC:87:03:59:25:39:AD:D4:92:A1:BD:C0:8E:99:7B:67:45:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/B3AC8703592539ADD492A1BDC08E997B67459567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3AC8703592539ADD492A1BDC08E997B67459567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/11559AA3349FE2D65A5A5769913573A99718D43DA2D0DFBB5C3C5FE9D0DEEE4D/0/3136382e3230352e3230342e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:15:08:1f:97:c4:65:53:aa:7d:70:4e:1d:94:28:f4:0e:7f:
         82:56:cc:bc:1c:08:17:78:94:9f:73:39:eb:c1:a9:26:e6:91:
         51:d2:d3:a6:56:47:03:57:b2:41:a0:86:05:39:66:c3:b4:dc:
         6a:49:7f:f5:34:de:e4:4d:13:d2:6b:e2:42:48:c2:b2:bf:fa:
         5b:a9:fd:9a:1a:30:a3:e5:80:0b:ca:4b:97:95:8d:e1:64:7c:
         8f:42:c5:57:fd:11:06:4e:73:44:97:c0:70:5e:b8:f6:7f:2f:
         bc:41:c5:d0:26:5b:67:03:21:58:36:aa:9b:bd:ca:44:52:1e:
         11:b9:bc:69:1a:e3:46:c3:db:96:f2:2b:96:be:7b:3c:55:f7:
         ee:67:46:68:08:03:bd:40:5f:d0:d4:35:6a:ca:48:f5:7d:c0:
         da:7f:96:89:c1:a2:65:13:d3:d3:80:eb:c7:0a:36:38:30:26:
         a7:7c:18:33:d8:a2:0a:b7:c2:bc:6b:8a:71:ad:53:4b:b4:a6:
         98:2d:4a:24:f2:65:a6:f7:15:1a:d3:67:c2:91:12:58:a1:e4:
         c5:aa:8a:ad:2a:63:57:bf:55:48:f1:c0:ab:9d:d2:25:87:9f:
         2b:9c:2b:de:5d:a2:bd:38:1f:84:72:14:e7:bf:76:39:57:e8:
         02:25:e1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:28 2025 by rpki-client