Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137312e302f32342d3234203d3e20323639383632.roa
File:                     3136382e3139342e3137312e302f32342d3234203d3e20323639383632.roa (raw, json)
Hash identifier:          EbF2ob9FOUcKstgPZENialImYAj1DHia4FH3q6nwxx0=
Subject key identifier:   49:E7:3E:16:AE:25:A4:F7:66:75:AE:21:95:CB:F8:27:A7:CD:AC:73
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       5AD94D531F9AB04296A1B56266C237745D12C5E5
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137312e302f32342d3234203d3e20323639383632.roa
Signing time:             Tue 04 Feb 2025 18:48:13 +0000
ROA not before:           Tue 04 Feb 2025 18:43:13 +0000
ROA not after:            Tue 03 Feb 2026 18:48:13 +0000
asID:                     269862
IP address blocks:        168.194.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:d9:4d:53:1f:9a:b0:42:96:a1:b5:62:66:c2:37:74:5d:12:c5:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Feb  4 18:43:13 2025 GMT
            Not After : Feb  3 18:48:13 2026 GMT
        Subject: CN=49E73E16AE25A4F76675AE2195CBF827A7CDAC73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4c:a6:8d:39:e2:a5:1c:e9:63:f7:36:e5:2e:
                    5f:5c:bc:70:93:4f:a9:87:e6:31:a7:ce:60:d9:4e:
                    80:ca:dd:2d:70:05:0a:d7:9d:db:1c:92:10:84:09:
                    5f:ce:59:1b:61:f8:49:0f:17:d5:18:01:04:bf:2f:
                    51:ba:84:82:29:ec:3c:aa:be:be:92:75:32:cd:e7:
                    3d:c1:d4:6f:19:50:de:bc:8f:17:35:63:8f:3c:4c:
                    d3:c6:f6:ab:fe:54:dc:1c:0c:64:88:80:1d:d9:71:
                    bf:35:6e:c0:1b:c2:68:e7:46:68:9b:fb:55:8d:72:
                    5a:98:82:e2:26:a1:93:0c:7e:ee:15:be:df:9a:7f:
                    7a:9d:38:8a:49:30:1d:5f:ea:bf:c9:ce:e1:c8:45:
                    64:3f:df:ab:72:52:ea:c6:96:94:39:62:d2:89:6f:
                    ec:d6:71:75:56:7a:fe:c9:9d:00:b4:98:99:86:76:
                    19:70:1d:03:c5:8d:d8:2e:87:a1:16:da:39:be:7d:
                    cf:f9:52:45:b6:db:81:63:1f:48:f0:ef:9f:d7:5c:
                    e0:65:b8:2d:e9:09:0a:e7:a0:fd:08:5e:f0:25:fa:
                    42:ed:a2:6b:2b:e3:b5:78:33:05:e5:b1:0c:8b:d7:
                    20:64:df:82:07:2d:fc:3e:18:16:b1:39:ce:1a:b4:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E7:3E:16:AE:25:A4:F7:66:75:AE:21:95:CB:F8:27:A7:CD:AC:73
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e3139342e3137312e302f32342d3234203d3e20323639383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:9f:d2:67:00:ae:55:7e:7e:de:c3:2b:64:60:cd:13:b5:
         c7:4a:8a:5d:fc:94:fb:68:3a:e1:b3:b2:c0:9d:a6:76:2f:96:
         90:80:14:a9:da:60:46:90:3a:90:23:42:17:d3:32:96:98:46:
         da:b0:40:42:3a:5e:f1:68:ac:e8:75:6a:0d:92:8f:10:cf:5e:
         2b:10:07:cc:f2:11:8e:11:6a:a0:dc:9e:7f:54:97:a6:a6:09:
         c8:6c:25:37:b7:4e:b5:7d:da:ad:bb:83:17:8d:31:c5:09:61:
         82:47:9a:32:aa:6f:02:d8:ec:5b:3c:05:24:7b:45:40:39:3d:
         00:01:4d:af:12:9a:66:ce:ff:61:cc:de:a0:e5:1b:89:d0:87:
         b3:4c:6e:15:b0:01:d7:74:b2:c9:89:d1:1b:d6:26:d9:dd:93:
         7b:0b:5c:4c:21:3e:01:30:4c:21:52:63:43:51:aa:33:72:17:
         91:a6:51:fd:10:59:21:06:b5:26:09:2e:66:c0:91:f1:a8:8a:
         a5:e5:f6:e8:30:45:0e:35:f0:c9:d1:10:3b:6e:47:f0:cf:ab:
         cd:a4:2f:85:8b:46:9d:02:9a:f2:78:e6:0c:d4:5a:cf:91:dc:
         b1:64:a4:a1:88:81:60:f0:a1:ff:78:e1:ad:84:f0:e6:b2:e5:
         ac:5d:4c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:52:53 2025 by rpki-client