Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa
File:                     3136382e39302e3135362e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          Bgjgylh1A3bHv03EE90b05htdNMzmeyYDenTF6A4AKM=
Subject key identifier:   1C:12:8D:10:15:7D:69:39:FA:13:99:6D:00:68:4D:27:60:5A:69:B0
Certificate issuer:       /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial:       4D878CD2F6E00ECFF1A26DF2FA23F76A8DD420A8
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 04 Feb 2025 18:48:12 +0000
ROA not before:           Tue 04 Feb 2025 18:43:12 +0000
ROA not after:            Tue 03 Feb 2026 18:48:12 +0000
asID:                     52439
IP address blocks:        168.90.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:87:8c:d2:f6:e0:0e:cf:f1:a2:6d:f2:fa:23:f7:6a:8d:d4:20:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
        Validity
            Not Before: Feb  4 18:43:12 2025 GMT
            Not After : Feb  3 18:48:12 2026 GMT
        Subject: CN=1C128D10157D6939FA13996D00684D27605A69B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:3f:31:66:ec:36:f8:e7:cf:b6:b7:51:94:29:
                    6d:a9:03:cb:4a:97:7a:56:cb:ed:99:95:f9:70:4c:
                    b3:a1:56:4d:8c:d3:3e:21:ea:b0:72:fe:0d:9a:9c:
                    cb:5b:b0:f6:1b:5a:c6:bd:03:8e:83:33:43:74:a9:
                    cf:55:3f:f7:3b:b9:15:4a:23:64:d2:fa:9e:b1:96:
                    7a:7a:9c:41:c1:ee:ae:f9:ff:d1:21:2c:1d:52:25:
                    be:99:0c:06:b0:5b:c9:55:16:b4:cc:71:95:ea:c0:
                    00:41:cd:81:b6:e7:c4:1c:0b:01:ce:35:2c:04:24:
                    9c:cb:90:19:b0:a5:f4:d6:d4:04:ae:82:e5:36:e6:
                    ce:ee:f4:de:70:eb:b6:e5:43:53:e9:26:65:00:40:
                    06:00:f7:25:93:20:78:b9:6a:ac:2d:d4:95:ca:de:
                    cf:8c:59:84:16:26:75:fe:55:0e:36:80:4e:78:77:
                    17:f3:93:cb:85:0e:56:68:40:a9:ae:a5:b0:42:ad:
                    22:6d:56:2c:bd:d9:19:a0:63:d1:6c:d5:6b:4e:92:
                    c2:3e:cb:e9:0b:44:3c:0e:cb:31:eb:3f:a7:72:d1:
                    97:4d:ff:d0:11:ed:41:10:1d:a9:0f:e6:82:fe:07:
                    8c:3e:b9:fc:03:92:fe:71:52:a4:ea:f8:38:d9:69:
                    6e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:12:8D:10:15:7D:69:39:FA:13:99:6D:00:68:4D:27:60:5A:69:B0
            X509v3 Authority Key Identifier:
                keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3136382e39302e3135362e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8a:e6:27:1c:58:6f:e4:5e:28:6e:07:00:c2:21:66:af:1e:
         e9:10:8d:4c:f7:e2:fb:b2:e8:59:df:fd:85:d3:29:13:a4:9b:
         8f:73:1c:10:70:31:7d:cf:b9:aa:7e:9f:06:6f:31:29:39:7e:
         38:82:51:53:e0:73:fb:e9:f7:95:1c:42:4c:4a:aa:71:8b:a9:
         da:e8:8d:d0:95:67:92:14:11:b6:21:f4:fd:4e:c0:32:20:f4:
         a9:92:53:4e:ee:33:8d:41:99:0f:f5:ca:24:10:4d:a5:db:c9:
         2f:3b:fe:30:83:fb:fd:0b:ec:81:6f:fe:b6:7f:d5:04:50:d3:
         3c:2a:b6:dc:d6:14:cd:32:d0:a2:2b:65:f9:31:41:f3:5d:cc:
         e2:f1:d3:df:06:b1:06:b3:22:eb:91:65:18:13:d1:0b:7e:32:
         9c:0c:9f:16:20:a0:f2:88:d5:68:ea:33:e6:29:18:c5:25:28:
         78:6d:bb:84:d7:63:8a:7a:41:e8:c9:ed:9c:73:a7:ce:c2:af:
         cc:be:2b:cf:5a:a9:36:ab:16:a2:b5:aa:28:bb:a0:a9:58:e7:
         ac:49:74:14:ca:7c:9f:35:83:b3:40:8c:39:fa:62:83:fe:03:
         43:d6:fa:6c:ec:ce:b4:b9:c0:f1:7e:d1:06:6e:aa:7a:d1:83:
         ed:00:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:24:12 2025 by rpki-client