Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa
File:                     3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa (raw, json)
Hash identifier:          qh20qy6Ymdl5qlEhD3KReiSomRmiX+A5r7eOSAVfocY=
Subject key identifier:   90:D4:0F:B8:7B:BA:BD:37:4B:05:96:F3:AF:63:97:93:E0:15:6A:8A
Certificate issuer:       /CN=BFA364CC05C34700B6C32AC37512D94D292D301C
Certificate serial:       0F76CCC68062C069B347C2D8AD4AFAD5162E9F58
Authority key identifier: BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa
Signing time:             Tue 04 Feb 2025 18:30:47 +0000
ROA not before:           Tue 04 Feb 2025 18:25:47 +0000
ROA not after:            Tue 03 Feb 2026 18:30:47 +0000
asID:                     264678
IP address blocks:        168.205.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:76:cc:c6:80:62:c0:69:b3:47:c2:d8:ad:4a:fa:d5:16:2e:9f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BFA364CC05C34700B6C32AC37512D94D292D301C
        Validity
            Not Before: Feb  4 18:25:47 2025 GMT
            Not After : Feb  3 18:30:47 2026 GMT
        Subject: CN=90D40FB87BBABD374B0596F3AF639793E0156A8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:22:a7:0f:9f:b7:18:e6:1e:34:8a:c3:05:38:
                    37:1e:e7:a3:c3:43:98:43:b0:98:b5:39:50:b2:cb:
                    90:9d:5e:05:6e:54:a7:5c:fe:3b:fa:85:8b:a2:e6:
                    89:9e:64:6a:ad:93:53:22:40:cb:9b:8e:cd:cf:2d:
                    ab:0f:ce:4f:05:09:01:d5:a8:b6:e0:56:e4:bd:68:
                    00:dd:85:eb:53:ee:c1:27:1e:ab:85:37:47:ac:5c:
                    a3:c0:01:01:8c:38:c9:fa:49:59:ce:96:47:b8:f7:
                    6d:60:a9:2b:6a:65:b6:2a:0e:17:27:c4:3c:6f:59:
                    d1:e6:cf:02:92:70:22:3b:7b:a0:94:2c:37:d2:a5:
                    d8:6d:c4:fd:15:8b:74:a6:fd:8c:29:81:c9:2d:de:
                    04:57:60:7a:8b:70:7f:26:f0:3e:69:45:ee:2e:4c:
                    45:3c:9e:99:fd:5e:2d:36:6a:b5:8d:bb:cf:97:16:
                    2f:d7:1f:ed:a2:60:46:e6:5e:02:a7:af:a8:0c:03:
                    81:7a:0d:d8:37:8e:9c:fb:1a:d6:de:d3:17:09:4e:
                    80:aa:19:6d:9d:9f:38:65:6d:93:09:66:40:a1:f1:
                    e2:d0:03:97:e6:fc:2c:1a:06:28:fc:60:e9:55:10:
                    f5:b6:d0:ad:f8:82:89:55:37:20:94:e5:7c:bf:31:
                    ac:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D4:0F:B8:7B:BA:BD:37:4B:05:96:F3:AF:63:97:93:E0:15:6A:8A
            X509v3 Authority Key Identifier:
                keyid:BF:A3:64:CC:05:C3:47:00:B6:C3:2A:C3:75:12:D9:4D:29:2D:30:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/BFA364CC05C34700B6C32AC37512D94D292D301C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BFA364CC05C34700B6C32AC37512D94D292D301C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241FCFFF3322615F5F2C9BB26AA987FACE683E0868A07CCA762DE7A6BABED950/0/3136382e3230352e3131362e302f32322d3234203d3e20323634363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.205.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:ce:9e:e6:dc:25:96:8e:c1:03:5e:f2:3c:a8:d1:8c:5d:
         25:12:ec:ad:34:93:ff:24:95:b3:d1:b1:ed:91:08:db:d3:1a:
         a1:b2:31:08:22:04:23:3e:fd:54:9d:74:fc:9c:93:4d:97:2a:
         b7:06:4d:58:8c:34:7f:f3:61:eb:0f:62:db:0b:eb:3c:5d:85:
         dc:d5:d7:67:3e:e1:b6:14:b8:39:71:b4:93:b0:70:e7:a6:df:
         21:98:84:cd:12:c7:15:be:4c:98:dd:fb:fc:63:a5:26:6a:36:
         8f:ff:89:93:cb:07:75:77:13:5c:34:71:94:d7:ce:88:94:9f:
         b1:c3:1e:15:72:e8:80:ed:f3:bb:7a:26:95:b9:ab:33:be:8f:
         de:24:b2:5d:9b:2a:d3:3c:a9:4c:23:e1:e7:ed:df:21:bb:31:
         18:bb:0f:4a:f9:32:98:43:c7:90:7a:5d:39:52:64:36:3c:4e:
         c9:6c:8e:71:19:99:21:8f:d7:d1:d1:89:f1:88:c6:ff:29:ef:
         e6:20:02:32:b7:a8:f4:97:33:a2:d0:74:ae:64:2f:c3:1b:f1:
         cf:ee:36:53:21:41:04:f9:eb:d5:47:d6:b2:4a:a8:cb:c4:e4:
         67:05:d7:80:7b:a6:39:fb:ae:2c:7e:d6:02:0c:51:45:8c:3c:
         7b:c9:a4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:34:03 2025 by rpki-client