Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
File:                     3136312e302e36382e302f32322d3232203d3e20323633383231.roa (raw, json)
Hash identifier:          pnsQlZtbVQ5vTIOsbtedW9UOQ60Tp598xLFGDtpfeUA=
Subject key identifier:   63:1E:A3:B6:A8:68:DA:A9:1A:12:1F:A0:43:CC:1A:82:47:3A:EE:8F
Certificate issuer:       /CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
Certificate serial:       2A3883E00E51A7884A4571974BEDABEAEF2B5573
Authority key identifier: 13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa
Signing time:             Tue 04 Feb 2025 18:39:18 +0000
ROA not before:           Tue 04 Feb 2025 18:34:18 +0000
ROA not after:            Tue 03 Feb 2026 18:39:18 +0000
asID:                     263821
IP address blocks:        161.0.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:38:83:e0:0e:51:a7:88:4a:45:71:97:4b:ed:ab:ea:ef:2b:55:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1380DEC0B000D42676D5F294D4D2B72145D58ECB
        Validity
            Not Before: Feb  4 18:34:18 2025 GMT
            Not After : Feb  3 18:39:18 2026 GMT
        Subject: CN=631EA3B6A868DAA91A121FA043CC1A82473AEE8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:26:af:c6:dd:55:34:54:40:58:44:22:75:5c:
                    70:62:8a:e7:a1:d1:98:49:f7:c6:99:42:e1:68:1f:
                    ca:c1:f3:a5:95:e5:90:c2:e0:cd:98:67:09:b1:bb:
                    2d:a2:31:34:06:be:cc:3a:76:3e:d6:81:c8:f1:e8:
                    e6:2d:13:7a:e8:ca:ff:c5:72:17:36:3c:f4:1a:e3:
                    94:b5:b0:ad:95:3b:30:23:1d:ee:9f:3b:98:0c:4d:
                    5b:46:26:e1:96:12:8f:e0:6e:a0:b4:ed:69:a2:36:
                    da:b7:fd:fd:c7:da:1f:2c:bf:f0:44:9a:78:ab:86:
                    08:f6:8e:63:2e:d8:46:fd:3d:6c:d3:ed:23:6a:ba:
                    ce:e3:32:fe:e5:e8:14:7c:ac:1d:33:ed:5e:13:7d:
                    37:9b:9f:ea:6d:c8:f0:32:38:a5:cb:ac:b7:8f:e0:
                    67:9a:fb:8a:cb:9f:08:30:fb:90:17:45:c8:57:2f:
                    f9:82:9b:6b:3d:84:f3:f9:70:04:04:50:a3:dc:fb:
                    db:5d:8b:99:e3:7c:db:16:92:b5:bf:42:07:b1:63:
                    93:89:f0:0c:ab:03:3f:43:a5:84:7a:5b:f4:31:b9:
                    81:08:f4:b1:4e:c9:d9:58:40:b8:72:29:73:d2:28:
                    f1:eb:18:8b:89:01:00:47:90:58:94:a1:84:e3:11:
                    d7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1E:A3:B6:A8:68:DA:A9:1A:12:1F:A0:43:CC:1A:82:47:3A:EE:8F
            X509v3 Authority Key Identifier:
                keyid:13:80:DE:C0:B0:00:D4:26:76:D5:F2:94:D4:D2:B7:21:45:D5:8E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1380DEC0B000D42676D5F294D4D2B72145D58ECB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/296113B5D6C9650C8D5F64AD170EFB8A5245FB52253DF90ECAE5B9122C8AAC3A/0/3136312e302e36382e302f32322d3232203d3e20323633383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:3b:95:fb:0c:b0:55:12:3a:36:fc:d4:f1:11:f4:5f:e1:a4:
         b7:6f:1c:b3:82:70:93:0d:69:06:dd:76:4a:0b:be:57:00:5f:
         fe:3d:10:50:9c:47:d2:8c:f3:45:7d:73:32:01:ce:7d:99:06:
         9b:a7:8a:b9:bb:7d:8b:e7:be:ff:3d:52:ca:00:d2:01:49:b6:
         ef:9d:c1:2b:f1:b9:17:96:11:8d:e4:c9:d8:65:96:71:24:32:
         46:a0:16:dc:c7:05:e6:92:98:5b:85:80:a1:78:7b:07:c4:3e:
         04:c8:f9:26:b2:55:86:58:33:59:b6:31:b5:01:a5:42:2e:1f:
         e6:54:79:d3:1d:30:ae:ec:65:d7:b6:be:09:57:70:f9:cc:6b:
         a9:3a:e7:40:3e:76:f0:3c:96:36:3f:a3:af:14:f3:f4:35:cb:
         c6:49:88:aa:f9:54:f4:ae:cb:10:f2:dc:0a:aa:6a:42:6c:8e:
         f2:93:ab:31:6a:e2:f7:2a:cb:b0:51:c3:58:02:e8:67:b3:26:
         a6:fa:aa:1f:d6:87:eb:fd:5c:b2:15:62:54:81:ba:5e:41:10:
         b3:8c:c8:4d:e3:4f:94:6a:d6:9d:7f:9b:83:8e:40:ea:ed:2f:
         7b:9d:42:db:8a:16:cf:3d:a4:5f:d0:92:29:50:04:2d:4b:94:
         0b:92:0d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:55:24 2025 by rpki-client