Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
File:                     3136382e3139362e312e302f32342d3234203d3e20323634373537.roa (raw, json)
Hash identifier:          zqLP81LcocVYSevgzB6oj17rxkzJdaIcCmuCMzsBJnE=
Subject key identifier:   AB:1C:89:7E:2F:3B:1C:41:EF:FA:1B:70:23:25:49:85:63:2D:92:2B
Certificate issuer:       /CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
Certificate serial:       1BC4ED5B1CCBDB9226B175793714F8434F9DA2CA
Authority key identifier: F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa
Signing time:             Tue 04 Feb 2025 18:03:19 +0000
ROA not before:           Tue 04 Feb 2025 17:58:19 +0000
ROA not after:            Tue 03 Feb 2026 18:03:19 +0000
asID:                     264757
IP address blocks:        168.196.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 21:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c4:ed:5b:1c:cb:db:92:26:b1:75:79:37:14:f8:43:4f:9d:a2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F046ED03680781D6F15121AA89FAA7447A3DAFC2
        Validity
            Not Before: Feb  4 17:58:19 2025 GMT
            Not After : Feb  3 18:03:19 2026 GMT
        Subject: CN=AB1C897E2F3B1C41EFFA1B7023254985632D922B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b0:b1:29:04:b8:b3:97:92:ae:3c:de:0d:31:
                    c1:af:a6:86:e0:45:3b:a9:6b:e1:bd:dc:da:db:24:
                    52:3f:73:b9:39:8d:08:88:a7:51:53:0a:8c:bd:ae:
                    fd:a0:46:62:66:da:b0:69:f5:b1:8c:ce:43:da:f7:
                    a8:d0:f9:eb:77:c4:f4:22:73:a8:49:4a:8f:62:0d:
                    1c:05:b3:08:1e:40:de:98:c2:3c:42:28:81:1c:b9:
                    b0:73:ae:4d:44:76:35:ed:c9:4d:84:32:4d:90:5a:
                    8f:89:97:b6:1a:61:8a:7b:7d:2d:55:56:f0:2b:f1:
                    97:48:4c:8d:52:db:3d:45:ac:e7:3f:e7:02:f6:0a:
                    fc:38:7e:38:01:87:24:29:a7:47:c5:be:7b:e0:fe:
                    80:4d:56:5a:f8:3b:c2:b6:89:9c:b1:5d:87:27:bf:
                    78:11:a6:38:72:41:64:b3:31:df:7d:b0:c6:44:17:
                    f4:61:8b:a9:ba:c7:38:5b:82:06:1a:e3:68:d7:24:
                    64:70:b5:c4:56:89:9d:3e:90:7e:1e:ca:96:6b:eb:
                    cc:20:ad:d4:0e:cc:3c:d4:e8:60:24:bc:f6:8a:36:
                    46:fb:3c:b7:74:8c:ef:29:03:02:99:2a:ff:2e:a5:
                    c2:ac:33:39:92:ab:74:f5:e3:16:22:b2:bd:31:9d:
                    f0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:89:7E:2F:3B:1C:41:EF:FA:1B:70:23:25:49:85:63:2D:92:2B
            X509v3 Authority Key Identifier:
                keyid:F0:46:ED:03:68:07:81:D6:F1:51:21:AA:89:FA:A7:44:7A:3D:AF:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F046ED03680781D6F15121AA89FAA7447A3DAFC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2BAA342F00138D29D0734B7CDD7D530263D272BD9A69D9FEBA14A08089BD4406/0/3136382e3139362e312e302f32342d3234203d3e20323634373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:48:7d:a5:7a:8d:f2:c7:c3:f7:1f:d8:1d:02:a2:b0:7a:c7:
         be:35:32:57:ba:7b:cc:17:12:aa:c7:c5:43:f3:b0:4f:95:e2:
         08:1b:ee:db:d4:3e:9d:b7:fc:3d:f7:d2:34:4d:70:0d:49:49:
         37:93:f7:14:84:79:b3:06:4b:17:0e:30:62:f5:4d:46:9d:7b:
         ad:81:e2:bc:cc:88:8d:dd:3c:41:2b:42:f4:74:57:38:4e:08:
         18:64:7e:ad:06:f4:ee:61:2f:da:00:59:fa:92:ea:45:92:df:
         17:44:2c:17:b9:b7:11:c4:94:fe:2b:05:00:72:fa:80:52:9c:
         8d:bb:b8:82:2e:e2:a5:a9:ad:66:35:3a:7f:89:ee:a0:37:dd:
         3d:6e:2e:1f:ba:1d:8c:fd:13:60:71:80:69:87:66:3c:7d:0c:
         9f:9f:5c:e1:4c:d9:72:f7:6e:4a:23:7b:c7:14:9c:9b:3a:24:
         ea:28:45:a3:44:2f:85:76:10:18:bb:72:0e:4b:33:fb:f3:e8:
         07:11:28:e8:7f:e1:a3:b9:51:8f:84:47:d9:f0:ad:15:7b:98:
         2e:57:90:4a:58:7b:b6:51:47:c4:8b:c2:8e:fb:a6:b7:c1:0f:
         1c:21:78:5f:bf:ef:4c:7a:54:41:0c:9e:e9:f2:4d:cb:e8:6a:
         78:60:4b:b6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG8TtWxzL25ImsXV5NxT4Q0+dosowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA0NkVEMDM2ODA3ODFENkYxNTEyMUFBODlGQUE3NDQ3
QTNEQUZDMjAeFw0yNTAyMDQxNzU4MTlaFw0yNjAyMDMxODAzMTlaMDMxMTAvBgNV
BAMTKEFCMUM4OTdFMkYzQjFDNDFFRkZBMUI3MDIzMjU0OTg1NjMyRDkyMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMsLEpBLizl5KuPN4NMcGvpobg
RTupa+G93NrbJFI/c7k5jQiIp1FTCoy9rv2gRmJm2rBp9bGMzkPa96jQ+et3xPQi
c6hJSo9iDRwFswgeQN6YwjxCKIEcubBzrk1EdjXtyU2EMk2QWo+Jl7YaYYp7fS1V
VvAr8ZdITI1S2z1FrOc/5wL2Cvw4fjgBhyQpp0fFvnvg/oBNVlr4O8K2iZyxXYcn
v3gRpjhyQWSzMd99sMZEF/Rhi6m6xzhbggYa42jXJGRwtcRWiZ0+kH4eypZr68wg
rdQOzDzU6GAkvPaKNkb7PLd0jO8pAwKZKv8upcKsMzmSq3T14xYisr0xnfAHAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUqxyJfi87HEHv+htwIyVJhWMtkiswHwYDVR0j
BBgwFoAU8EbtA2gHgdbxUSGqifqnRHo9r8IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yQkFBMzQyRjAwMTM4RDI5RDA3MzRCN0NERDdENTMwMjYz
RDI3MkJEOUE2OUQ5RkVCQTE0QTA4MDg5QkQ0NDA2LzAvRjA0NkVEMDM2ODA3ODFE
NkYxNTEyMUFBODlGQUE3NDQ3QTNEQUZDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMDQ2RUQwMzY4MDc4MUQ2RjE1
MTIxQUE4OUZBQTc0NDdBM0RBRkMyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkJBQTM0MkYwMDEzOEQyOUQwNzM0QjdDREQ3RDUzMDI2M0QyNzJCRDlB
NjlEOUZFQkExNEEwODA4OUJENDQwNi8wLzMxMzYzODJlMzEzOTM2MmUzMTJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzUzNy5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKjEATAN
BgkqhkiG9w0BAQsFAAOCAQEAT0h9pXqN8sfD9x/YHQKisHrHvjUyV7p7zBcSqsfF
Q/OwT5XiCBvu29Q+nbf8PffSNE1wDUlJN5P3FIR5swZLFw4wYvVNRp17rYHivMyI
jd08QStC9HRXOE4IGGR+rQb07mEv2gBZ+pLqRZLfF0QsF7m3EcSU/isFAHL6gFKc
jbu4gi7ipamtZjU6f4nuoDfdPW4uH7odjP0TYHGAaYdmPH0Mn59c4UzZcvduSiN7
xxScmzok6ihFo0QvhXYQGLtyDksz+/PoBxEo6H/ho7lRj4RH2fCtFXuYLleQSlh7
tlFHxIvCjvumt8EPHCF4X7/vTHpUQQye6fJNy+hqeGBLtg==
-----END CERTIFICATE-----
Generated at Tue Apr 22 20:10:06 2025 by rpki-client