Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa
File:                     3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa (raw, json)
Hash identifier:          vyW9Et2UTg1FbOJKifIYN846XJrNB6y7yuWTTXzX8FU=
Subject key identifier:   C6:54:DD:0E:40:F1:67:77:EB:83:5D:75:5A:71:6F:E2:C1:7B:29:C5
Certificate issuer:       /CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
Certificate serial:       22E4CB0FDE5923FF7D63DA7D46305FBEA7E3177F
Authority key identifier: D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa
Signing time:             Tue 04 Feb 2025 18:34:42 +0000
ROA not before:           Tue 04 Feb 2025 18:29:42 +0000
ROA not after:            Tue 03 Feb 2026 18:34:42 +0000
asID:                     264765
IP address blocks:        168.196.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e4:cb:0f:de:59:23:ff:7d:63:da:7d:46:30:5f:be:a7:e3:17:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A
        Validity
            Not Before: Feb  4 18:29:42 2025 GMT
            Not After : Feb  3 18:34:42 2026 GMT
        Subject: CN=C654DD0E40F16777EB835D755A716FE2C17B29C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:bc:ea:78:47:6e:95:b3:ad:7d:4e:40:78:
                    35:07:99:a9:fe:b6:5c:4d:45:68:35:b2:53:20:a0:
                    00:7d:0b:45:c1:aa:f1:94:07:c9:6a:d0:9f:b7:08:
                    82:ec:ea:36:51:66:08:04:6b:7e:3a:20:06:83:95:
                    9a:33:fb:7a:6f:27:63:9b:82:0e:96:be:70:85:d8:
                    4a:aa:1a:19:fc:3b:2f:da:42:33:ea:c8:e1:cc:8e:
                    c8:e6:85:09:ed:4a:a6:5c:b6:5b:a2:7c:dd:0e:ed:
                    a1:3e:f8:e4:58:fa:7f:bb:95:15:ca:13:89:49:5c:
                    b9:a6:09:86:ae:1d:da:11:82:5e:1a:63:9a:6e:86:
                    31:8b:49:73:c1:cb:57:f7:ee:5c:ac:85:4f:5c:b4:
                    b3:bb:7c:29:a6:b7:32:3f:01:61:70:3e:18:e9:94:
                    63:91:97:46:b0:6f:94:a9:5e:6d:62:1b:53:6e:3e:
                    82:07:d7:91:e7:2d:c0:7d:34:05:04:c6:0e:21:91:
                    eb:2b:ef:78:20:b8:8e:c5:58:1c:45:59:98:11:3e:
                    9c:85:63:c2:5d:b2:3d:da:43:06:ce:d6:17:56:34:
                    62:03:1a:d1:16:86:73:e9:06:3e:e2:fd:bc:1a:d3:
                    71:ff:20:0f:17:fd:0b:07:d7:b9:c6:73:19:6c:ad:
                    36:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:54:DD:0E:40:F1:67:77:EB:83:5D:75:5A:71:6F:E2:C1:7B:29:C5
            X509v3 Authority Key Identifier:
                keyid:D1:FF:BC:86:B2:5B:48:77:36:23:5C:5C:A0:D6:DD:00:4C:0C:AA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D1FFBC86B25B487736235C5CA0D6DD004C0CAA6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30A2F43F3FB56944F31F8E74892769A0D2CFC2B00810BC0FE0D7E86178F99BF3/0/3136382e3139362e3232342e302f32322d3234203d3e20323634373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:5f:b1:15:25:59:16:2b:12:71:0e:4c:34:f8:f9:fc:af:e6:
         03:b1:a5:47:8d:9e:ab:c2:5a:fa:ba:79:bc:36:19:27:00:89:
         e4:72:d3:4a:83:9f:d0:d7:dc:f8:10:bd:b7:0e:5c:c4:ca:d2:
         b3:d4:07:1a:92:83:d7:4d:22:8c:4b:eb:ea:c8:1a:6f:03:d8:
         6a:75:d6:04:e4:a0:05:69:fe:77:a3:99:3c:4d:e0:90:4c:22:
         b8:73:82:9d:e8:02:4e:fd:f4:0f:cb:39:b1:01:cf:20:20:7e:
         cd:d6:42:09:bd:bd:a4:bb:80:66:16:15:2c:7b:7b:21:c4:7b:
         50:dc:f6:51:68:55:ac:74:a3:19:51:c8:bb:9a:6a:b6:25:97:
         53:ab:32:93:93:d5:62:02:09:81:6c:7f:29:3c:04:58:cc:09:
         9d:82:bb:3f:63:38:77:65:4c:9f:dd:f3:4d:0d:3f:f8:3f:7c:
         fe:9b:4a:92:bf:b9:99:b6:9f:37:4d:86:8d:5d:0c:85:b2:7b:
         d0:f7:79:38:9e:7e:95:23:6c:f2:42:90:0c:33:3a:cf:7c:c8:
         a6:6e:83:e3:6e:d4:a1:a3:ad:e6:84:3b:3e:0c:fd:1f:76:18:
         02:84:a0:29:02:fd:9f:02:76:92:00:d6:b4:80:92:44:ae:eb:
         91:0e:e5:fa
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUIuTLD95ZI/99Y9p9RjBfvqfjF38wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFGRkJDODZCMjVCNDg3NzM2MjM1QzVDQTBENkREMDA0
QzBDQUE2QTAeFw0yNTAyMDQxODI5NDJaFw0yNjAyMDMxODM0NDJaMDMxMTAvBgNV
BAMTKEM2NTRERDBFNDBGMTY3NzdFQjgzNUQ3NTVBNzE2RkUyQzE3QjI5QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkrzqeEdulbOtfU5AeDUHman+
tlxNRWg1slMgoAB9C0XBqvGUB8lq0J+3CILs6jZRZggEa346IAaDlZoz+3pvJ2Ob
gg6WvnCF2EqqGhn8Oy/aQjPqyOHMjsjmhQntSqZctluifN0O7aE++ORY+n+7lRXK
E4lJXLmmCYauHdoRgl4aY5puhjGLSXPBy1f37lyshU9ctLO7fCmmtzI/AWFwPhjp
lGORl0awb5SpXm1iG1NuPoIH15HnLcB9NAUExg4hkesr73gguI7FWBxFWZgRPpyF
Y8Jdsj3aQwbO1hdWNGIDGtEWhnPpBj7i/bwa03H/IA8X/QsH17nGcxlsrTYhAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUxlTdDkDxZ3frg111WnFv4sF7KcUwHwYDVR0j
BBgwFoAU0f+8hrJbSHc2I1xcoNbdAEwMqmowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMEEyRjQzRjNGQjU2OTQ0RjMxRjhFNzQ4OTI3NjlBMEQy
Q0ZDMkIwMDgxMEJDMEZFMEQ3RTg2MTc4Rjk5QkYzLzAvRDFGRkJDODZCMjVCNDg3
NzM2MjM1QzVDQTBENkREMDA0QzBDQUE2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMUZGQkM4NkIyNUI0ODc3MzYy
MzVDNUNBMEQ2REQwMDRDMENBQTZBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzBBMkY0M0YzRkI1Njk0NEYzMUY4RTc0ODkyNzY5QTBEMkNGQzJCMDA4
MTBCQzBGRTBEN0U4NjE3OEY5OUJGMy8wLzMxMzYzODJlMzEzOTM2MmUzMjMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM2MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
xOAwDQYJKoZIhvcNAQELBQADggEBAHFfsRUlWRYrEnEOTDT4+fyv5gOxpUeNnqvC
Wvq6ebw2GScAieRy00qDn9DX3PgQvbcOXMTK0rPUBxqSg9dNIoxL6+rIGm8D2Gp1
1gTkoAVp/nejmTxN4JBMIrhzgp3oAk799A/LObEBzyAgfs3WQgm9vaS7gGYWFSx7
eyHEe1Dc9lFoVax0oxlRyLuaarYll1OrMpOT1WICCYFsfyk8BFjMCZ2Cuz9jOHdl
TJ/d800NP/g/fP6bSpK/uZm2nzdNho1dDIWye9D3eTiefpUjbPJCkAwzOs98yKZu
g+Nu1KGjreaEOz4M/R92GAKEoCkC/Z8CdpIA1rSAkkSu65EO5fo=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:24:12 2025 by rpki-client