Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa
File:                     3136382e3132312e33362e302f32322d3234203d3e203532343635.roa (raw, json)
Hash identifier:          1phLNEmTnY482UMWHeW6LHMgUQWG1tMZBUN8c6dpPjM=
Subject key identifier:   E6:A6:24:CA:63:FB:12:0D:08:5A:47:72:77:96:98:7B:15:F3:7A:6A
Certificate issuer:       /CN=C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7
Certificate serial:       18C003EDF708F5A07B7DD69013F522D88558B31A
Authority key identifier: C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa
Signing time:             Tue 04 Feb 2025 18:44:20 +0000
ROA not before:           Tue 04 Feb 2025 18:39:20 +0000
ROA not after:            Tue 03 Feb 2026 18:44:20 +0000
asID:                     52465
IP address blocks:        168.121.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 16:12:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:c0:03:ed:f7:08:f5:a0:7b:7d:d6:90:13:f5:22:d8:85:58:b3:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7
        Validity
            Not Before: Feb  4 18:39:20 2025 GMT
            Not After : Feb  3 18:44:20 2026 GMT
        Subject: CN=E6A624CA63FB120D085A47727796987B15F37A6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:76:ef:56:11:5d:6e:bb:ab:df:23:7d:68:ee:
                    61:90:51:6d:ec:81:94:07:6e:69:63:0e:22:4c:10:
                    bc:72:24:50:6a:e3:f6:da:57:0e:2d:ba:52:67:f8:
                    90:17:b0:23:cc:9b:da:95:c6:d1:ea:eb:7e:ec:a4:
                    92:83:fd:3d:b0:52:a8:48:ff:f4:c7:17:88:42:69:
                    11:24:a0:4e:0d:1d:26:b5:22:4d:9e:17:4e:da:7f:
                    5c:1e:58:a3:c7:50:5d:a6:59:d0:4a:e7:3a:88:80:
                    54:b8:71:f4:ed:60:37:40:90:bd:34:f2:58:6e:00:
                    49:17:77:7f:cf:36:7d:85:d4:8d:8b:ac:80:1f:43:
                    64:ac:c0:81:15:8e:cb:13:ce:20:7f:78:be:f2:2e:
                    3a:d6:ec:51:09:6e:1b:12:05:90:95:6b:bf:94:56:
                    65:63:d2:b8:06:bd:ec:61:a9:b1:86:38:de:fb:40:
                    70:19:ff:7d:d6:69:0b:b7:85:ff:8b:ae:13:bc:dd:
                    51:1a:17:a2:23:5f:ba:80:d1:d2:64:7a:60:10:dc:
                    17:4e:b2:85:8a:f4:38:68:4c:27:fb:29:a4:10:23:
                    e9:f8:4f:cf:7a:64:6e:b8:67:02:9c:4e:93:2c:24:
                    48:90:66:5b:18:64:9c:1d:fb:ee:dd:17:a7:35:b2:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:24:CA:63:FB:12:0D:08:5A:47:72:77:96:98:7B:15:F3:7A:6A
            X509v3 Authority Key Identifier:
                keyid:C8:0C:94:C3:F5:A1:61:40:1A:8E:A6:1F:1F:A9:2C:95:BE:2B:04:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C80C94C3F5A161401A8EA61F1FA92C95BE2B04B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/322B47F9A75A9A97A2B7C6BE0D763E02059272A6BCB223A76BCCD34A3506FF5D/0/3136382e3132312e33362e302f32322d3234203d3e203532343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:b2:c0:08:41:f2:f3:e1:3f:3a:cb:8d:c6:ae:a7:42:87:21:
         f5:39:5a:4e:e5:02:58:b9:98:2c:86:d8:0c:e5:09:c2:0a:25:
         2c:eb:37:90:27:6c:49:4c:cc:fc:42:11:80:a8:cf:34:9b:0a:
         9f:75:2b:c9:cf:35:98:fa:e5:8a:7f:df:d8:20:5c:aa:65:69:
         2c:a9:aa:15:c1:fc:ed:d7:04:d4:18:0e:a1:89:6e:9d:d7:5b:
         a6:07:e3:1b:bf:04:86:61:c0:cd:79:02:28:d6:73:7c:46:4b:
         ac:99:89:52:53:e3:93:e6:7c:ba:8b:98:5b:9f:b5:a4:5d:76:
         2e:20:5b:88:f1:a0:8b:27:64:fd:93:d7:36:15:a9:8a:2b:5a:
         0b:96:4f:96:19:e6:81:47:1a:f6:61:b6:20:18:ac:fb:b2:b7:
         9f:0d:82:31:62:d4:37:7e:18:aa:44:56:5d:a7:10:fd:aa:b5:
         15:8a:30:b4:0c:d8:2b:1a:87:94:1e:48:85:b4:7f:26:8d:6e:
         3e:c6:0c:81:d8:b0:9d:55:85:09:8c:ba:cf:91:e2:68:7c:79:
         76:bd:2b:61:09:31:0e:b7:7f:76:e8:91:fa:6f:80:2f:20:c3:
         04:59:74:af:a1:80:4d:3e:14:e6:30:90:65:85:8e:a0:a5:7e:
         ef:aa:58:d0
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGMAD7fcI9aB7fdaQE/Ui2IVYsxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzgwQzk0QzNGNUExNjE0MDFBOEVBNjFGMUZBOTJDOTVC
RTJCMDRCNzAeFw0yNTAyMDQxODM5MjBaFw0yNjAyMDMxODQ0MjBaMDMxMTAvBgNV
BAMTKEU2QTYyNENBNjNGQjEyMEQwODVBNDc3Mjc3OTY5ODdCMTVGMzdBNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdu9WEV1uu6vfI31o7mGQUW3s
gZQHbmljDiJMELxyJFBq4/baVw4tulJn+JAXsCPMm9qVxtHq637spJKD/T2wUqhI
//THF4hCaREkoE4NHSa1Ik2eF07af1weWKPHUF2mWdBK5zqIgFS4cfTtYDdAkL00
8lhuAEkXd3/PNn2F1I2LrIAfQ2SswIEVjssTziB/eL7yLjrW7FEJbhsSBZCVa7+U
VmVj0rgGvexhqbGGON77QHAZ/33WaQu3hf+LrhO83VEaF6IjX7qA0dJkemAQ3BdO
soWK9DhoTCf7KaQQI+n4T896ZG64ZwKcTpMsJEiQZlsYZJwd++7dF6c1su3xAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU5qYkymP7Eg0IWkdyd5aYexXzemowHwYDVR0j
BBgwFoAUyAyUw/WhYUAajqYfH6kslb4rBLcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zMjJCNDdGOUE3NUE5QTk3QTJCN0M2QkUwRDc2M0UwMjA1
OTI3MkE2QkNCMjIzQTc2QkNDRDM0QTM1MDZGRjVELzAvQzgwQzk0QzNGNUExNjE0
MDFBOEVBNjFGMUZBOTJDOTVCRTJCMDRCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DODBDOTRDM0Y1QTE2MTQwMUE4
RUE2MUYxRkE5MkM5NUJFMkIwNEI3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzIyQjQ3RjlBNzVBOUE5N0EyQjdDNkJFMEQ3NjNFMDIwNTkyNzJBNkJD
QjIyM0E3NkJDQ0QzNEEzNTA2RkY1RC8wLzMxMzYzODJlMzEzMjMxMmUzMzM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzYzNS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqh5JDAN
BgkqhkiG9w0BAQsFAAOCAQEAQbLACEHy8+E/OsuNxq6nQoch9TlaTuUCWLmYLIbY
DOUJwgolLOs3kCdsSUzM/EIRgKjPNJsKn3Uryc81mPrlin/f2CBcqmVpLKmqFcH8
7dcE1BgOoYlunddbpgfjG78EhmHAzXkCKNZzfEZLrJmJUlPjk+Z8uouYW5+1pF12
LiBbiPGgiydk/ZPXNhWpiitaC5ZPlhnmgUca9mG2IBis+7K3nw2CMWLUN34YqkRW
XacQ/aq1FYowtAzYKxqHlB5IhbR/Jo1uPsYMgdiwnVWFCYy6z5HiaHx5dr0rYQkx
Drd/duiR+m+ALyDDBFl0r6GATT4U5jCQZYWOoKV+76pY0A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:58 2025 by rpki-client