Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa
File:                     3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa (raw, json)
Hash identifier:          EqJ4ejA/LFTMQCcnZnjRjM3Tl6Hr62Vdz6JtXoNdaDo=
Subject key identifier:   4E:96:24:D4:A1:FA:67:D3:CC:E8:8E:D0:EC:65:23:B8:55:57:14:D5
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       5D2EB6718924A8039421FB273CEE93EFD8BCD58B
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:44 +0000
ROA not before:           Tue 04 Feb 2025 18:02:44 +0000
ROA not after:            Tue 03 Feb 2026 18:07:44 +0000
asID:                     28114
IP address blocks:        168.195.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:2e:b6:71:89:24:a8:03:94:21:fb:27:3c:ee:93:ef:d8:bc:d5:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:44 2025 GMT
            Not After : Feb  3 18:07:44 2026 GMT
        Subject: CN=4E9624D4A1FA67D3CCE88ED0EC6523B8555714D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:31:3a:50:a9:61:85:7c:f1:5f:e1:5d:c5:
                    30:2b:63:d4:06:00:b3:4a:b3:38:99:e2:be:ab:64:
                    d3:3c:08:5d:3e:83:5b:81:58:45:8c:c3:2f:9a:ee:
                    5b:8f:2a:d5:35:17:47:a5:46:17:34:9a:30:1b:e4:
                    af:b5:e6:1f:8c:f8:4e:f8:44:d0:0f:0a:d3:49:dc:
                    c2:08:81:61:97:12:0f:46:81:bb:08:1c:9a:be:2c:
                    ac:f0:7c:a4:ad:09:41:93:56:c3:b0:fe:55:84:58:
                    ce:ca:ec:3d:2b:16:ea:17:8b:2b:2c:3a:be:5a:1a:
                    3e:8d:9f:39:21:0d:0c:27:7d:cc:02:47:c9:3b:b0:
                    0b:64:90:49:ff:2d:34:6d:df:4b:fc:e2:ae:63:22:
                    ff:e5:2b:43:1c:79:81:47:6d:ed:68:84:1e:c0:a3:
                    a9:81:3c:9e:48:2d:3c:07:a0:89:64:5c:21:dd:2f:
                    9b:e0:b9:59:b7:3f:44:78:d2:7d:4b:b9:63:20:52:
                    46:5d:9d:59:16:56:26:e6:af:c8:07:9c:35:eb:34:
                    ea:55:bf:d0:42:f2:9e:47:c5:e4:27:a4:ed:99:38:
                    5d:93:93:9f:f6:43:bf:d0:a8:28:83:af:4c:0c:58:
                    d8:fa:00:f2:e4:7a:e3:d2:c3:01:63:77:21:03:2a:
                    a2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:96:24:D4:A1:FA:67:D3:CC:E8:8E:D0:EC:65:23:B8:55:57:14:D5
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32322d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:f4:10:9f:3d:53:c5:96:68:06:ae:67:9b:b0:56:c5:70:b6:
         c0:de:52:3e:b1:7e:ca:0c:c5:b8:7e:2b:5d:b5:f6:ab:33:2b:
         78:bc:87:ff:39:bf:33:ee:90:c2:af:5c:ff:57:91:df:6e:0d:
         32:9a:96:0a:07:ea:59:55:ea:d6:95:3e:b5:0e:22:d3:04:7a:
         aa:38:0a:0e:00:1f:a6:af:ae:3c:86:74:80:55:d0:07:73:db:
         b0:f7:34:22:69:c2:d5:41:28:72:21:4f:98:e4:2f:13:2c:95:
         1e:67:09:eb:58:cc:3b:a5:dc:f9:66:fb:7b:54:e0:df:f7:1c:
         a7:a7:ab:b9:b4:8d:49:78:80:6d:71:c7:66:ef:d7:79:3b:f6:
         99:dd:c9:e2:77:a7:de:90:01:bc:50:52:1d:f9:91:18:4c:0c:
         bb:f1:8d:68:84:46:52:f7:88:35:45:d4:60:92:d0:5e:58:25:
         7c:7e:e4:80:6d:b7:2c:e5:70:73:1f:06:0b:cf:70:55:69:ec:
         f5:c0:fe:0a:52:74:30:12:33:35:97:3a:30:ea:e9:80:e5:a7:
         e5:36:45:13:9c:e5:a3:46:60:cb:9e:f4:f6:f2:39:7a:36:81:
         05:e5:5f:b9:b4:90:67:69:14:f1:0c:10:0e:3e:65:0f:98:34:
         46:1a:36:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:50 2025 by rpki-client