Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e203238313134.roa
File:                     3136382e3139352e3130382e302f32332d3234203d3e203238313134.roa (raw, json)
Hash identifier:          sWM8Ne8mz6EvBRDy/096x5HYtdvWM0YfhqfALXJ9Qt4=
Subject key identifier:   B2:E0:63:24:BD:47:B2:4A:17:8A:54:1F:7C:51:B0:FB:64:A1:56:E2
Certificate issuer:       /CN=6B07BD31AD3335573775A9552187C8DA46C5971C
Certificate serial:       70BE639DBF098866853768BA69433DAF068F9A44
Authority key identifier: 6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e203238313134.roa
Signing time:             Tue 04 Feb 2025 18:07:38 +0000
ROA not before:           Tue 04 Feb 2025 18:02:38 +0000
ROA not after:            Tue 03 Feb 2026 18:07:38 +0000
asID:                     28114
IP address blocks:        168.195.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:14:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:be:63:9d:bf:09:88:66:85:37:68:ba:69:43:3d:af:06:8f:9a:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B07BD31AD3335573775A9552187C8DA46C5971C
        Validity
            Not Before: Feb  4 18:02:38 2025 GMT
            Not After : Feb  3 18:07:38 2026 GMT
        Subject: CN=B2E06324BD47B24A178A541F7C51B0FB64A156E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:52:7e:b2:ad:75:76:9c:ba:1f:e6:a6:31:37:
                    bb:8f:7e:a9:d2:99:3e:28:e7:fe:da:54:14:09:53:
                    20:3b:20:52:bf:a0:32:c6:2d:bc:2b:a1:80:52:5b:
                    4a:cb:28:20:83:0f:38:36:85:62:1e:0c:13:c5:eb:
                    f3:08:24:de:d4:64:4e:19:55:91:ce:2f:b9:99:54:
                    bc:d8:51:5e:8b:fe:6c:79:55:74:96:da:8b:31:3d:
                    e1:1c:2e:32:c0:1f:97:4e:3f:a9:89:04:6c:24:42:
                    01:93:d2:c7:9f:25:f7:84:ce:27:10:8f:c5:2e:06:
                    cb:ab:02:9f:53:59:ca:d3:65:56:c5:95:05:4f:8b:
                    6a:b8:bb:30:df:04:03:6a:9b:51:2a:89:8c:8d:f8:
                    1b:14:f7:47:4e:2a:fc:6c:3d:86:60:a7:bf:6e:51:
                    f1:ae:58:6f:54:56:12:fc:9a:d0:26:73:99:c6:af:
                    cf:53:69:00:6c:23:a2:a2:ce:f2:8e:e6:11:1d:2c:
                    52:2f:df:dc:79:e8:97:67:8d:cc:8c:47:9e:02:64:
                    7d:66:33:b3:94:3d:5e:e9:f6:15:e5:53:27:06:3a:
                    0c:7d:82:43:86:76:23:dc:74:6c:14:01:d8:f3:51:
                    5e:4c:c5:4d:01:f0:bf:d7:f4:54:11:c0:ad:21:6b:
                    28:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:63:24:BD:47:B2:4A:17:8A:54:1F:7C:51:B0:FB:64:A1:56:E2
            X509v3 Authority Key Identifier:
                keyid:6B:07:BD:31:AD:33:35:57:37:75:A9:55:21:87:C8:DA:46:C5:97:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/6B07BD31AD3335573775A9552187C8DA46C5971C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6B07BD31AD3335573775A9552187C8DA46C5971C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/33736D5D5E393875457D88576E47B08A70AA95ECE4FDDE5F6C07F16C8F7E553E/0/3136382e3139352e3130382e302f32332d3234203d3e203238313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:e3:13:ac:eb:94:ad:1d:d9:96:de:a9:fc:57:cd:d3:80:20:
         8c:53:ec:b0:fa:6d:01:07:20:05:59:78:2d:da:c9:78:b0:c4:
         9c:f3:c6:5c:71:e5:8c:26:f2:61:4c:be:77:93:55:a6:0d:75:
         a7:e0:64:33:34:b8:bb:1e:47:2b:d7:ec:9a:ef:7c:0c:b2:ef:
         8f:e1:ac:63:ff:fa:c2:86:d7:40:78:d5:29:4d:de:9d:18:48:
         f4:50:b0:26:ff:cc:c1:90:55:06:82:2e:68:1a:45:7e:59:ae:
         65:c8:1d:f8:ad:ae:aa:cd:21:6c:ae:14:2c:3f:0c:ce:dc:6f:
         02:15:35:40:17:89:5d:7a:04:ec:e1:c8:f9:34:53:0e:e4:8d:
         59:db:ce:2a:7b:ef:a7:0b:f0:1a:2b:f2:a2:98:57:16:1b:88:
         0d:1b:4d:f0:e2:33:15:d6:63:3e:47:2a:50:1e:a5:be:6a:fc:
         20:eb:b6:fe:2a:3c:3a:a6:13:84:cb:19:99:44:c2:46:e4:79:
         39:7e:ec:29:d5:14:69:67:b3:00:c4:35:04:10:ab:c0:91:89:
         26:ac:9d:bb:29:cf:18:03:52:65:d0:c7:a3:f6:7f:c2:5c:a9:
         70:9c:75:85:63:84:73:2a:50:6a:e0:72:9c:5e:28:43:0a:f9:
         00:ae:bc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:31:46 2025 by rpki-client