Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa
File:                     3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa (raw, json)
Hash identifier:          e2xlvFlT5cwx28XaNJJCbVJSAnnF/ctRK4zQL8WR2Pg=
Subject key identifier:   52:0C:43:CB:D5:3A:5F:25:B5:FA:18:08:EE:77:08:67:F6:28:49:1A
Certificate issuer:       /CN=0D1797043F7F529F13952CEE646AE7365392BBC3
Certificate serial:       3545E3F1DE32579AEB7F319678F89A047A2C6016
Authority key identifier: 0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa
Signing time:             Tue 04 Feb 2025 17:59:44 +0000
ROA not before:           Tue 04 Feb 2025 17:54:44 +0000
ROA not after:            Tue 03 Feb 2026 17:59:44 +0000
asID:                     262166
IP address blocks:        168.234.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:45:e3:f1:de:32:57:9a:eb:7f:31:96:78:f8:9a:04:7a:2c:60:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D1797043F7F529F13952CEE646AE7365392BBC3
        Validity
            Not Before: Feb  4 17:54:44 2025 GMT
            Not After : Feb  3 17:59:44 2026 GMT
        Subject: CN=520C43CBD53A5F25B5FA1808EE770867F628491A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:f7:8b:a4:70:20:4d:62:db:0e:bb:59:d2:
                    4c:f5:02:2e:d7:68:2b:aa:40:b8:3d:14:94:48:28:
                    97:43:53:53:c7:dd:58:5b:bd:4c:f3:2c:e5:3d:34:
                    97:ca:ac:90:51:5e:99:a1:a7:8d:fd:1f:d9:b1:9b:
                    93:d6:93:85:36:1b:d8:7e:13:82:41:8a:45:02:6a:
                    7e:be:6a:f1:f6:10:c3:84:a8:5f:24:a0:c6:5d:42:
                    8d:63:a2:75:10:dd:a1:e6:5b:dc:12:95:71:fb:1d:
                    ca:10:dd:b9:05:07:e5:3b:67:7b:d2:bb:b0:86:13:
                    24:68:d6:bc:69:da:59:8e:6d:02:bf:f6:00:44:41:
                    f3:08:c9:f6:e0:39:3f:19:8d:6f:06:a7:5c:6a:ac:
                    18:aa:68:f4:ad:c1:3a:ee:2b:cd:a4:30:64:89:04:
                    f6:36:5a:b6:0d:62:5a:1f:c7:d8:e6:dc:cf:78:5d:
                    26:7e:18:2b:f1:af:17:ae:1f:00:76:bc:1c:8e:2d:
                    e2:05:1d:13:3c:34:2b:ff:b5:cb:2f:74:c1:23:f5:
                    28:65:65:02:98:1f:dc:83:f5:5a:69:5c:dc:79:db:
                    d3:ae:e8:be:33:81:04:41:2f:e7:36:f2:cb:ea:ab:
                    07:68:4b:6e:e2:b1:87:b3:57:09:e9:7c:3a:8c:0a:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0C:43:CB:D5:3A:5F:25:B5:FA:18:08:EE:77:08:67:F6:28:49:1A
            X509v3 Authority Key Identifier:
                keyid:0D:17:97:04:3F:7F:52:9F:13:95:2C:EE:64:6A:E7:36:53:92:BB:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/0D1797043F7F529F13952CEE646AE7365392BBC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D1797043F7F529F13952CEE646AE7365392BBC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36354543D224272CF4722FF4D718198EB8E2FF8CBD6D9B7B97CDA860D9C1CD3B/0/3136382e3233342e3136302e302f32322d3234203d3e20323632313636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.234.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:43:2d:0b:a7:f2:f5:db:5a:6b:74:0c:33:1f:8b:ec:b4:3f:
         4a:d1:12:b7:5e:e0:41:32:19:74:e0:8c:d0:6e:17:44:e8:ac:
         65:57:ba:82:6c:d1:5a:9a:1d:92:f5:30:d5:00:80:4f:51:61:
         ca:70:fd:56:4a:09:ae:00:a6:03:f0:12:b6:e4:7e:46:43:7e:
         cf:02:93:1c:d8:bc:d0:00:72:ad:df:8d:92:19:73:ac:ba:a0:
         c2:c5:9d:16:b5:9d:8d:d8:e3:9e:d9:78:ec:d2:cb:6c:dd:17:
         b0:74:3a:ea:07:9f:ca:93:bb:be:d0:c3:55:4a:3d:37:a3:85:
         ee:e4:40:44:04:13:95:8f:36:da:e9:f5:b6:49:60:6d:56:5e:
         6b:52:c4:63:f4:a2:8c:34:5f:fc:b9:29:29:a3:61:44:47:87:
         5c:77:2c:24:bc:42:8b:bf:8b:e0:c3:eb:db:94:e3:4e:76:4a:
         e5:bc:1d:a8:3c:64:1b:2c:c8:ae:e8:78:bf:23:27:47:6a:58:
         e3:32:86:33:42:8b:c1:87:75:ba:aa:e9:68:1b:5c:9a:b8:b8:
         24:63:2e:0f:5b:35:17:17:28:c2:59:3a:cf:2e:62:2d:5f:d2:
         6b:30:18:97:f2:c7:d2:91:bd:51:ab:67:27:1c:5c:61:5c:8e:
         2e:63:f4:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:19:03 2025 by rpki-client