Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/3136312e32322e36342e302f31382d3234203d3e203231333531.roa
File:                     3136312e32322e36342e302f31382d3234203d3e203231333531.roa (raw, json)
Hash identifier:          cqvCyY3Y3a5KSmUyvivlfwbUzJw2+QfkgT2rUIi9sEE=
Subject key identifier:   D3:20:A2:48:BF:6C:08:5D:19:CD:D3:38:04:FF:0A:1D:9C:FB:D4:9A
Certificate issuer:       /CN=2949913DC6C3E739C74D8B456424411BD4668DD8
Certificate serial:       42CFF88AF5F21C44B75DBC4C0187BEE53F3DED2E
Authority key identifier: 29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/3136312e32322e36342e302f31382d3234203d3e203231333531.roa
Signing time:             Tue 04 Feb 2025 18:34:30 +0000
ROA not before:           Tue 04 Feb 2025 18:29:30 +0000
ROA not after:            Tue 03 Feb 2026 18:34:30 +0000
asID:                     21351
IP address blocks:        161.22.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:cf:f8:8a:f5:f2:1c:44:b7:5d:bc:4c:01:87:be:e5:3f:3d:ed:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2949913DC6C3E739C74D8B456424411BD4668DD8
        Validity
            Not Before: Feb  4 18:29:30 2025 GMT
            Not After : Feb  3 18:34:30 2026 GMT
        Subject: CN=D320A248BF6C085D19CDD33804FF0A1D9CFBD49A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:11:5a:a7:47:96:2d:1b:c7:8e:bd:30:90:5b:
                    ea:72:51:b1:2b:44:13:ee:ef:16:5e:a1:3f:42:21:
                    31:fa:fa:64:6f:4a:95:60:88:e6:9e:1d:cd:35:b1:
                    f1:9d:aa:b9:71:bd:56:dd:77:d7:82:52:00:34:14:
                    1e:fe:92:db:ac:cd:a5:92:2c:e7:48:b8:09:36:85:
                    71:a2:d4:59:3d:94:fe:7a:47:1f:6a:f6:f1:6c:48:
                    93:01:71:2e:e5:1a:92:a1:1a:2d:d4:24:24:ac:56:
                    c6:ab:56:77:19:ec:90:bd:49:fc:e6:b1:24:be:b0:
                    5e:b2:cb:06:69:21:e9:a0:ba:e2:f5:a5:b2:c1:60:
                    a2:27:fc:23:de:f6:cc:ff:a0:85:f4:f0:ad:0b:cd:
                    49:5d:f4:dd:73:7f:8a:9d:9b:a3:c4:18:fa:51:ef:
                    60:52:ac:33:df:97:84:26:ab:1f:8b:7a:c8:e2:d3:
                    23:69:3a:bb:42:cb:78:dd:b3:ba:b5:56:4a:11:3d:
                    ec:ee:c2:55:94:be:4e:07:69:ee:7a:01:50:b5:16:
                    a7:bd:6b:34:42:d9:72:1a:3f:79:23:34:95:59:23:
                    67:76:49:6a:86:1f:cf:82:c9:76:c2:b4:8f:7d:2d:
                    01:bd:ce:69:1f:ab:b7:22:81:1c:7e:e3:4e:87:91:
                    9e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:20:A2:48:BF:6C:08:5D:19:CD:D3:38:04:FF:0A:1D:9C:FB:D4:9A
            X509v3 Authority Key Identifier:
                keyid:29:49:91:3D:C6:C3:E7:39:C7:4D:8B:45:64:24:41:1B:D4:66:8D:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/2949913DC6C3E739C74D8B456424411BD4668DD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2949913DC6C3E739C74D8B456424411BD4668DD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/437E940DD9C5D381919D8A97D35D756610FF22137B17B1682061CAFD53925C0E/0/3136312e32322e36342e302f31382d3234203d3e203231333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:94:74:b7:52:f6:e5:25:b5:2a:fb:40:67:9f:99:d6:e6:
         72:3e:f5:1d:31:58:64:78:c0:dc:96:93:2b:9c:d5:fe:bc:db:
         69:f0:7c:5e:ad:50:e6:d9:66:ee:66:a0:2d:38:c1:34:fa:79:
         cf:9e:76:ad:77:28:25:ad:55:36:b8:53:26:92:74:63:b5:77:
         ad:83:99:7e:f8:4b:d6:ae:af:31:9a:ac:70:19:14:86:14:cb:
         e6:a5:d1:24:51:09:8a:1a:06:0d:c1:ab:1a:12:84:84:26:26:
         d4:0b:cd:65:b5:14:9b:59:b9:1f:be:85:8d:df:10:57:4a:b4:
         61:9e:24:c7:d1:b2:c3:63:68:de:3b:e1:a5:f9:6f:f7:2e:d7:
         d9:27:4c:d0:b7:97:15:7b:6a:68:20:c8:aa:47:51:fd:d7:f4:
         14:eb:41:83:3b:b5:59:b6:f5:d4:7b:56:1e:0f:1e:cc:48:a2:
         ad:74:e1:e1:73:1b:08:f8:5c:24:6c:c8:1e:55:ea:f7:4c:4d:
         65:27:e7:01:a5:63:47:f1:05:61:2c:50:a5:96:5e:90:ee:33:
         c5:6e:92:17:5c:c7:ed:01:56:01:39:1e:43:9c:a1:5a:3e:6a:
         91:8f:6e:49:41:08:8f:81:96:b3:a6:e6:95:6a:4a:05:98:2d:
         1d:7a:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:48:32 2025 by rpki-client