Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa
File:                     3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa (raw, json)
Hash identifier:          OWWCj/qCyBnPfRoz722b9npdBwWZlBkUDNTJW9v2hTw=
Subject key identifier:   5F:47:81:82:B7:95:4E:98:FD:FB:0E:B3:94:0C:0E:07:EA:91:9E:57
Certificate issuer:       /CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
Certificate serial:       546AE0973C85675832E46BC1EC08E97B2A96FBF0
Authority key identifier: 6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa
Signing time:             Tue 04 Feb 2025 18:03:25 +0000
ROA not before:           Tue 04 Feb 2025 17:58:25 +0000
ROA not after:            Tue 03 Feb 2026 18:03:25 +0000
asID:                     264768
IP address blocks:        168.196.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6a:e0:97:3c:85:67:58:32:e4:6b:c1:ec:08:e9:7b:2a:96:fb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F2B68C44C2A31541210D894254226DCF2A63FD5
        Validity
            Not Before: Feb  4 17:58:25 2025 GMT
            Not After : Feb  3 18:03:25 2026 GMT
        Subject: CN=5F478182B7954E98FDFB0EB3940C0E07EA919E57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:fc:ea:79:2d:5f:54:8c:11:10:b6:83:31:
                    4c:5a:41:64:db:00:09:33:81:6e:88:56:bd:26:43:
                    2e:43:58:f7:98:cd:ab:ea:dd:b1:9c:57:e8:99:3f:
                    aa:05:af:dc:f0:d3:85:14:3f:1a:ad:02:d3:e9:9f:
                    de:72:54:10:3e:ac:7e:b1:33:a5:2c:79:a2:ec:77:
                    cf:be:a9:88:3e:6a:94:24:db:ee:f3:db:68:68:16:
                    79:49:75:6e:fa:50:f2:a0:da:af:dd:82:8a:03:93:
                    3b:c8:2b:3e:90:17:51:a6:0d:35:03:6e:04:76:a5:
                    35:ec:90:7c:f1:8a:66:51:94:13:53:9d:94:5b:d8:
                    64:12:e5:c3:4b:11:01:45:bd:35:ac:af:00:b4:61:
                    7e:8e:bb:b5:34:c3:a3:40:65:e3:ee:ef:68:6b:13:
                    63:ba:4e:22:fb:2d:50:85:f6:8c:fc:7d:31:3a:82:
                    61:8c:5c:bf:b1:f3:a7:f2:ee:c4:6c:30:f8:b5:6f:
                    6a:b8:8f:30:81:ea:9e:dc:46:eb:a0:ce:11:d6:47:
                    21:4e:67:ee:f7:39:e9:7f:96:85:5e:25:0a:fa:f2:
                    93:9d:a6:41:b6:c8:6f:6e:45:3c:c2:21:77:49:c8:
                    41:fe:21:73:93:32:c5:15:43:1e:04:86:33:62:95:
                    d6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:47:81:82:B7:95:4E:98:FD:FB:0E:B3:94:0C:0E:07:EA:91:9E:57
            X509v3 Authority Key Identifier:
                keyid:6F:2B:68:C4:4C:2A:31:54:12:10:D8:94:25:42:26:DC:F2:A6:3F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6F2B68C44C2A31541210D894254226DCF2A63FD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45F5B0F6B432084492421F87D85DC933C32131207800D5BEFBF891585FF9A0DB/0/3136382e3139362e3134302e302f32322d3234203d3e20323634373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:9e:e3:aa:45:83:b1:88:d6:eb:3d:37:52:56:f8:a4:12:84:
         86:3d:54:d6:43:aa:79:33:15:19:43:23:84:40:53:3c:43:6b:
         db:e5:fb:3d:e3:72:ea:ab:39:5c:ea:8f:7d:6b:b1:4a:5a:2d:
         cb:6e:7d:ae:38:e3:86:ea:ed:d0:29:1a:cd:ba:b1:c8:40:75:
         92:49:9f:66:d8:82:7f:8c:47:7c:72:04:dd:2e:29:8f:26:01:
         3d:ab:39:34:06:62:9a:0a:37:7e:ba:21:87:fe:c2:71:21:d6:
         00:bc:73:79:5a:3f:18:c9:4b:9e:21:d3:a1:21:3e:e6:94:e6:
         97:f6:49:29:a0:2f:ef:ad:77:f3:b2:fc:97:44:91:e4:1a:85:
         1a:b9:a0:2b:00:65:72:18:ed:4b:15:8f:14:6f:da:96:52:e8:
         40:92:3b:b1:ad:58:32:27:d4:6e:dd:51:c8:48:1c:b2:34:98:
         7c:09:65:eb:f6:7d:00:4f:66:20:e3:a6:41:29:25:05:dc:83:
         3a:5e:88:6e:41:aa:40:9b:03:4d:e4:13:81:4c:8c:de:98:c8:
         14:36:dd:b9:01:aa:b1:24:e1:b9:01:f0:81:8e:01:1d:7c:65:
         cf:66:ae:0a:db:31:6f:62:02:40:13:56:5e:ea:5c:4f:3e:b5:
         61:07:92:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:52:11 2025 by rpki-client