Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
File:                     3136382e37372e302e302f31362d3234203d3e2033353531.roa (raw, json)
Hash identifier:          w3q25i2N9amp5ZqFf5LI9OJ07DaR9bL4rfzv5pPBFHk=
Subject key identifier:   7A:59:7A:7F:60:3C:3D:12:17:E9:A8:8B:DE:DB:4A:1A:9E:05:27:10
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       303F2506F4A7211FAA902E3AF936E33A6382726C
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa
Signing time:             Tue 04 Feb 2025 18:53:32 +0000
ROA not before:           Tue 04 Feb 2025 18:48:32 +0000
ROA not after:            Tue 03 Feb 2026 18:53:32 +0000
asID:                     3551
IP address blocks:        168.77.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:3f:25:06:f4:a7:21:1f:aa:90:2e:3a:f9:36:e3:3a:63:82:72:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Feb  4 18:48:32 2025 GMT
            Not After : Feb  3 18:53:32 2026 GMT
        Subject: CN=7A597A7F603C3D1217E9A88BDEDB4A1A9E052710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:7c:46:2a:e0:48:a0:f8:9c:e5:e1:35:61:
                    f0:c2:7b:41:8d:87:49:48:48:50:4e:31:2d:12:74:
                    0a:63:70:bb:fd:4d:54:44:58:41:47:6f:f8:3d:72:
                    ed:f3:59:0a:de:0e:7d:b4:8e:fd:26:9f:fa:1b:4b:
                    91:13:bd:8c:2d:e3:f9:6a:c7:fd:c3:25:03:03:73:
                    e2:6a:90:62:be:4e:57:a3:3c:8f:87:58:0c:8b:7d:
                    94:17:2f:b4:69:5b:d8:50:82:c9:e1:e9:04:d1:28:
                    b9:86:14:6a:78:29:1e:78:2d:16:28:9e:f9:35:38:
                    79:d0:95:15:40:02:7d:eb:b7:bd:cf:9a:ee:ee:68:
                    7a:77:38:f6:84:7e:35:9a:56:90:2a:cd:47:20:f5:
                    e7:1c:78:a4:be:37:36:de:43:f4:da:cf:ba:df:82:
                    9b:76:b2:9c:c7:a6:c9:21:7d:ea:9e:06:77:15:84:
                    9b:d0:08:dd:95:a9:51:2d:bd:3f:b8:41:b1:a0:75:
                    41:f6:f2:d0:80:47:62:47:aa:9e:b9:97:24:bc:61:
                    33:73:33:2a:d9:9b:a3:c5:3b:9f:5f:51:90:d3:ae:
                    e4:ad:c9:82:95:8f:88:b7:89:81:2c:cc:0c:54:73:
                    14:1f:7b:72:6f:c8:61:9c:5f:cf:89:f1:7e:6f:ac:
                    08:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:59:7A:7F:60:3C:3D:12:17:E9:A8:8B:DE:DB:4A:1A:9E:05:27:10
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e302e302f31362d3234203d3e2033353531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:43:f4:4a:8f:42:58:56:da:c6:2b:ba:73:e8:76:15:b8:
         3d:b6:ad:e2:87:f8:14:6e:74:72:fd:da:8e:8d:90:8b:34:b2:
         a4:42:22:b4:b0:85:4e:e6:82:f6:29:d5:ca:fc:20:35:81:45:
         88:7b:22:09:a1:8d:66:91:10:39:a1:54:7e:7e:51:48:49:82:
         3b:d8:bc:dc:ed:ac:6d:e6:4d:d0:9b:14:8c:93:c0:7d:07:ae:
         e0:9d:b3:43:3a:bf:fd:55:67:e7:6a:4b:eb:4a:21:55:59:89:
         d7:b6:b0:94:9c:68:93:3f:6f:16:f7:d0:cd:0c:fe:fc:c2:87:
         db:5d:17:2c:70:46:66:15:cc:a6:80:70:c5:fe:4c:c2:9d:82:
         34:a3:c1:a6:ae:73:c5:12:7b:fd:fe:03:5f:bd:23:f8:17:06:
         47:f4:a1:f7:17:7c:b0:61:33:69:03:8a:00:6b:f5:be:cc:ff:
         b4:c9:fc:b4:9c:d6:b6:5e:4c:1a:6c:33:54:04:75:68:8a:ac:
         22:dd:e5:b7:3f:c0:07:6f:23:8e:73:b6:60:9a:4f:7a:5d:fc:
         78:9a:da:2a:25:e7:77:d3:43:af:62:7e:23:3c:ea:ff:e4:cf:
         8c:d6:83:db:db:b7:02:3d:0c:f9:a8:25:57:63:ac:0f:d5:82:
         0e:d0:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:43:35 2025 by rpki-client