Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231302e302f32332d3233203d3e203532333336.roa
File:                     3136382e37372e3231302e302f32332d3233203d3e203532333336.roa (raw, json)
Hash identifier:          XQeuyWFh9NXcX6uLQwiV0wKSOQd26UFQWjAoiPeh+GY=
Subject key identifier:   3F:05:79:2F:68:4D:22:5E:1B:A2:A0:98:A5:4D:93:52:BE:77:8E:FD
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       2EA5B9E21B55DC5F50379D36D1ABF917285186BF
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231302e302f32332d3233203d3e203532333336.roa
Signing time:             Tue 04 Feb 2025 18:53:30 +0000
ROA not before:           Tue 04 Feb 2025 18:48:30 +0000
ROA not after:            Tue 03 Feb 2026 18:53:30 +0000
asID:                     52336
IP address blocks:        168.77.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 17 Apr 2025 21:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:a5:b9:e2:1b:55:dc:5f:50:37:9d:36:d1:ab:f9:17:28:51:86:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Feb  4 18:48:30 2025 GMT
            Not After : Feb  3 18:53:30 2026 GMT
        Subject: CN=3F05792F684D225E1BA2A098A54D9352BE778EFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0e:4d:85:15:28:6a:7b:73:44:ac:20:27:79:
                    10:f2:58:d1:07:4d:4d:52:0f:24:ee:74:66:f2:09:
                    57:e4:b1:b9:04:34:65:d2:66:97:e8:d7:74:45:bb:
                    0d:17:6a:a5:7b:f9:66:ac:50:4c:68:67:a1:51:77:
                    16:5e:d4:7e:9c:17:fe:20:15:3d:56:82:23:81:3a:
                    5c:90:ce:15:d4:b9:be:ec:a8:27:40:8b:3a:46:54:
                    a5:a6:0f:1b:fb:bb:3d:ca:e0:c0:a9:89:fa:90:af:
                    fd:0c:fd:5d:3f:4d:76:1c:88:20:b8:89:eb:2b:85:
                    6a:33:3c:fa:4d:d5:dd:b9:62:dc:b5:12:10:64:ef:
                    d9:a1:b2:28:02:78:88:f7:81:65:69:81:af:27:bf:
                    99:e6:e3:2b:7c:6b:26:4f:30:0c:3c:cc:d6:a6:ee:
                    70:03:c0:72:15:90:de:f9:1d:7b:a4:74:4c:66:bf:
                    7f:23:e1:57:d8:73:b5:8f:86:7a:dd:f5:95:e6:73:
                    e3:5a:e0:00:d5:a0:f5:4a:65:2a:58:7d:3e:eb:b6:
                    37:c4:98:5b:42:b1:71:88:71:50:e5:85:83:9b:99:
                    6f:4a:34:0f:75:43:2e:b1:f7:88:4a:d3:a9:5f:03:
                    7a:0d:71:64:22:06:a4:df:63:9a:f4:f2:15:6a:10:
                    6b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:79:2F:68:4D:22:5E:1B:A2:A0:98:A5:4D:93:52:BE:77:8E:FD
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231302e302f32332d3233203d3e203532333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:ac:82:4f:f5:01:ee:f3:ff:38:2f:9b:88:5b:6d:f7:07:
         34:0b:13:5c:c4:2c:81:76:1a:34:52:47:98:f6:7f:21:d6:37:
         8b:3e:ff:da:a2:f1:f7:f9:3b:4a:e8:9e:7c:89:05:1b:d7:5c:
         ac:2a:05:5d:e7:0a:a2:99:59:59:f5:44:94:b9:f1:a9:ea:12:
         03:d3:bf:30:9b:16:05:0a:44:ce:5e:cb:3d:82:d7:ad:bc:4e:
         dc:fb:2e:93:40:fe:e8:04:53:c4:91:e8:81:b4:bc:a4:d9:f3:
         41:61:8d:fd:50:54:78:5a:e9:d7:1f:89:63:0c:9e:09:95:89:
         2f:25:a3:18:eb:b5:c7:1e:d0:d2:49:46:93:e5:38:5f:64:e0:
         9b:07:0c:52:46:d0:a7:a7:91:6a:64:de:1f:b5:53:8b:8c:12:
         aa:de:cd:c8:95:23:c1:2a:2c:5a:e3:de:2b:99:fd:bc:cd:85:
         28:5e:40:e0:a8:37:53:a2:94:49:97:94:fc:7d:1f:f6:3f:9f:
         21:2a:e2:4f:75:05:ba:c5:e6:92:dc:b6:35:05:08:62:28:d1:
         41:23:5c:f7:a0:d2:79:e5:49:bf:57:ab:01:77:18:00:c9:d1:
         97:32:59:4c:5d:76:7f:a0:52:30:db:ed:97:ef:5d:e7:3b:9e:
         5d:6c:75:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 12:29:59 2025 by rpki-client