Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231342e302f32342d3234203d3e203532343436.roa
File:                     3136382e37372e3231342e302f32342d3234203d3e203532343436.roa (raw, json)
Hash identifier:          SQMdRTQanOsYWouPoxZ/Z5FNVd8GgMmVjED+bZdhR18=
Subject key identifier:   17:87:3B:39:D9:A7:CB:1F:8B:62:85:24:CF:6F:70:28:85:A2:77:60
Certificate issuer:       /CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
Certificate serial:       73663432C1D141C66DB6662918EBE06A48CC41D2
Authority key identifier: 69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231342e302f32342d3234203d3e203532343436.roa
Signing time:             Tue 04 Feb 2025 18:53:32 +0000
ROA not before:           Tue 04 Feb 2025 18:48:32 +0000
ROA not after:            Tue 03 Feb 2026 18:53:32 +0000
asID:                     52446
IP address blocks:        168.77.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 05:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:66:34:32:c1:d1:41:c6:6d:b6:66:29:18:eb:e0:6a:48:cc:41:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6928BF623B8218EBADD5ADBD079548CA945B90BE
        Validity
            Not Before: Feb  4 18:48:32 2025 GMT
            Not After : Feb  3 18:53:32 2026 GMT
        Subject: CN=17873B39D9A7CB1F8B628524CF6F702885A27760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:41:c9:b1:23:0b:be:cf:b1:4e:ee:1e:7c:
                    6d:e8:8f:28:39:27:3f:be:35:9c:7a:d0:da:54:a6:
                    0c:27:e8:8a:e8:90:5b:c6:89:9a:76:68:f9:87:d2:
                    92:1b:24:03:13:e2:e1:04:12:2f:8b:66:f0:bb:5b:
                    dc:68:2e:e9:65:44:8b:28:79:57:6f:a1:78:59:31:
                    5f:46:e0:57:7f:73:46:aa:93:cb:a5:cc:c4:69:25:
                    df:6e:c7:e4:c3:20:b2:94:57:74:fc:36:2a:87:cd:
                    c5:5b:e0:02:ad:f5:a0:72:da:4c:ea:7d:c0:eb:f9:
                    0a:32:fc:4a:74:ea:d8:3e:a6:9b:f2:f7:b0:6a:e3:
                    c5:97:74:84:ed:74:42:e1:09:b8:01:4e:b3:09:2c:
                    1f:72:f6:3b:ef:18:92:9b:77:49:a0:9d:a6:d8:4d:
                    e1:e6:8a:0d:3f:c4:78:7a:d5:2f:a5:cc:ec:07:45:
                    1b:6c:1c:e8:c5:d3:36:70:23:93:bc:96:5d:27:67:
                    15:ef:08:0d:9b:6f:7f:db:2e:00:91:d6:3e:ae:fc:
                    58:7d:7c:62:40:29:da:4e:81:ae:02:73:a9:c8:da:
                    e9:50:4f:9c:4c:ea:98:b8:0f:3e:a9:8e:6a:57:0b:
                    a9:bf:6d:c6:aa:bd:40:cd:00:dc:25:4a:52:4b:70:
                    2f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:3B:39:D9:A7:CB:1F:8B:62:85:24:CF:6F:70:28:85:A2:77:60
            X509v3 Authority Key Identifier:
                keyid:69:28:BF:62:3B:82:18:EB:AD:D5:AD:BD:07:95:48:CA:94:5B:90:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6928BF623B8218EBADD5ADBD079548CA945B90BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/47E14F30F0D003210DC380ED7F695CFEF8F51ACB23F18750237205725B739219/0/3136382e37372e3231342e302f32342d3234203d3e203532343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.77.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:57:45:ef:04:b8:e2:26:07:5e:78:84:50:2c:d8:0d:ec:8c:
         26:86:b6:2f:0d:3e:19:69:0f:43:54:a2:11:a4:1d:60:80:16:
         ba:ca:51:7d:5d:d2:45:62:22:91:84:17:c2:13:ff:ca:fd:c7:
         ad:9a:bd:95:04:42:72:13:b4:26:04:1d:c8:2d:fb:d2:04:7f:
         37:32:91:6e:30:16:dd:24:cd:fe:e1:ee:a5:87:d4:f3:f1:26:
         df:e7:03:da:1b:49:3c:10:3f:a3:4c:88:7c:8c:b6:b6:f5:c9:
         65:80:fe:b4:b3:11:01:51:b2:fb:bd:ac:f7:eb:f0:11:e0:75:
         14:ff:af:58:f2:fb:80:eb:28:54:81:12:c5:dc:ae:36:46:8b:
         0c:a7:08:63:33:ec:fe:40:47:aa:23:93:c9:87:b7:c8:31:82:
         f1:ed:82:4e:fe:87:f1:b9:2e:e8:02:b4:63:15:16:6f:a7:a1:
         c8:75:c5:5e:5b:7a:ca:d5:8a:f5:90:be:b6:9e:1b:22:dd:8c:
         b4:02:21:bf:90:34:79:c0:60:f3:38:ac:f7:0c:6d:ae:de:e7:
         2e:2e:3a:ab:0f:5f:de:36:f6:02:4c:1a:78:65:36:77:fa:3c:
         05:da:a8:9c:1b:a9:e5:96:8e:53:2a:fb:a9:ac:4a:f4:c9:db:
         51:fa:b4:b6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUc2Y0MsHRQcZttmYpGOvgakjMQdIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjkyOEJGNjIzQjgyMThFQkFERDVBREJEMDc5NTQ4Q0E5
NDVCOTBCRTAeFw0yNTAyMDQxODQ4MzJaFw0yNjAyMDMxODUzMzJaMDMxMTAvBgNV
BAMTKDE3ODczQjM5RDlBN0NCMUY4QjYyODUyNENGNkY3MDI4ODVBMjc3NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9WUHJsSMLvs+xTu4efG3ojyg5
Jz++NZx60NpUpgwn6IrokFvGiZp2aPmH0pIbJAMT4uEEEi+LZvC7W9xoLullRIso
eVdvoXhZMV9G4Fd/c0aqk8ulzMRpJd9ux+TDILKUV3T8NiqHzcVb4AKt9aBy2kzq
fcDr+Qoy/Ep06tg+ppvy97Bq48WXdITtdELhCbgBTrMJLB9y9jvvGJKbd0mgnabY
TeHmig0/xHh61S+lzOwHRRtsHOjF0zZwI5O8ll0nZxXvCA2bb3/bLgCR1j6u/Fh9
fGJAKdpOga4Cc6nI2ulQT5xM6pi4Dz6pjmpXC6m/bcaqvUDNANwlSlJLcC/nAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUF4c7Odmnyx+LYoUkz29wKIWid2AwHwYDVR0j
BBgwFoAUaSi/YjuCGOut1a29B5VIypRbkL4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80N0UxNEYzMEYwRDAwMzIxMERDMzgwRUQ3RjY5NUNGRUY4
RjUxQUNCMjNGMTg3NTAyMzcyMDU3MjVCNzM5MjE5LzAvNjkyOEJGNjIzQjgyMThF
QkFERDVBREJEMDc5NTQ4Q0E5NDVCOTBCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82OTI4QkY2MjNCODIxOEVCQURE
NUFEQkQwNzk1NDhDQTk0NUI5MEJFLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDdFMTRGMzBGMEQwMDMyMTBEQzM4MEVEN0Y2OTVDRkVGOEY1MUFDQjIz
RjE4NzUwMjM3MjA1NzI1QjczOTIxOS8wLzMxMzYzODJlMzczNzJlMzIzMTM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKhN1jAN
BgkqhkiG9w0BAQsFAAOCAQEAEldF7wS44iYHXniEUCzYDeyMJoa2Lw0+GWkPQ1Si
EaQdYIAWuspRfV3SRWIikYQXwhP/yv3HrZq9lQRCchO0JgQdyC370gR/NzKRbjAW
3STN/uHupYfU8/Em3+cD2htJPBA/o0yIfIy2tvXJZYD+tLMRAVGy+72s9+vwEeB1
FP+vWPL7gOsoVIESxdyuNkaLDKcIYzPs/kBHqiOTyYe3yDGC8e2CTv6H8bku6AK0
YxUWb6ehyHXFXlt6ytWK9ZC+tp4bIt2MtAIhv5A0ecBg8zis9wxtrt7nLi46qw9f
3jb2AkwaeGU2d/o8BdqonBup5ZaOUyr7qaxK9MnbUfq0tg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:12:16 2025 by rpki-client