Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa
File:                     3136382e302e3232312e302f32342d3234203d3e20323635353034.roa (raw, json)
Hash identifier:          5PjURqj26t7vX8MXTsk9SogH6tViRkXQpJnmo7wjxbg=
Subject key identifier:   07:57:AC:38:BE:18:78:57:EB:79:50:79:AE:88:81:7A:C5:86:69:A3
Certificate issuer:       /CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
Certificate serial:       5A65D289F60EF8AF1D1B6915098C704DA369D21D
Authority key identifier: 1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa
Signing time:             Tue 04 Feb 2025 18:27:36 +0000
ROA not before:           Tue 04 Feb 2025 18:22:36 +0000
ROA not after:            Tue 03 Feb 2026 18:27:36 +0000
asID:                     265504
IP address blocks:        168.0.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl
                          rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 20:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:65:d2:89:f6:0e:f8:af:1d:1b:69:15:09:8c:70:4d:a3:69:d2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D60040EDE066CB0A53E8AF443F0D85DA89D7F68
        Validity
            Not Before: Feb  4 18:22:36 2025 GMT
            Not After : Feb  3 18:27:36 2026 GMT
        Subject: CN=0757AC38BE187857EB795079AE88817AC58669A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:c6:03:64:58:80:78:fb:c7:9f:4a:9e:11:
                    c9:10:fc:86:0d:07:da:5d:60:0c:56:95:6c:09:0b:
                    05:f6:e1:3c:37:55:8f:b0:9b:54:95:2b:48:6c:f1:
                    41:75:4a:51:db:ee:fd:66:f7:49:57:ca:a0:40:b9:
                    c9:77:69:fd:ac:20:36:f5:f0:92:1f:70:f0:e9:df:
                    a6:28:7d:66:48:24:23:f7:72:23:58:05:e0:8d:08:
                    56:3b:a0:09:10:cb:13:d5:6a:6d:6c:92:25:56:ad:
                    ad:5e:2e:5b:8a:a4:8c:23:ec:00:7c:99:de:d9:42:
                    a6:d9:a2:18:25:0e:7d:74:33:b3:72:42:01:f9:94:
                    dc:2b:10:88:b3:7a:e0:54:b7:e7:ad:cc:ad:d3:2d:
                    0d:04:28:2f:2b:2f:97:67:ca:32:cf:51:0a:98:28:
                    0f:ef:48:cb:d6:01:ef:37:b0:1b:5d:2e:8e:69:cc:
                    3c:6f:07:2d:5d:64:ca:dd:7d:06:90:92:97:31:d7:
                    c5:b8:ba:b0:81:81:34:75:a9:37:b6:87:9f:e3:50:
                    7a:68:2a:7a:4d:3f:90:22:a8:f4:ee:d9:b5:23:76:
                    8e:1d:7b:00:a4:87:17:0b:ff:b7:92:56:3d:57:f8:
                    57:2a:4f:48:49:f4:7f:3c:d3:96:ba:7a:f9:01:0a:
                    31:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:57:AC:38:BE:18:78:57:EB:79:50:79:AE:88:81:7A:C5:86:69:A3
            X509v3 Authority Key Identifier:
                keyid:1D:60:04:0E:DE:06:6C:B0:A5:3E:8A:F4:43:F0:D8:5D:A8:9D:7F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D60040EDE066CB0A53E8AF443F0D85DA89D7F68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/496497EF299227274C2063BD972DB97CB241EAC0AA62932C9E772B9D451C778C/0/3136382e302e3232312e302f32342d3234203d3e20323635353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:35:7f:34:a3:2f:b0:44:8a:fe:33:8c:fe:c5:4a:60:34:
         c7:a4:26:25:41:19:e4:6a:98:3e:c7:d4:96:f3:ea:70:a9:4c:
         db:e1:e9:c3:1a:46:9a:18:b3:c6:ff:4e:33:18:f3:8f:e1:2b:
         71:59:ec:55:b8:10:29:06:58:ce:d0:3e:08:03:af:ad:e7:f0:
         e3:ee:9d:1c:32:f4:25:18:45:d5:46:87:28:ca:2e:d9:57:05:
         9d:7c:f9:c7:e9:67:b8:6c:6f:b3:90:f5:c0:24:97:49:39:32:
         a9:d2:65:11:da:11:9a:b8:6b:7e:62:12:26:32:94:09:fb:83:
         e7:43:58:2d:96:60:87:b2:b5:7b:52:ae:d1:e9:03:12:74:28:
         ad:95:4a:72:da:c2:af:c8:13:b3:68:3c:69:ff:53:0a:3e:e9:
         34:f0:8d:84:93:0c:b1:06:09:17:66:57:1b:7c:32:2b:26:c7:
         63:27:55:cd:e2:4a:bc:2a:77:de:fd:97:f2:c5:1f:ed:48:87:
         da:36:08:07:bd:49:cf:1a:f4:f3:55:22:1c:9b:71:bc:ec:cf:
         d7:3b:e5:58:b3:d0:98:80:33:fe:51:fd:ab:20:19:57:9d:5f:
         6f:6e:96:70:79:26:8b:04:03:45:1d:80:2f:47:e3:9d:11:98:
         ab:76:e9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:59:06 2025 by rpki-client