Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
File:                     3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa (raw, json)
Hash identifier:          0k9qDpTmLE2nbCuOYGwHhpQG6NprgyA5OYqIcFmQjes=
Subject key identifier:   34:5C:24:6C:DB:5B:EB:A6:73:B8:90:63:1A:66:E1:4F:87:FB:85:7F
Certificate issuer:       /CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
Certificate serial:       2FD95FB3DA076D41106D75EB87B626B0092ED3BE
Authority key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa
Signing time:             Tue 04 Feb 2025 18:49:17 +0000
ROA not before:           Tue 04 Feb 2025 18:44:17 +0000
ROA not after:            Tue 03 Feb 2026 18:49:17 +0000
asID:                     269750
IP address blocks:        168.194.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d9:5f:b3:da:07:6d:41:10:6d:75:eb:87:b6:26:b0:09:2e:d3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5
        Validity
            Not Before: Feb  4 18:44:17 2025 GMT
            Not After : Feb  3 18:49:17 2026 GMT
        Subject: CN=345C246CDB5BEBA673B890631A66E14F87FB857F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:46:ad:e7:36:d4:ea:85:1a:72:e0:d3:e9:
                    f5:5c:fc:81:e9:c6:c3:f2:bd:3f:d2:2e:02:50:1c:
                    76:c3:f5:5e:8d:e4:21:04:99:eb:cc:10:8c:c4:ab:
                    37:cb:a6:da:2b:fd:7a:17:84:fa:4d:4a:6b:84:93:
                    f4:19:73:5d:8d:ee:d0:e4:c5:5c:01:27:ef:d8:13:
                    3f:05:a2:76:fd:a5:d7:b2:94:cf:14:88:c3:6c:58:
                    50:dc:2a:85:ec:5a:be:7e:4e:eb:2d:ef:fe:9b:09:
                    d1:65:cd:98:23:87:27:21:01:b2:40:2b:7f:8f:19:
                    4d:ea:00:bd:dc:fb:24:21:58:4f:f4:f8:88:fa:79:
                    79:df:73:20:68:45:ea:9e:9f:19:9e:d0:c5:a6:04:
                    68:94:bb:71:18:e7:ac:3a:2a:e8:de:14:6a:2c:a2:
                    84:f6:c6:55:ab:0f:96:01:d8:76:11:24:0c:77:65:
                    98:d4:dd:29:3b:b3:d8:97:6a:0b:21:8e:b3:df:d8:
                    f9:46:63:2e:13:80:29:57:2b:5c:83:0d:88:30:b6:
                    fe:7d:57:88:c0:d6:85:da:a5:6c:e4:f5:64:98:ad:
                    fd:d5:27:b3:38:aa:60:c8:2b:6d:c7:5a:ef:29:58:
                    c9:ac:82:ce:99:ef:e0:d8:4b:25:08:08:c7:8c:53:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5C:24:6C:DB:5B:EB:A6:73:B8:90:63:1A:66:E1:4F:87:FB:85:7F
            X509v3 Authority Key Identifier:
                keyid:AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/3136382e3139342e3130382e302f32322d3234203d3e20323639373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:95:c2:51:ec:7d:f1:a9:6b:4b:6e:07:c1:ff:7a:23:b9:cb:
         ae:f7:be:79:7d:94:f7:12:6d:1f:50:3a:7b:c5:0b:2c:cf:3e:
         c6:b8:e3:e2:fe:37:a4:d2:88:f6:9a:5a:83:28:f8:1a:bf:39:
         9c:c8:91:fd:71:01:1c:cb:83:7a:f6:fe:06:22:9c:06:9d:f4:
         40:a8:da:6a:33:1f:c5:ab:b1:df:99:38:60:96:0e:39:d8:14:
         c4:a0:65:5e:95:4f:2f:8b:92:36:0f:0d:10:00:03:d0:82:6e:
         09:2c:91:df:3e:5e:ee:41:2c:2f:cf:fc:23:21:ce:1b:65:db:
         0a:bd:c1:29:e3:f7:48:2b:f8:57:85:e9:d8:56:a1:03:52:5a:
         3b:41:e0:45:05:c9:4e:68:2a:42:35:d9:76:26:37:e1:3a:44:
         e6:23:bf:88:8f:16:18:66:5f:b3:54:65:a0:b6:d6:f7:03:51:
         0c:0e:65:91:df:48:65:03:1f:8a:bc:3b:8e:ab:a6:55:50:fa:
         ac:dd:85:bb:5b:1b:8f:89:df:d0:49:f6:cd:52:fb:f4:3b:ec:
         f4:6f:18:a5:b8:36:4f:ee:b2:13:cd:9b:8b:13:f0:db:f8:7b:
         a7:bd:7b:61:91:d4:97:18:2f:c6:6c:1e:2a:ed:bf:f4:1f:93:
         87:73:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:55 2025 by rpki-client