Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa
File:                     3136382e39302e37332e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          SIqpYfu2uihFt8PHvK5/UP7fXnq9UEI/kQEAdJ8635E=
Subject key identifier:   98:EF:BC:2B:6B:AF:1B:EB:ED:EE:2A:2F:0E:FD:4D:DF:21:A0:59:91
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       368FC67F55064A8EED36EFB04887135885B92183
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:33 +0000
ROA not before:           Tue 04 Feb 2025 18:08:33 +0000
ROA not after:            Tue 03 Feb 2026 18:13:33 +0000
asID:                     52493
IP address blocks:        168.90.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8f:c6:7f:55:06:4a:8e:ed:36:ef:b0:48:87:13:58:85:b9:21:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:33 2025 GMT
            Not After : Feb  3 18:13:33 2026 GMT
        Subject: CN=98EFBC2B6BAF1BEBEDEE2A2F0EFD4DDF21A05991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2a:be:65:36:ea:6a:60:c7:a7:91:14:2d:ad:
                    5e:8d:12:28:c6:57:9d:24:01:d2:86:2f:b3:88:c4:
                    0e:ab:33:c3:33:0f:66:7e:32:60:71:ca:22:f7:76:
                    17:3a:c5:b5:9c:38:5f:97:ef:79:c9:18:a2:fa:1e:
                    ce:f7:5c:0c:37:87:b6:3f:fd:ef:fb:83:b3:74:1b:
                    84:ab:b7:44:94:d7:15:c1:23:01:45:0f:7e:a1:01:
                    99:91:be:2b:dd:e3:f2:e2:26:88:cb:7b:37:09:bf:
                    94:07:56:f3:f1:71:d3:c7:f8:72:b9:ae:4d:78:da:
                    f6:65:e0:17:30:44:b9:c9:9f:96:e8:f5:3b:27:8d:
                    b5:b9:be:a2:54:3e:ea:27:c8:fe:46:fd:c5:81:b7:
                    51:89:fe:33:60:ce:49:60:f2:44:d4:88:ad:d1:f0:
                    5a:5d:4a:60:b6:b3:22:1c:37:fc:d4:cf:9c:3d:b4:
                    4b:4c:2d:8f:a3:f2:76:97:18:41:98:51:4c:54:cd:
                    d5:dd:f4:7c:40:33:00:4c:20:a5:68:9a:b7:7f:e3:
                    b7:a2:dd:d5:0f:16:a3:e2:ec:54:ed:ec:3d:49:ea:
                    5f:25:b5:f0:5b:48:2e:e3:d7:e2:03:e1:29:a5:34:
                    ab:88:05:b0:ab:da:ea:de:af:9e:44:25:0b:69:84:
                    57:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EF:BC:2B:6B:AF:1B:EB:ED:EE:2A:2F:0E:FD:4D:DF:21:A0:59:91
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37332e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:5b:11:58:9c:9b:e4:95:21:78:25:f1:af:53:ed:5d:49:af:
         d2:8b:23:06:59:0a:cc:d8:91:24:47:18:b8:5c:fa:52:20:8e:
         a0:06:ca:6f:c7:ea:15:3c:20:52:06:67:16:a0:53:01:32:06:
         16:cb:6d:66:7f:c3:b6:0c:cb:14:74:ef:c9:68:88:25:55:32:
         a6:69:69:17:ea:d3:bb:e5:1b:b5:42:96:31:a6:37:fc:c4:69:
         f9:76:81:5a:9a:ff:5a:05:2a:bc:41:bc:8e:8d:d9:6f:ae:b9:
         70:db:eb:a6:49:9d:88:f6:f2:60:e5:3b:f6:f6:b3:58:38:1e:
         e4:be:98:f3:53:50:45:25:0e:a4:30:89:a7:02:8f:04:81:e0:
         22:36:c3:de:d4:2f:16:bc:5f:56:37:a3:63:87:55:4d:90:c7:
         4b:a8:eb:b3:24:b2:b8:b2:5e:b5:2f:b2:b1:28:08:87:08:33:
         75:20:bd:a2:b2:20:26:ef:7a:b2:28:74:18:3a:21:b3:47:fd:
         66:7e:c1:b3:6e:b4:3d:e2:ba:65:cc:9b:8a:b7:a8:2b:93:a1:
         36:3d:e7:17:dc:f5:b9:ed:4a:99:88:de:69:3e:da:1d:85:3c:
         bb:eb:e5:00:c5:19:79:2b:fb:66:07:e3:db:ca:4c:ed:f8:7e:
         ae:4e:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:13 2025 by rpki-client