Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa
File:                     3136382e39302e37342e302f32332d3233203d3e203532343933.roa (raw, json)
Hash identifier:          o+e6ePFLWl0URAuElpyc3eyCVFozt8SnNzh1cLIGo1k=
Subject key identifier:   D4:91:8B:14:BF:D6:3A:36:66:3D:3F:EE:73:1C:6D:E8:95:B1:65:48
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       219D7C22433D83E2282588B3B2470F2B027D0421
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa
Signing time:             Tue 04 Feb 2025 18:13:35 +0000
ROA not before:           Tue 04 Feb 2025 18:08:35 +0000
ROA not after:            Tue 03 Feb 2026 18:13:35 +0000
asID:                     52493
IP address blocks:        168.90.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:9d:7c:22:43:3d:83:e2:28:25:88:b3:b2:47:0f:2b:02:7d:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Feb  4 18:08:35 2025 GMT
            Not After : Feb  3 18:13:35 2026 GMT
        Subject: CN=D4918B14BFD63A36663D3FEE731C6DE895B16548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:97:9f:f7:d8:7f:b8:eb:c3:07:2c:28:44:
                    79:23:e2:69:e7:b8:d5:50:93:bb:07:0a:84:cc:5d:
                    62:5f:c7:df:39:77:c1:da:6c:dc:5c:21:96:be:12:
                    39:56:89:c0:76:1b:78:41:62:06:df:a8:ac:fc:9f:
                    30:cc:91:20:82:8e:32:97:1b:9b:fd:6a:8e:8a:9a:
                    5e:51:f6:35:ac:94:a0:e9:1e:8f:2f:2b:65:44:9e:
                    50:1f:4d:d3:41:c9:ad:9a:5c:5d:13:e4:71:30:1f:
                    8e:8a:86:3f:a8:16:95:f9:f3:1e:49:f6:99:e7:26:
                    83:3e:59:ff:09:d6:51:8e:fe:75:51:db:cf:94:69:
                    a7:f0:86:a5:2c:4e:e9:b8:6f:91:32:54:13:38:60:
                    ee:4d:36:ef:e4:2e:b4:56:1d:9d:3f:ff:5c:21:26:
                    0e:b6:79:b5:8c:37:76:82:54:bd:e2:f8:95:42:06:
                    0f:fa:c5:59:ab:cb:3a:02:98:0c:7a:d3:42:5c:36:
                    26:12:8c:79:82:53:26:c3:1a:ff:24:18:e1:ef:37:
                    69:80:c4:30:67:76:59:51:43:dd:07:80:12:6a:86:
                    77:b8:da:1a:7a:af:4c:cc:b2:bf:94:91:a4:2d:5f:
                    6d:12:ee:6c:8d:9a:ee:af:bd:f0:af:10:27:65:8a:
                    78:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:91:8B:14:BF:D6:3A:36:66:3D:3F:EE:73:1C:6D:E8:95:B1:65:48
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3136382e39302e37342e302f32332d3233203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:13:18:62:1a:f8:cb:36:eb:e2:6a:24:33:75:56:3c:f1:69:
         19:57:99:f0:1f:1e:c8:47:1e:9c:74:87:f8:59:12:69:30:81:
         9d:ad:67:c6:59:59:0d:fb:c6:9a:7f:e1:86:47:d3:a1:bf:c2:
         38:46:54:1f:38:4c:a1:c7:19:1c:f1:25:5e:0b:a3:7b:03:08:
         1e:20:ec:67:f8:84:ee:98:21:f5:47:47:7d:64:6d:a8:2b:d7:
         c5:0a:e1:d8:bc:5d:a6:eb:ee:73:a8:ca:6d:5b:b9:a9:35:a3:
         9a:3b:08:67:d5:50:3d:8f:88:6e:bc:18:c1:8f:16:13:df:0a:
         0a:eb:c7:85:2c:5b:5c:9a:93:b5:63:ea:db:38:e9:3a:9c:9c:
         bd:11:4b:52:e0:65:4b:d0:61:d6:4c:aa:29:75:d6:81:f7:3a:
         23:2a:33:22:1c:a7:3c:fe:ef:50:3b:7e:b8:f9:08:1b:21:f9:
         c2:81:be:b5:74:45:a5:23:72:d5:a5:bb:56:99:d5:10:00:3a:
         11:e0:41:19:88:1f:a4:aa:42:02:55:60:8d:c7:db:09:db:83:
         0d:50:26:ea:74:93:77:31:7a:d4:a1:e6:e8:87:54:4a:03:84:
         b8:2e:98:ee:3a:d5:4c:fd:eb:a9:21:c1:38:1b:02:36:20:a8:
         b4:d6:ee:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:24:54 2025 by rpki-client