Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235352e302f32342d3234203d3e20323634363639.roa
File:                     3136382e39302e3235352e302f32342d3234203d3e20323634363639.roa (raw, json)
Hash identifier:          k5alFWYd9joz11t2BBbQN59Zr+OPgO6rVRohdWqto6Q=
Subject key identifier:   F4:E2:BD:F7:62:0E:6C:2A:0E:CE:04:3C:6B:3E:3B:81:20:9E:AF:11
Certificate issuer:       /CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
Certificate serial:       3F1BDF697F9DAB1AD2579CB952086205AF998137
Authority key identifier: 15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235352e302f32342d3234203d3e20323634363639.roa
Signing time:             Tue 04 Feb 2025 18:13:56 +0000
ROA not before:           Tue 04 Feb 2025 18:08:56 +0000
ROA not after:            Tue 03 Feb 2026 18:13:56 +0000
asID:                     264669
IP address blocks:        168.90.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 06:47:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1b:df:69:7f:9d:ab:1a:d2:57:9c:b9:52:08:62:05:af:99:81:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F
        Validity
            Not Before: Feb  4 18:08:56 2025 GMT
            Not After : Feb  3 18:13:56 2026 GMT
        Subject: CN=F4E2BDF7620E6C2A0ECE043C6B3E3B81209EAF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:de:41:6d:b9:a0:2e:b5:ea:35:10:34:bf:
                    c6:a9:c0:49:e4:36:98:fa:78:3f:67:ce:10:53:b3:
                    f7:61:10:ff:cf:3b:76:fd:8e:43:26:03:d9:fd:57:
                    63:91:f2:d3:72:b0:c5:33:ff:37:20:9b:6f:8e:d7:
                    99:e0:79:be:5e:19:1a:7f:c3:b6:bf:b5:a4:1b:18:
                    b9:c5:b6:d2:f1:aa:86:c7:a6:dc:f2:9e:0b:d1:b2:
                    34:23:5f:11:11:7f:3c:6c:00:eb:c1:7b:32:d3:ca:
                    18:eb:bb:53:94:d0:6a:b0:12:86:bf:ee:da:0b:71:
                    3a:1c:e0:c2:10:67:89:81:6b:1d:92:ea:6c:cf:6f:
                    38:79:b4:87:44:f9:7a:81:b3:61:09:f5:2b:1c:28:
                    1c:eb:da:79:88:a8:ab:16:6c:67:69:c2:4a:5e:65:
                    0a:51:94:e0:0c:df:35:35:c7:e5:ee:d9:2c:3d:9a:
                    57:63:f9:5e:b8:35:56:cc:a7:26:e0:74:d3:17:c5:
                    86:28:f8:e3:0d:84:01:18:43:c4:c7:87:7e:89:44:
                    71:a8:69:55:cb:0c:08:1e:ee:45:ec:c1:02:3f:9e:
                    7a:72:b8:7e:e3:7b:20:c8:3b:99:95:57:13:27:a2:
                    7a:68:99:88:03:82:88:3d:f0:28:6e:b9:df:25:83:
                    46:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E2:BD:F7:62:0E:6C:2A:0E:CE:04:3C:6B:3E:3B:81:20:9E:AF:11
            X509v3 Authority Key Identifier:
                keyid:15:A5:88:BF:1D:67:E5:DC:B3:1F:24:4E:E2:52:F2:EC:9B:9A:E7:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15A588BF1D67E5DCB31F244EE252F2EC9B9AE75F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57337BE77AA02D1F8B9BF5720D5000E8EDB5AFEFB51516EE0680C7E9003B5501/0/3136382e39302e3235352e302f32342d3234203d3e20323634363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:fd:9f:a0:d6:35:02:99:20:03:c2:b7:bf:b1:a2:e0:3c:
         18:7c:ed:85:2a:02:1d:77:3d:5b:e6:34:d2:f9:24:a7:58:25:
         be:8d:ef:3a:0a:9e:41:47:27:fc:24:eb:a6:78:46:86:68:2d:
         64:eb:ac:13:f4:fa:f2:d0:61:09:9e:6a:37:8c:30:03:1c:1f:
         62:81:8e:86:4a:71:09:00:34:38:bc:63:26:96:05:96:1a:f4:
         b6:2b:dd:3a:35:05:60:0e:9e:b9:8d:fc:10:a4:f2:b0:7b:1b:
         91:d5:1f:e3:80:60:38:c5:f8:a9:71:48:82:84:de:94:a4:1f:
         34:ef:5e:21:a5:6e:46:3e:4f:73:2e:50:01:cf:9b:89:fe:28:
         1d:7c:ff:c0:86:b1:18:3c:9d:75:05:34:81:cd:32:f8:fe:e0:
         ea:51:b7:82:44:e4:20:ef:50:0b:aa:fa:8e:7b:ba:aa:12:3f:
         b9:3d:a0:38:22:72:7f:55:dd:e6:2e:d1:71:34:ac:88:7c:e0:
         89:e9:a0:89:b6:60:a5:ba:82:4b:e5:55:ea:4d:47:5f:70:1a:
         05:84:d0:4d:28:87:fb:94:62:4f:a5:50:00:60:19:38:41:1f:
         93:42:e3:09:93:ec:c4:a9:cf:1a:e3:13:2e:e8:17:0a:21:cd:
         ca:c5:58:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:11 2025 by rpki-client