Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
File:                     3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa (raw, json)
Hash identifier:          JCJjnYs3KAHdYzRH2KyUSwvxJx3MTDK1OvdRlza5olg=
Subject key identifier:   28:BA:39:8F:29:6D:80:AF:09:7F:93:B0:28:F1:44:29:EF:F4:F8:52
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       75A7FBF055914F2FB035D127340CCED773685B10
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa
Signing time:             Tue 04 Feb 2025 18:19:38 +0000
ROA not before:           Tue 04 Feb 2025 18:14:38 +0000
ROA not after:            Tue 03 Feb 2026 18:19:38 +0000
asID:                     28000
IP address blocks:        168.121.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a7:fb:f0:55:91:4f:2f:b0:35:d1:27:34:0c:ce:d7:73:68:5b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:38 2025 GMT
            Not After : Feb  3 18:19:38 2026 GMT
        Subject: CN=28BA398F296D80AF097F93B028F14429EFF4F852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:d1:f0:6a:c3:25:39:8e:d9:20:81:0f:28:
                    3b:81:f4:8b:67:96:3f:86:1c:2f:64:e3:46:9c:8b:
                    c6:41:ed:7a:1a:f9:42:9f:07:24:0d:61:b5:93:46:
                    17:c3:60:a3:da:de:10:59:82:8b:df:c7:dc:35:d2:
                    9b:d6:c1:b7:4a:f5:d8:73:a7:c4:df:fa:92:fe:2a:
                    02:e3:f4:af:7a:bb:dd:3b:10:a6:1d:94:16:b6:95:
                    91:7e:fa:b2:bf:ec:99:f5:32:bd:3a:a0:fe:24:69:
                    c7:8d:38:4f:91:57:f6:52:f5:26:84:21:48:6a:63:
                    68:34:20:35:39:59:3a:31:4c:bb:0b:b4:f2:a9:09:
                    9c:50:c1:10:5d:6c:a7:ae:81:9f:7e:89:34:2f:74:
                    84:25:f2:31:ef:41:f5:35:89:a7:30:ca:19:5c:8c:
                    4f:e9:3e:d0:ce:c4:04:08:24:4d:f3:8e:20:3b:0a:
                    c6:92:0e:46:92:12:de:89:e2:7b:a9:44:e8:ad:3a:
                    3a:28:b6:c3:36:8b:88:93:7a:22:6d:e1:bb:b0:51:
                    27:12:3a:cf:65:e1:2f:bd:16:50:e3:d2:59:5b:c1:
                    d6:6a:46:c1:83:df:26:1a:fe:1f:57:e9:31:96:62:
                    01:c7:47:ac:a2:3c:02:b4:65:6e:a0:6a:53:eb:d3:
                    72:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BA:39:8F:29:6D:80:AF:09:7F:93:B0:28:F1:44:29:EF:F4:F8:52
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3136382e3132312e3138342e302f32322d3234203d3e203238303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:8b:87:5c:3b:06:26:b7:93:9d:78:f5:ab:69:9c:1c:85:0f:
         86:5b:bc:c4:ae:81:78:2e:52:a1:1e:63:55:86:4b:5b:4f:5c:
         87:5c:74:f0:e8:aa:45:35:9f:ef:59:1d:92:42:a2:76:c0:7f:
         89:73:58:9d:07:e1:5a:fb:4e:14:4b:cf:5b:b8:e6:81:7f:3f:
         bc:a4:36:86:61:86:d1:20:f8:76:a3:7b:57:a4:dc:d0:35:4c:
         e8:84:b2:2d:c2:34:e4:55:6a:0a:ba:ab:a8:e6:a3:88:54:17:
         ee:21:bf:69:b0:0e:4b:a0:39:c0:b8:94:a9:05:31:c4:fc:e5:
         97:6a:71:ee:f5:c0:e4:80:25:d0:4f:67:a6:ca:35:9c:12:bd:
         5d:90:c8:20:56:ed:46:8e:7a:81:ee:59:53:03:d8:03:30:8b:
         34:a6:b1:c6:6a:d4:24:72:cf:b3:0f:af:84:7c:1a:11:b7:a7:
         35:5e:90:52:bf:f7:df:a7:da:1a:f2:64:29:ab:67:5c:56:3c:
         87:7a:7a:3e:e8:ed:cc:d4:c7:a3:b0:2b:f8:48:c5:ba:5e:c9:
         59:a1:8f:36:a4:4c:d9:b6:e4:06:f1:36:cc:01:e4:31:0e:3d:
         68:91:11:9d:e4:a9:e9:43:19:3d:67:2d:59:d4:18:f1:56:f9:
         e4:5b:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:31 2025 by rpki-client