Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa
File:                     3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa (raw, json)
Hash identifier:          /YcSL0Y6wmJwm2p9sdoErUNkBQAQ7zq3DGnVhkXAknM=
Subject key identifier:   A1:B8:5B:87:B2:3D:68:E4:B7:88:95:8B:0B:DA:64:5E:20:C6:F1:0B
Certificate issuer:       /CN=FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01
Certificate serial:       18E5FD39D1A393F5CE43F8EE35F1EE1686E0071A
Authority key identifier: FF:70:5E:6B:16:A1:1D:C4:F8:2D:F3:8B:FA:1F:A8:80:41:A8:AA:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa
Signing time:             Tue 04 Feb 2025 18:21:10 +0000
ROA not before:           Tue 04 Feb 2025 18:16:10 +0000
ROA not after:            Tue 03 Feb 2026 18:21:10 +0000
asID:                     264697
IP address blocks:        168.232.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:e5:fd:39:d1:a3:93:f5:ce:43:f8:ee:35:f1:ee:16:86:e0:07:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01
        Validity
            Not Before: Feb  4 18:16:10 2025 GMT
            Not After : Feb  3 18:21:10 2026 GMT
        Subject: CN=A1B85B87B23D68E4B788958B0BDA645E20C6F10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:ea:fb:e0:7f:53:a9:42:f0:bc:96:e6:76:
                    83:9c:7c:d7:19:f8:57:23:47:fa:45:46:a3:ef:bf:
                    ba:b5:17:3a:fd:75:9a:75:73:77:96:10:2d:69:f2:
                    57:c3:6c:e4:d7:2c:57:9a:f2:6e:c1:4c:c4:85:50:
                    d7:63:c5:d3:43:4b:48:86:d1:07:6c:53:a6:6f:4e:
                    ab:58:1e:e0:ef:b4:12:4c:44:cc:36:57:9b:9b:b0:
                    0c:2d:4a:e7:dc:12:e9:28:cc:03:a1:8a:66:51:ba:
                    c9:06:a5:0f:dd:1d:57:aa:02:69:dc:fa:38:20:c7:
                    aa:c4:07:ef:52:dd:d3:d1:a3:b5:f1:0a:5f:31:a2:
                    47:bc:15:10:90:89:d7:57:29:4d:81:d7:d0:6c:0d:
                    98:8c:9d:da:79:2d:41:0a:59:6f:e9:c9:e2:14:40:
                    bc:63:69:5f:b5:2d:3d:c0:88:f2:ec:da:ae:16:05:
                    0c:ec:b2:0d:48:86:fa:2f:a6:f2:0d:e4:d7:91:3c:
                    7a:dd:63:d4:51:2c:1f:da:46:e2:8b:38:5d:12:8c:
                    a2:21:ed:12:90:06:02:dd:c4:2d:09:60:9e:a4:36:
                    3f:29:e1:d6:c4:58:ab:84:fa:92:44:77:09:8d:f8:
                    f5:61:a8:2e:7d:18:ad:45:0d:cd:7f:2b:73:3b:b7:
                    39:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B8:5B:87:B2:3D:68:E4:B7:88:95:8B:0B:DA:64:5E:20:C6:F1:0B
            X509v3 Authority Key Identifier:
                keyid:FF:70:5E:6B:16:A1:1D:C4:F8:2D:F3:8B:FA:1F:A8:80:41:A8:AA:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF705E6B16A11DC4F82DF38BFA1FA88041A8AA01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6103BEC3D841EEA99ABD68FCBB6EB655E4C46DC42DE9C24E8710298C7E58062C/0/3136382e3233322e38382e302f32322d3234203d3e20323634363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:ca:d5:e5:cc:45:67:f7:84:26:55:b2:f8:02:21:f5:7a:
         9e:55:60:dd:35:86:ed:45:a7:eb:98:35:dc:6b:7c:17:87:7c:
         98:0c:bc:69:66:47:1f:1b:fc:3b:b2:07:15:af:af:8e:a3:0a:
         e4:a6:f2:5b:4a:46:87:aa:c2:68:38:e9:be:12:05:c0:11:96:
         db:b3:05:ec:f6:7d:ea:73:1d:46:5c:72:07:ae:8d:e2:fb:f1:
         5c:95:e0:62:84:0e:7a:79:e1:47:1f:d8:35:5d:1e:d6:ef:9b:
         c6:69:68:be:4a:a1:18:29:2e:b4:b8:19:94:ea:5e:b8:ab:e4:
         7b:12:43:f2:b8:17:c3:83:ab:5b:ff:62:51:19:59:0b:98:da:
         c8:cc:23:2a:d3:07:ee:2f:23:4d:b9:2b:89:0e:c4:f6:cb:45:
         48:fb:8f:72:fe:98:b6:4a:ea:77:0c:25:60:90:15:cc:3c:e1:
         57:ec:4e:03:26:fe:6b:9e:7c:ea:57:15:10:ff:bc:67:a2:35:
         75:1e:02:b9:8b:13:3f:31:c5:73:a2:ce:2a:70:ed:90:ed:b9:
         eb:c7:09:55:7e:a8:7c:91:ef:5b:0c:38:b4:ae:3a:dc:21:8d:
         29:7a:2e:6d:e1:61:a3:f4:db:27:f1:db:5d:03:01:4f:6d:f8:
         29:86:3a:61
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUGOX9OdGjk/XOQ/juNfHuFobgBxowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkY3MDVFNkIxNkExMURDNEY4MkRGMzhCRkExRkE4ODA0
MUE4QUEwMTAeFw0yNTAyMDQxODE2MTBaFw0yNjAyMDMxODIxMTBaMDMxMTAvBgNV
BAMTKEExQjg1Qjg3QjIzRDY4RTRCNzg4OTU4QjBCREE2NDVFMjBDNkYxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtNur74H9TqULwvJbmdoOcfNcZ
+FcjR/pFRqPvv7q1Fzr9dZp1c3eWEC1p8lfDbOTXLFea8m7BTMSFUNdjxdNDS0iG
0QdsU6ZvTqtYHuDvtBJMRMw2V5ubsAwtSufcEukozAOhimZRuskGpQ/dHVeqAmnc
+jggx6rEB+9S3dPRo7XxCl8xoke8FRCQiddXKU2B19BsDZiMndp5LUEKWW/pyeIU
QLxjaV+1LT3AiPLs2q4WBQzssg1IhvovpvIN5NeRPHrdY9RRLB/aRuKLOF0SjKIh
7RKQBgLdxC0JYJ6kNj8p4dbEWKuE+pJEdwmN+PVhqC59GK1FDc1/K3M7tzkBAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUobhbh7I9aOS3iJWLC9pkXiDG8QswHwYDVR0j
BBgwFoAU/3BeaxahHcT4LfOL+h+ogEGoqgEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MTAzQkVDM0Q4NDFFRUE5OUFCRDY4RkNCQjZFQjY1NUU0
QzQ2REM0MkRFOUMyNEU4NzEwMjk4QzdFNTgwNjJDLzAvRkY3MDVFNkIxNkExMURD
NEY4MkRGMzhCRkExRkE4ODA0MUE4QUEwMS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GRjcwNUU2QjE2QTExREM0Rjgy
REYzOEJGQTFGQTg4MDQxQThBQTAxLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjEwM0JFQzNEODQxRUVBOTlBQkQ2OEZDQkI2RUI2NTVFNEM0NkRDNDJE
RTlDMjRFODcxMDI5OEM3RTU4MDYyQy8wLzMxMzYzODJlMzIzMzMyMmUzODM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqOhY
MA0GCSqGSIb3DQEBCwUAA4IBAQBu88rV5cxFZ/eEJlWy+AIh9XqeVWDdNYbtRafr
mDXca3wXh3yYDLxpZkcfG/w7sgcVr6+OowrkpvJbSkaHqsJoOOm+EgXAEZbbswXs
9n3qcx1GXHIHro3i+/FcleBihA56eeFHH9g1XR7W75vGaWi+SqEYKS60uBmU6l64
q+R7EkPyuBfDg6tb/2JRGVkLmNrIzCMq0wfuLyNNuSuJDsT2y0VI+49y/pi2Sup3
DCVgkBXMPOFX7E4DJv5rnnzqVxUQ/7xnojV1HgK5ixM/McVzos4qcO2Q7bnrxwlV
fqh8ke9bDDi0rjrcIY0pei5t4WGj9Nsn8dtdAwFPbfgphjph
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:36:05 2025 by rpki-client