Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235322e302f32322d3232203d3e20323633373538.roa
File:                     3136312e3233382e3235322e302f32322d3232203d3e20323633373538.roa (raw, json)
Hash identifier:          ZQbCvTlFbfRpxwLmRFhLKiEHCi8dYrWB4ceP3fNKjtI=
Subject key identifier:   61:9F:3A:48:3D:6D:DD:CF:D5:99:58:D6:1E:D4:74:9D:A4:0B:B5:11
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       29094E17EABC5A964FDAA8D9A6B3B60790DC8415
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235322e302f32322d3232203d3e20323633373538.roa
Signing time:             Tue 04 Feb 2025 18:28:09 +0000
ROA not before:           Tue 04 Feb 2025 18:23:09 +0000
ROA not after:            Tue 03 Feb 2026 18:28:09 +0000
asID:                     263758
IP address blocks:        161.238.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 04:30:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:09:4e:17:ea:bc:5a:96:4f:da:a8:d9:a6:b3:b6:07:90:dc:84:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: Feb  4 18:23:09 2025 GMT
            Not After : Feb  3 18:28:09 2026 GMT
        Subject: CN=619F3A483D6DDDCFD59958D61ED4749DA40BB511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:db:66:0a:63:0d:cc:d1:50:bd:7a:97:2a:
                    b8:4e:7a:65:3d:ac:25:40:7e:88:2d:39:7a:5e:c4:
                    35:de:4b:9e:28:54:ef:b0:6c:aa:0e:3d:03:ea:5e:
                    e7:88:8b:6d:67:20:ac:97:0a:7e:25:a2:1e:c4:7b:
                    06:f7:da:b9:26:dc:7b:dc:46:be:e2:e0:18:a3:6c:
                    18:fb:d4:dc:bb:29:fd:30:90:3d:e1:09:08:ae:09:
                    b6:a1:4d:82:bd:d1:9b:63:0f:e1:d8:60:08:91:17:
                    48:06:cc:81:d5:0f:f7:5b:ac:be:b6:38:e7:b8:e2:
                    4d:16:9d:e0:43:44:63:2e:c0:d1:63:bf:53:01:88:
                    07:59:e8:da:73:7c:b2:a2:41:e3:27:97:3f:01:f0:
                    69:4f:13:b9:9e:3b:de:63:62:2c:f8:18:a9:64:e6:
                    34:e2:f8:c1:c5:3f:e9:2f:16:c1:63:c9:ee:f1:a2:
                    07:7b:ce:e6:ad:e7:8d:e2:03:b2:f4:c8:a4:64:47:
                    9f:7c:70:9a:79:00:0a:09:eb:7e:b6:db:27:9a:35:
                    20:58:0d:14:86:4c:a8:79:1f:4a:2e:f1:ad:c6:7d:
                    32:43:c1:67:75:68:8a:71:5a:de:51:dc:d0:48:18:
                    81:fe:0c:a4:45:11:c4:93:bb:9d:f2:95:25:10:c3:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9F:3A:48:3D:6D:DD:CF:D5:99:58:D6:1E:D4:74:9D:A4:0B:B5:11
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3235322e302f32322d3232203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:9f:7d:b7:fd:b6:36:04:ce:3e:ee:72:a4:7e:5c:9b:2a:f6:
         26:ea:de:a7:db:0c:04:5a:4a:d8:e2:e4:d9:22:bd:16:18:1e:
         66:bd:be:f1:ec:c2:f6:d5:b4:1f:07:ac:bc:db:0e:b8:41:a4:
         47:6b:8d:50:f1:b4:13:5b:b0:7a:59:8a:6b:a8:55:e9:6c:1b:
         9b:3b:f5:c1:56:a2:85:c7:cb:e4:e1:23:46:d0:23:2a:a2:fc:
         10:76:d1:91:d3:67:82:48:2e:08:e0:90:ae:ea:2d:7b:74:eb:
         1a:4a:20:12:30:7f:6c:a4:5a:27:2b:4c:14:57:13:48:5f:5e:
         5c:4a:93:fb:00:0c:b5:1b:e5:c0:a3:55:c0:e6:0e:c1:10:81:
         5c:38:4f:9b:1e:fc:c5:19:27:b6:8d:99:ba:df:82:97:b2:0a:
         87:01:fa:45:17:f3:33:11:ca:b7:d0:04:8a:ad:f2:51:4f:e0:
         a1:d0:63:17:d9:af:93:6e:88:29:5d:fc:60:d2:47:ad:75:94:
         21:ca:7c:1d:e0:d9:0a:f9:64:7e:b4:93:23:6f:4d:ce:4f:a9:
         c4:42:b0:a0:52:4b:51:62:bc:a2:ef:95:fd:59:cb:46:42:f5:
         14:1d:6e:f6:ea:64:3d:d2:86:44:c4:1b:b2:af:05:52:da:ff:
         90:5d:46:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:52:30 2025 by rpki-client