Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa
File:                     3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa (raw, json)
Hash identifier:          4u4nSIKaW1/Fzul6GYK5dHWtUoU/VDqCqtuVbPKj+GU=
Subject key identifier:   35:D2:CA:35:FF:38:EC:23:9F:E2:63:4E:F5:D2:05:51:88:FD:F2:AD
Certificate issuer:       /CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
Certificate serial:       054D8320336863C00AFCEABC5BD6A2E1E0965200
Authority key identifier: 9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa
Signing time:             Tue 04 Feb 2025 18:09:34 +0000
ROA not before:           Tue 04 Feb 2025 18:04:34 +0000
ROA not after:            Tue 03 Feb 2026 18:09:34 +0000
asID:                     265738
IP address blocks:        164.163.128.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 16:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4d:83:20:33:68:63:c0:0a:fc:ea:bc:5b:d6:a2:e1:e0:96:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E
        Validity
            Not Before: Feb  4 18:04:34 2025 GMT
            Not After : Feb  3 18:09:34 2026 GMT
        Subject: CN=35D2CA35FF38EC239FE2634EF5D2055188FDF2AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c5:83:59:17:bb:88:25:a0:98:8a:7c:e2:bc:
                    9d:2b:20:18:01:32:34:5c:87:2a:4e:a6:e8:03:e0:
                    2e:32:f2:80:a2:0e:c0:e0:7c:ab:38:b1:ef:35:7d:
                    1d:9d:47:39:ef:78:19:7d:b4:fd:51:a9:c8:98:08:
                    ba:75:41:aa:12:03:ee:10:fd:ad:7e:0b:56:87:40:
                    1c:44:c4:9f:38:dd:3a:ec:91:4f:b1:25:6b:77:b5:
                    37:05:e3:c0:45:cd:e0:7d:49:fd:56:1b:19:16:bd:
                    af:b4:79:da:df:9b:d1:99:05:04:d6:be:41:86:86:
                    d1:51:fe:4c:40:c9:ee:93:76:96:85:03:fe:6f:8b:
                    7b:9a:57:fa:00:b7:86:f1:d6:7e:48:1b:89:a2:36:
                    c7:ea:61:52:01:8b:a6:6c:93:84:5e:f0:1a:98:35:
                    8c:fe:5a:0c:7e:a1:b3:67:b6:d0:20:c4:de:cb:e3:
                    13:2f:65:b1:b2:83:6b:67:d1:f7:6b:bf:29:cf:18:
                    4a:a2:6d:a4:55:34:42:77:a6:2e:7a:4d:6b:d5:38:
                    e3:e9:b5:d1:a6:95:37:58:bc:ab:19:e2:ad:fd:5c:
                    cf:4e:c9:f8:b5:85:ea:57:32:86:85:10:b4:09:08:
                    bc:74:d3:7f:a7:bb:90:7d:53:c7:06:db:7a:46:13:
                    3e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:CA:35:FF:38:EC:23:9F:E2:63:4E:F5:D2:05:51:88:FD:F2:AD
            X509v3 Authority Key Identifier:
                keyid:9F:8E:C7:CE:66:A6:7C:20:F1:A2:4E:22:0E:07:01:A4:B8:12:9C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F8EC7CE66A67C20F1A24E220E0701A4B8129C9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68CFB0FCBC226AFC08760338ADBF84DD9A5B072396FBCE375EB0685B506A99FB/0/3136342e3136332e3132382e302f32322d3234203d3e20323635373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:06:e1:3c:51:5e:f1:a8:58:4d:0e:d1:a7:8d:be:3f:8e:a2:
         dd:16:c9:be:a5:80:4e:59:29:06:99:43:91:0a:ee:1a:dc:d0:
         f5:09:3c:9c:09:9c:22:d5:d1:50:0f:4d:07:27:05:ec:da:e8:
         5c:62:af:da:0a:b1:5d:27:59:20:bd:80:da:d5:18:3e:d3:23:
         4d:04:3e:6f:19:72:fd:db:8a:b9:d8:bd:3c:ad:5c:3c:4e:3a:
         3d:7a:45:0b:85:10:12:70:e1:3a:85:35:3b:bc:5d:a3:64:93:
         2a:59:62:f6:ac:1c:7c:99:92:39:10:40:a0:54:10:24:03:3a:
         a7:0d:8f:59:33:5b:83:db:33:92:0a:71:83:c9:77:38:97:e9:
         0c:6d:8a:ad:82:b0:ef:e0:32:46:52:9c:bf:af:00:ff:49:17:
         d4:02:58:a8:1d:5c:97:f0:5d:16:05:11:9b:cf:1e:bd:24:e2:
         15:4f:35:95:5b:ff:93:e4:28:48:4a:e2:11:68:7b:fa:d4:80:
         4a:ce:82:be:52:99:40:b7:30:0d:dc:f6:24:21:a7:2d:e4:68:
         a8:a6:e2:d3:7b:08:a7:2f:30:dd:af:05:0f:7d:09:d2:2a:bc:
         06:c5:59:0e:ad:57:24:f4:b8:6b:e3:90:22:70:75:f4:b1:f7:
         a6:31:8f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:09 2025 by rpki-client