Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e39302e382e302f32322d3234203d3e203238303735.roa
File:                     3136382e39302e382e302f32322d3234203d3e203238303735.roa (raw, json)
Hash identifier:          oUcEhdF00zP1VRN+0fJPdrVoJqYGdoMYLvV+r/PLF8E=
Subject key identifier:   4F:1B:37:FC:4D:A7:35:E1:EB:21:90:3B:4B:2D:B4:99:E7:AA:BE:A1
Certificate issuer:       /CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
Certificate serial:       02FA9ED0CF4C5C9CDF27A77A00E908305B454774
Authority key identifier: CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e39302e382e302f32322d3234203d3e203238303735.roa
Signing time:             Tue 04 Feb 2025 19:59:01 +0000
ROA not before:           Tue 04 Feb 2025 19:54:01 +0000
ROA not after:            Tue 03 Feb 2026 19:59:01 +0000
asID:                     28075
IP address blocks:        168.90.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:fa:9e:d0:cf:4c:5c:9c:df:27:a7:7a:00:e9:08:30:5b:45:47:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18
        Validity
            Not Before: Feb  4 19:54:01 2025 GMT
            Not After : Feb  3 19:59:01 2026 GMT
        Subject: CN=4F1B37FC4DA735E1EB21903B4B2DB499E7AABEA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:01:2c:1b:04:33:5d:a7:9d:0a:b3:e7:47:
                    7d:07:1e:94:22:dd:0a:d4:45:e8:3c:91:25:a6:d7:
                    dd:25:81:af:02:d3:c8:79:4f:f7:1c:b1:45:21:8a:
                    92:0b:59:e9:7f:70:f0:8a:bb:3d:5b:c1:3e:b9:d9:
                    47:c6:dd:51:ee:0d:8a:f1:76:e1:1d:36:72:5d:e3:
                    e2:74:47:fe:1d:6c:0b:69:67:23:d0:92:59:67:4d:
                    8a:f2:96:ce:1f:eb:3c:cb:12:09:3d:9a:64:d5:c1:
                    f3:09:04:d0:35:a1:67:33:22:9f:24:fa:b5:4f:8c:
                    37:7f:a9:b7:d4:87:1b:80:b9:ba:13:f3:ca:f4:26:
                    f0:67:3a:0a:8c:09:45:d5:93:36:42:a5:5c:5b:4f:
                    59:8f:e3:77:bf:10:b8:de:e6:a2:67:d6:57:78:a8:
                    ec:00:d0:03:70:37:6a:d9:a0:1d:da:c7:a8:e5:28:
                    1f:b8:a1:79:1a:50:69:92:44:f6:d3:df:73:54:33:
                    32:22:99:42:77:e6:31:f6:37:67:b6:6e:bc:c7:b3:
                    41:1c:ed:80:1e:a1:66:5c:91:aa:6a:e6:a4:c9:df:
                    66:b8:2f:9f:eb:f3:7a:bd:53:9b:96:e3:fe:1d:a7:
                    cc:95:54:51:34:ce:c8:b6:0d:42:48:23:99:53:10:
                    3a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1B:37:FC:4D:A7:35:E1:EB:21:90:3B:4B:2D:B4:99:E7:AA:BE:A1
            X509v3 Authority Key Identifier:
                keyid:CC:C7:DF:B2:C7:C9:FC:F2:F1:14:06:14:76:EC:B8:7B:57:3A:4E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CCC7DFB2C7C9FCF2F114061476ECB87B573A4E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B448B2F99F750DEE4FB3820BFDEEA5C070AC78AC1DDEAE4BA5B472B580DA264/0/3136382e39302e382e302f32322d3234203d3e203238303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:e0:3e:f3:b4:c3:4f:ef:54:3c:89:fb:a7:57:70:c3:6a:
         95:d9:7c:b0:1a:de:ec:b5:4c:5e:55:cd:fa:46:16:94:80:8f:
         35:81:2b:14:a1:d8:d0:bf:70:cc:44:16:b8:81:36:9d:24:d2:
         61:c4:32:74:a8:ce:85:a7:da:da:b5:be:1a:c1:1e:0b:7e:7a:
         c1:49:fe:8b:2a:02:4a:44:49:99:ee:0d:2e:1a:6b:7c:78:ec:
         cd:a7:bd:84:5a:94:a1:01:65:d2:da:94:f5:2d:9b:a3:33:c4:
         41:d5:d6:61:3d:32:e3:05:c9:eb:7a:a4:08:8b:40:f2:ab:e0:
         38:79:02:1c:67:ef:8e:d4:43:0f:45:b2:59:de:02:1a:32:ca:
         40:f5:e8:02:36:f8:25:a1:b9:0f:c6:2f:39:d3:ca:1e:4b:c2:
         01:c8:62:f3:be:56:7b:27:eb:64:96:8e:8f:dc:c6:94:92:15:
         d5:bf:ad:de:c2:f6:e0:2d:9b:07:8f:cb:85:65:5f:fc:ec:e9:
         61:7f:e8:77:45:eb:4d:12:f0:61:67:a7:73:0e:59:db:df:ba:
         af:93:6e:e3:40:25:a2:ae:61:d3:32:75:1e:d9:ba:27:a5:2d:
         eb:58:d0:15:59:61:83:dd:47:53:b1:43:2f:a4:04:a0:c7:95:
         49:2d:40:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:14 2025 by rpki-client