Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/3136382e3138312e3136302e302f32322d3234203d3e20323634363836.roa
File:                     3136382e3138312e3136302e302f32322d3234203d3e20323634363836.roa (raw, json)
Hash identifier:          3LqXoui+1QgHbuSk00159aaKpZiBWgIEZkfu1zKjxUU=
Subject key identifier:   56:CD:58:A3:7F:40:0E:84:6C:02:9E:0A:1F:CB:B3:FA:F6:16:56:2F
Certificate issuer:       /CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
Certificate serial:       51243822E001675D6F13D647EE76B02F275796AC
Authority key identifier: 9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/3136382e3138312e3136302e302f32322d3234203d3e20323634363836.roa
Signing time:             Tue 04 Feb 2025 18:39:06 +0000
ROA not before:           Tue 04 Feb 2025 18:34:06 +0000
ROA not after:            Tue 03 Feb 2026 18:39:06 +0000
asID:                     264686
IP address blocks:        168.181.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:24:38:22:e0:01:67:5d:6f:13:d6:47:ee:76:b0:2f:27:57:96:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949
        Validity
            Not Before: Feb  4 18:34:06 2025 GMT
            Not After : Feb  3 18:39:06 2026 GMT
        Subject: CN=56CD58A37F400E846C029E0A1FCBB3FAF616562F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:f5:4e:4f:c4:37:36:f5:ff:1e:a6:b5:dd:
                    d6:63:a4:35:3f:8d:60:fa:ab:ee:39:6c:df:8e:02:
                    3f:98:7e:0e:54:bd:40:08:2a:63:68:8c:82:68:01:
                    f6:bd:83:0e:0d:76:33:21:66:91:6f:32:35:5b:d5:
                    91:e1:f9:07:76:dd:a4:a6:40:95:8e:d5:c0:f2:33:
                    25:8b:7f:21:5f:bb:30:69:b7:f9:7a:1e:72:d6:ef:
                    e3:55:95:02:6e:c9:38:0e:96:dc:cf:22:ac:57:01:
                    d8:22:00:ea:f0:9d:34:f1:ea:c9:67:bf:ca:37:2c:
                    13:ba:7c:23:28:6c:45:4c:31:5a:d2:c4:54:d0:4c:
                    54:8e:66:de:5d:8e:50:ea:a2:cc:1b:b5:94:c8:04:
                    37:f2:3c:f0:da:41:bf:88:63:e0:19:b5:41:05:77:
                    28:8e:60:aa:e9:22:ab:78:cf:8a:ff:35:18:e6:3c:
                    56:8d:e5:95:92:7f:49:b2:b0:58:96:5a:b5:04:d4:
                    c9:cb:42:71:c2:5a:34:13:85:10:87:f5:f0:63:ca:
                    7d:96:70:d4:ed:da:a2:41:de:ef:ae:d2:ad:86:b7:
                    cb:23:f7:42:1f:3c:a6:65:f6:f6:8a:03:b5:f0:6b:
                    e0:6d:5f:f8:33:40:0f:30:a7:59:a2:52:32:c4:b9:
                    bd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CD:58:A3:7F:40:0E:84:6C:02:9E:0A:1F:CB:B3:FA:F6:16:56:2F
            X509v3 Authority Key Identifier:
                keyid:9B:C9:BC:0D:CE:47:59:BD:6C:DE:C9:CB:22:43:46:C1:09:F4:C9:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BC9BC0DCE4759BD6CDEC9CB224346C109F4C949.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E48BD5125BE4EF36850271C1273146566C6040F126E3B70C75CDE1052E4BC55/0/3136382e3138312e3136302e302f32322d3234203d3e20323634363836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:4f:a8:16:fc:c8:6c:ee:50:3f:18:a7:21:55:e0:b2:8f:19:
         df:d2:46:5a:2a:7a:41:69:85:24:fe:c8:44:98:59:2a:d0:80:
         81:08:db:33:13:a7:8e:59:32:dc:c8:4d:48:87:cc:6e:8b:4f:
         e6:d5:f1:11:6a:e7:1f:75:86:a5:18:a6:2a:58:af:d5:67:46:
         33:fa:b4:50:d8:7d:64:78:de:dd:dd:d9:23:91:f5:94:01:8b:
         a8:2d:e4:23:f4:35:b9:ff:a7:de:f7:9e:c5:f7:09:c7:f8:ba:
         46:34:ba:c8:51:2d:9c:12:e3:e7:60:7d:85:cd:8c:af:2f:7c:
         cc:9a:dc:ea:2b:25:8c:e0:77:f2:af:2f:cc:44:74:6c:51:37:
         9d:07:a6:7d:cb:a2:98:0d:a5:f7:b9:f4:ae:4f:1e:b2:94:e0:
         d9:10:b8:dd:dc:c5:33:5f:39:36:33:e0:46:c8:54:97:3c:5c:
         c4:30:2b:ab:e5:5d:d8:b7:a9:d8:3d:0a:e2:4c:cb:8d:fb:a8:
         8f:2b:95:17:fd:be:bc:8e:a4:84:04:29:d3:6b:20:d3:f4:8c:
         77:aa:c6:84:90:8f:d1:23:e9:4d:6e:81:fb:b2:70:96:9e:d0:
         00:a3:fa:80:39:74:1e:6a:c5:33:c1:13:8c:30:19:bd:30:cf:
         3a:c7:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:37 2025 by rpki-client