Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3234203d3e20323633383031.roa
File:                     3136382e3139362e3234342e302f32322d3234203d3e20323633383031.roa (raw, json)
Hash identifier:          oc7zxSIfBj6ExWFAg2wC2ma9S+hZX3g/NisFhU8wtWY=
Subject key identifier:   E8:F4:6B:79:D4:A4:B5:36:33:C3:9C:CC:C1:D8:37:CE:D7:93:5A:C6
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       74363F896D3266B2F63847FC0142FB451F051700
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3234203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:04 +0000
ROA not before:           Mon 05 May 2025 00:10:04 +0000
ROA not after:            Mon 04 May 2026 00:15:04 +0000
asID:                     263801
IP address blocks:        168.196.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:36:3f:89:6d:32:66:b2:f6:38:47:fc:01:42:fb:45:1f:05:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:04 2025 GMT
            Not After : May  4 00:15:04 2026 GMT
        Subject: CN=E8F46B79D4A4B53633C39CCCC1D837CED7935AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:c6:6a:bb:74:af:91:f4:ee:f3:b9:88:a4:
                    47:70:72:44:ff:65:f9:e0:a6:38:ba:77:4a:8f:cd:
                    a7:3f:94:3d:a8:f1:ed:0d:e9:eb:8c:f5:58:bc:fa:
                    a0:69:70:a0:40:f1:1a:c2:58:62:17:38:c6:61:60:
                    81:e1:a9:0a:5d:b4:eb:ea:c4:64:20:69:f5:ac:fc:
                    6d:68:fb:ed:7d:ce:04:05:7a:d0:8e:ed:06:e4:68:
                    be:90:9e:f4:2f:65:6a:ae:e8:64:77:5a:70:d7:33:
                    5e:98:09:ae:e2:dd:ae:b6:d4:4d:19:4b:aa:47:ac:
                    75:1d:d4:48:72:ff:b1:e9:fb:10:81:28:4a:59:75:
                    99:5e:ef:83:b6:e3:b5:6f:cc:a1:bc:89:4c:23:70:
                    e9:5f:d1:ac:cd:2a:87:b7:8b:0c:43:93:74:a3:74:
                    e8:b4:5a:83:d5:55:94:bd:f3:1d:4c:39:c2:d2:58:
                    19:ce:43:a6:6d:e5:00:af:bd:7d:76:ba:6c:3f:87:
                    f8:90:65:d8:fe:bc:fa:bd:97:ae:62:f4:ba:70:25:
                    81:ef:fd:f8:fa:88:2b:fb:83:03:6d:f9:11:ab:a5:
                    0c:23:eb:85:f5:76:58:3f:1f:a9:ba:30:a7:95:00:
                    87:26:db:f1:d9:85:b2:3f:00:f9:7d:d0:93:dc:01:
                    f1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F4:6B:79:D4:A4:B5:36:33:C3:9C:CC:C1:D8:37:CE:D7:93:5A:C6
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3234203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:37:fc:d7:0d:79:a7:bc:e4:b8:3f:a4:d6:8b:8b:4a:ba:69:
         06:01:3d:a6:1a:86:e7:07:6a:e4:f2:7a:fb:57:aa:92:4f:93:
         65:38:f4:ee:c5:97:4b:6f:e1:92:ef:ba:71:a1:ff:da:04:74:
         fe:29:5f:84:4e:30:e4:ba:0e:83:ef:8c:dc:3b:d7:9a:59:05:
         da:8e:de:29:82:a7:f8:b2:f5:ff:c8:78:7f:28:23:84:db:b2:
         cd:bf:bb:bf:00:6c:a3:6f:0f:e8:54:77:f4:07:db:31:72:ba:
         30:9b:4a:65:ca:46:65:8e:e5:fa:ea:c6:d7:da:1b:bf:69:a0:
         76:d5:5a:af:d4:16:4f:1a:e2:5f:a0:2f:ad:af:07:2e:7f:81:
         4e:12:01:ee:49:4a:77:85:2f:88:5b:07:ee:3f:10:32:e8:09:
         84:48:61:4e:68:ab:22:fa:5e:90:3f:dd:bc:e5:62:54:4a:cb:
         c5:9a:b4:75:cd:ab:45:9f:5e:85:3b:23:be:1b:ae:d9:b7:01:
         ba:7d:c2:b6:a1:8a:a9:e0:f2:49:1a:2b:12:5b:c1:c3:89:58:
         1c:c0:13:68:9e:24:f3:20:d2:82:a7:cd:af:0d:54:8d:f5:70:
         36:e0:0d:2e:c0:65:cc:1d:07:b8:dc:15:12:cd:eb:27:57:55:
         d6:23:ba:1e
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUdDY/iW0yZrL2OEf8AUL7RR8FFwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTQ1MERCRDQyMjRGMTJCOTFEOEIxMDM0NzFDNzlFMjE0
OTRBQUFCRTAeFw0yNTA1MDUwMDEwMDRaFw0yNjA1MDQwMDE1MDRaMDMxMTAvBgNV
BAMTKEU4RjQ2Qjc5RDRBNEI1MzYzM0MzOUNDQ0MxRDgzN0NFRDc5MzVBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwa8Zqu3SvkfTu87mIpEdwckT/
Zfngpji6d0qPzac/lD2o8e0N6euM9Vi8+qBpcKBA8RrCWGIXOMZhYIHhqQpdtOvq
xGQgafWs/G1o++19zgQFetCO7QbkaL6QnvQvZWqu6GR3WnDXM16YCa7i3a621E0Z
S6pHrHUd1Ehy/7Hp+xCBKEpZdZle74O247VvzKG8iUwjcOlf0azNKoe3iwxDk3Sj
dOi0WoPVVZS98x1MOcLSWBnOQ6Zt5QCvvX12umw/h/iQZdj+vPq9l65i9LpwJYHv
/fj6iCv7gwNt+RGrpQwj64X1dlg/H6m6MKeVAIcm2/HZhbI/APl90JPcAfGHAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6PRredSktTYzw5zMwdg3zteTWsYwHwYDVR0j
BBgwFoAU5FDb1CJPErkdixA0cceeIUlKqr4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83N0RDMEQ0MDhBMTIyMkMwM0JGNjJGRTdFQjEzRjJERDk1
OUFDMkJEMzUxRkZBQUYxMjY5Q0I3NkNFMUY4QkZCLzAvRTQ1MERCRDQyMjRGMTJC
OTFEOEIxMDM0NzFDNzlFMjE0OTRBQUFCRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FNDUwREJENDIyNEYxMkI5MUQ4
QjEwMzQ3MUM3OUUyMTQ5NEFBQUJFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzdEQzBENDA4QTEyMjJDMDNCRjYyRkU3RUIxM0YyREQ5NTlBQzJCRDM1
MUZGQUFGMTI2OUNCNzZDRTFGOEJGQi8wLzMxMzYzODJlMzEzOTM2MmUzMjM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzMzODMwMzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
xPQwDQYJKoZIhvcNAQELBQADggEBAFg3/NcNeae85Lg/pNaLi0q6aQYBPaYahucH
auTyevtXqpJPk2U49O7Fl0tv4ZLvunGh/9oEdP4pX4ROMOS6DoPvjNw715pZBdqO
3imCp/iy9f/IeH8oI4Tbss2/u78AbKNvD+hUd/QH2zFyujCbSmXKRmWO5frqxtfa
G79poHbVWq/UFk8a4l+gL62vBy5/gU4SAe5JSneFL4hbB+4/EDLoCYRIYU5oqyL6
XpA/3bzlYlRKy8WatHXNq0WfXoU7I74brtm3Abp9wrahiqng8kkaKxJbwcOJWBzA
E2ieJPMg0oKnza8NVI31cDbgDS7AZcwdB7jcFRLN6ydXVdYjuh4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:03:22 2025 by rpki-client