Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
File:                     3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa (raw, json)
Hash identifier:          CpXuQeFgyuCjVRIimEXKmht6Lnz+O/zG8xt+TgHlSZ4=
Subject key identifier:   AB:4E:58:3B:08:81:C7:FF:04:7E:6E:0C:5B:7F:5F:97:73:85:F7:5C
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       306F5532C4F8012946DBEE45C4F6DA36BB4B7603
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa
Signing time:             Tue 04 Feb 2025 18:08:01 +0000
ROA not before:           Tue 04 Feb 2025 18:03:01 +0000
ROA not after:            Tue 03 Feb 2026 18:08:01 +0000
asID:                     263801
IP address blocks:        168.196.244.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 21:48:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6f:55:32:c4:f8:01:29:46:db:ee:45:c4:f6:da:36:bb:4b:76:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: Feb  4 18:03:01 2025 GMT
            Not After : Feb  3 18:08:01 2026 GMT
        Subject: CN=AB4E583B0881C7FF047E6E0C5B7F5F977385F75C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:e3:e1:b9:bd:c5:2f:4c:40:33:af:60:0a:
                    cf:0c:1c:af:02:af:9f:67:23:56:51:92:c5:9d:c7:
                    64:d7:4d:79:2d:d9:48:14:53:c9:80:5a:39:02:89:
                    93:3b:b6:93:09:80:cc:4d:49:0a:09:c2:0b:44:eb:
                    b5:53:15:75:10:c1:7f:df:59:8e:99:40:e8:d4:44:
                    7f:2a:d9:ed:e8:5e:b9:c8:a6:c1:13:78:0d:21:39:
                    be:d0:1e:50:86:19:75:c2:8c:ac:17:92:0f:19:bb:
                    96:bb:db:af:25:b0:f4:a5:d7:1b:5b:3d:90:d0:81:
                    86:6b:59:a4:c7:ab:30:b7:46:8d:72:50:ed:af:0f:
                    ef:0b:e7:9d:02:4e:2e:8b:dc:e9:5a:d5:1f:76:0b:
                    50:f2:49:a9:56:21:79:5b:bc:2c:b9:d9:10:01:56:
                    d6:1a:a0:6f:8c:27:30:45:95:d4:04:2c:30:c9:c1:
                    a8:38:47:0b:3e:de:1b:2a:34:4f:12:74:c0:fe:db:
                    e6:84:c9:f3:e3:4f:b8:ca:ea:88:56:e1:8a:d1:af:
                    8a:7a:33:01:66:78:8b:bb:15:28:8d:53:9e:03:8f:
                    a2:e0:d4:2b:56:3e:95:14:67:04:ef:12:cb:11:03:
                    c2:e7:b8:3e:28:17:40:50:86:db:27:44:70:e9:71:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4E:58:3B:08:81:C7:FF:04:7E:6E:0C:5B:7F:5F:97:73:85:F7:5C
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32322d3332203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:09:75:9e:3e:14:09:20:80:fa:6c:e8:bd:9f:db:3c:e9:f1:
         1d:13:a0:84:a2:78:ab:5c:77:84:ea:70:78:f8:78:be:19:c4:
         04:b4:7c:2d:e2:b1:e2:38:b3:f7:3a:f5:b5:9d:d7:0d:27:a3:
         d2:f1:54:ae:41:23:99:11:61:03:31:e7:d5:78:68:5a:9c:2e:
         77:17:e4:84:4c:a1:5f:7a:8c:8c:0e:eb:c8:c2:4f:79:e6:cb:
         d3:e3:30:e6:eb:01:08:f7:1e:72:01:04:08:01:41:a5:5b:bb:
         2d:3e:30:c5:31:c8:65:b0:51:32:87:08:2a:c2:80:a8:2b:e5:
         b5:69:bd:1c:50:df:47:7f:69:9f:60:52:59:e2:55:92:95:38:
         d9:f1:ad:80:c9:ef:fb:49:f8:f6:7d:d8:c1:41:4c:24:48:4e:
         f6:48:b1:2b:02:f7:3b:85:19:4c:d6:a7:9c:eb:bc:92:9e:d4:
         4e:56:a3:5d:d2:73:57:9c:58:dc:e5:cd:b3:3f:a0:69:9d:55:
         a9:d9:77:92:b4:4b:3c:07:6c:eb:78:20:16:06:91:64:2c:60:
         8d:2f:99:e6:64:f1:c4:26:cc:0e:ff:16:b2:8f:1b:86:ed:6f:
         6a:b4:69:db:54:31:06:18:a1:93:6d:95:65:08:7a:a6:a4:7a:
         36:24:2c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:36 2025 by rpki-client