Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/3136382e3138312e38382e302f32322d3234203d3e20323731383130.roa
File:                     3136382e3138312e38382e302f32322d3234203d3e20323731383130.roa (raw, json)
Hash identifier:          FibOJ4AakCHOVB4yMtI4ec2KkvFxvY/wMiNlqQiER7g=
Subject key identifier:   C9:4B:80:E8:65:DD:CC:EF:72:8A:2F:3A:CE:4A:E7:A7:37:79:01:98
Certificate issuer:       /CN=82006612D78CE747BD2436D4D0450475F50B53D5
Certificate serial:       7AAEFAF509EA2A23A8EB85EE417003E1305A9594
Authority key identifier: 82:00:66:12:D7:8C:E7:47:BD:24:36:D4:D0:45:04:75:F5:0B:53:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82006612D78CE747BD2436D4D0450475F50B53D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/3136382e3138312e38382e302f32322d3234203d3e20323731383130.roa
Signing time:             Tue 04 Feb 2025 18:43:51 +0000
ROA not before:           Tue 04 Feb 2025 18:38:51 +0000
ROA not after:            Tue 03 Feb 2026 18:43:51 +0000
asID:                     271810
IP address blocks:        168.181.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/82006612D78CE747BD2436D4D0450475F50B53D5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/82006612D78CE747BD2436D4D0450475F50B53D5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82006612D78CE747BD2436D4D0450475F50B53D5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ae:fa:f5:09:ea:2a:23:a8:eb:85:ee:41:70:03:e1:30:5a:95:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82006612D78CE747BD2436D4D0450475F50B53D5
        Validity
            Not Before: Feb  4 18:38:51 2025 GMT
            Not After : Feb  3 18:43:51 2026 GMT
        Subject: CN=C94B80E865DDCCEF728A2F3ACE4AE7A737790198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:f1:5e:66:d6:c6:92:75:67:f9:50:03:b6:
                    49:18:33:c9:e9:eb:85:6c:14:70:7b:d8:57:10:77:
                    87:de:42:4a:a4:38:8a:48:8c:d0:78:eb:0c:6d:5f:
                    9b:e6:48:04:5d:2b:3c:98:19:a9:0e:eb:7c:1d:8a:
                    07:3b:e5:a7:11:a0:b0:dd:36:5e:30:69:cf:b5:08:
                    99:84:2d:62:c2:03:32:98:0e:71:77:5b:15:a7:08:
                    2c:33:ea:74:f1:a7:d8:f0:5b:78:d1:f0:38:90:cf:
                    b1:9e:29:d9:b1:83:3c:6e:db:1b:ee:48:5d:d3:19:
                    d7:96:51:6d:ec:47:bd:54:ef:d5:36:78:5c:fd:6c:
                    84:89:34:69:ea:2c:fb:79:cd:a8:0c:0e:32:4c:66:
                    70:aa:3c:7a:31:d5:c7:3e:60:c2:f9:8f:6b:46:ae:
                    74:81:0e:90:d9:b9:de:60:96:14:52:63:c0:03:5c:
                    ae:e5:0a:68:64:7b:4e:2e:f8:41:6c:95:86:6d:25:
                    ea:b4:77:4f:3a:34:aa:f1:e0:39:b2:e7:fb:12:f2:
                    d2:0e:a5:a1:0b:bd:90:5d:48:a4:d4:2e:87:b7:28:
                    bd:b9:8b:93:45:6a:54:38:04:04:d0:34:72:ac:5b:
                    aa:cd:19:09:6b:07:79:33:54:ad:db:5a:d8:a3:4d:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4B:80:E8:65:DD:CC:EF:72:8A:2F:3A:CE:4A:E7:A7:37:79:01:98
            X509v3 Authority Key Identifier:
                keyid:82:00:66:12:D7:8C:E7:47:BD:24:36:D4:D0:45:04:75:F5:0B:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/82006612D78CE747BD2436D4D0450475F50B53D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82006612D78CE747BD2436D4D0450475F50B53D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7ABCA87E804BBAD475D6D31A96ABA64323B56AB31732F12670418CC5FE6462F5/0/3136382e3138312e38382e302f32322d3234203d3e20323731383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:b6:dc:9b:c8:8f:18:ba:39:99:2b:b5:96:e5:43:cf:06:33:
         d1:90:36:9a:13:59:01:2a:d1:30:c2:40:1c:f3:53:62:4d:f5:
         d4:0b:88:74:d5:cd:47:3c:c7:db:8c:da:30:ce:c5:32:e9:fb:
         34:29:ed:53:3b:b5:b1:41:0d:db:62:b6:1b:c8:14:70:58:10:
         cd:9c:b0:0c:5c:63:28:39:20:27:dc:be:e0:ff:e1:05:70:14:
         4f:c6:ed:14:3d:bc:f4:4d:ab:84:22:57:ca:c3:3b:99:83:4a:
         2f:e4:29:f9:70:5c:95:bd:67:e5:7d:9c:62:25:32:03:f4:2a:
         74:cd:0b:b0:03:e9:5a:04:00:e4:ca:47:d3:65:05:d2:e4:bf:
         12:8a:a2:65:2d:95:27:1d:c1:01:ab:17:ff:4c:92:e7:72:c2:
         97:f2:ea:08:a3:2d:d9:ef:96:12:d8:ac:22:ab:3e:70:f1:25:
         d8:23:87:e6:7f:38:84:a4:12:f8:b9:6a:67:91:d9:01:de:03:
         77:d8:33:32:64:72:fc:ab:55:32:02:c9:19:55:6e:95:c3:a5:
         cf:6b:b2:c7:12:42:fc:eb:c7:4e:e9:30:ed:4e:1c:06:5a:d5:
         e5:65:ef:fe:07:a9:38:88:f8:6d:0c:07:01:c0:9f:bb:f1:ab:
         72:cc:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:06 2025 by rpki-client