Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
File:                     3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa (raw, json)
Hash identifier:          XqkFdP9mqrPGjq1vEN6www4g+Siw/2z70+VQGV49jCY=
Subject key identifier:   CE:29:4C:DF:42:2F:F3:4E:AC:B7:7F:6F:63:80:DA:1C:EF:43:48:2E
Certificate issuer:       /CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
Certificate serial:       15843D5991896954D1206C8210502F5A59E67915
Authority key identifier: 0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa
Signing time:             Tue 04 Feb 2025 18:19:07 +0000
ROA not before:           Tue 04 Feb 2025 18:14:07 +0000
ROA not after:            Tue 03 Feb 2026 18:19:07 +0000
asID:                     264781
IP address blocks:        168.197.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 03:12:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:3d:59:91:89:69:54:d1:20:6c:82:10:50:2f:5a:59:e6:79:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB
        Validity
            Not Before: Feb  4 18:14:07 2025 GMT
            Not After : Feb  3 18:19:07 2026 GMT
        Subject: CN=CE294CDF422FF34EACB77F6F6380DA1CEF43482E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:2d:91:02:7c:06:f0:32:1f:e4:3b:a6:6a:
                    4d:37:70:92:fd:be:f8:b2:e5:8f:3c:46:7e:64:b0:
                    72:fe:5d:ea:c5:16:18:c6:7b:bc:66:e9:cc:a2:bc:
                    cb:da:8f:f2:36:22:69:75:17:8f:31:39:4f:df:8b:
                    11:ca:a9:55:da:55:80:f3:6b:d8:be:eb:d7:8e:ea:
                    89:e2:5c:e7:19:9c:92:01:0f:2e:49:ec:59:39:b3:
                    46:2c:3d:3c:cc:47:0e:c6:1b:9b:99:28:d9:80:12:
                    b2:57:ca:50:f7:bd:3f:46:38:57:f1:27:7f:73:ad:
                    50:34:16:bc:62:e9:ac:ef:4b:5f:cd:2e:c8:11:76:
                    b9:03:a8:d8:42:47:bb:77:07:f7:d4:e8:70:c5:b2:
                    2d:8d:72:10:76:eb:e1:ca:a3:ad:df:03:24:95:75:
                    90:d6:36:f2:80:0e:7b:01:30:b9:c0:ab:2f:ad:0c:
                    d9:9b:b2:5b:f3:01:66:12:70:57:41:a6:ff:69:30:
                    32:7e:21:eb:b1:f5:28:f8:28:33:7d:ef:f3:fc:39:
                    4a:80:d6:df:39:72:9f:f5:46:55:29:d5:e4:fe:99:
                    61:22:0a:2c:83:ef:45:7c:1d:91:c0:ab:e8:dc:8d:
                    b1:96:e1:7c:d2:54:af:d4:56:64:5e:48:05:76:92:
                    11:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:29:4C:DF:42:2F:F3:4E:AC:B7:7F:6F:63:80:DA:1C:EF:43:48:2E
            X509v3 Authority Key Identifier:
                keyid:0C:3F:5B:DC:0C:ED:77:CC:FF:2B:A4:40:19:D1:D9:EE:70:39:B9:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C3F5BDC0CED77CCFF2BA44019D1D9EE7039B9AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81C3D74B749F49CCA32A8C641A236EA9D2307146DCB98DE72A8DA340F22E5495/0/3136382e3139372e34342e302f32322d3234203d3e20323634373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:af:98:00:3a:29:80:6b:60:fa:d7:76:8e:53:4f:6a:8b:
         b8:34:5b:6c:91:f7:e3:05:02:cd:4b:88:5a:87:0e:00:01:d8:
         c5:3a:0c:1d:a6:9a:cd:10:c4:73:dd:54:3d:ea:c2:84:86:1e:
         d0:7f:ec:e8:4c:be:5d:73:52:5b:5c:84:19:29:be:98:02:c9:
         ba:bc:de:f9:56:9d:b6:4d:5c:8c:25:49:cc:22:9e:0d:60:d5:
         83:12:b5:75:d7:ec:46:d9:9a:20:71:d6:2e:9c:a0:93:8e:0b:
         bf:42:69:97:ec:54:6a:11:6b:23:4d:71:6d:e3:84:58:1c:0d:
         2f:fa:4d:c7:70:bd:60:5d:e1:37:27:46:71:81:a8:3d:b7:b1:
         50:83:6b:f7:d7:00:13:fd:28:28:61:38:9b:f2:9d:2b:5d:0b:
         48:e7:31:ff:3e:48:8f:78:46:f9:d7:e7:a7:aa:71:db:c0:b7:
         c7:ce:ec:c6:c7:0e:27:9a:93:a3:e9:0b:aa:82:b3:8c:16:f1:
         8e:8a:56:50:7e:fc:ec:26:6b:8b:fe:db:dc:fc:c8:9e:a1:3c:
         f9:98:a0:89:26:e4:e8:92:66:f4:a1:1f:05:1d:ad:aa:06:fe:
         7b:aa:07:02:10:ae:07:30:25:ae:62:93:2d:1d:3a:23:60:97:
         44:17:d1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:57:50 2025 by rpki-client