Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa
File:                     3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa (raw, json)
Hash identifier:          4p9npD+nFNm+ut5+DgtD+rKm7s/otjtBndVD3MiRc8U=
Subject key identifier:   01:FE:C0:00:70:D5:DF:CB:32:DB:4D:34:4C:5D:82:42:2C:58:29:15
Certificate issuer:       /CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
Certificate serial:       68AC46B3798BE8B4102211DFBAF10C39A8A64E98
Authority key identifier: 0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa
Signing time:             Thu 10 Jul 2025 06:20:00 +0000
ROA not before:           Thu 10 Jul 2025 06:15:00 +0000
ROA not after:            Thu 09 Jul 2026 06:20:00 +0000
asID:                     32098
IP address blocks:        167.249.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Jul 2025 03:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ac:46:b3:79:8b:e8:b4:10:22:11:df:ba:f1:0c:39:a8:a6:4e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D01CF02784E73C34A5AF36C6029E9464A070D38
        Validity
            Not Before: Jul 10 06:15:00 2025 GMT
            Not After : Jul  9 06:20:00 2026 GMT
        Subject: CN=01FEC00070D5DFCB32DB4D344C5D82422C582915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e6:26:ad:34:69:2a:aa:36:96:88:bf:41:7a:
                    2a:31:9e:31:e8:47:be:55:70:7c:5d:01:93:d3:1e:
                    b5:84:47:03:e3:30:dd:1c:81:df:11:35:48:ff:6c:
                    7f:5d:29:66:d4:67:12:07:96:b8:d0:37:71:c2:59:
                    55:14:1e:db:41:75:71:cd:f4:e6:6d:6f:a4:6e:b6:
                    46:07:92:21:69:e6:c3:c7:d7:58:50:de:ae:94:18:
                    d6:6f:d4:84:9f:6a:c5:df:55:00:46:d1:a0:b6:27:
                    e4:50:a4:7b:83:17:95:79:71:b9:d9:d8:9e:18:f7:
                    f7:ce:58:54:b4:51:dd:ee:84:26:11:ec:28:b0:48:
                    22:df:95:fd:db:34:7a:7c:58:f3:12:06:8e:9c:53:
                    0a:05:5e:91:70:00:26:4f:6c:94:56:e5:19:09:bb:
                    9b:48:b8:7d:b5:c8:4a:48:1e:90:78:a0:2e:66:09:
                    c5:89:45:2e:c9:67:af:b7:85:8c:43:77:bb:66:d3:
                    ed:95:30:8d:ce:a9:81:e0:c6:e4:2b:94:04:25:8f:
                    2a:fd:8d:f2:3b:55:66:98:73:f9:5e:c3:34:24:10:
                    e3:75:ad:ad:a4:55:15:2c:bf:0d:55:26:8c:27:7f:
                    1c:8b:10:cf:aa:99:8f:2d:36:3b:a4:ba:a8:e0:2d:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:FE:C0:00:70:D5:DF:CB:32:DB:4D:34:4C:5D:82:42:2C:58:29:15
            X509v3 Authority Key Identifier:
                keyid:0D:01:CF:02:78:4E:73:C3:4A:5A:F3:6C:60:29:E9:46:4A:07:0D:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0D01CF02784E73C34A5AF36C6029E9464A070D38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83809FE0D97C80F8740EAD84EE758AA0C569B069AE6B49A656770F885F95DD08/0/3136372e3234392e3131382e302f32342d3234203d3e203332303938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ff:d8:cd:88:90:01:49:18:03:16:d1:93:33:46:1b:be:e2:
         88:53:e0:21:c8:97:44:e2:a2:38:c1:84:6e:99:44:13:13:79:
         52:98:58:14:86:1e:2f:38:da:0f:02:80:74:f1:89:8f:86:55:
         7f:b2:1d:a1:87:a3:a1:f4:12:d1:d2:e0:94:17:6c:1a:cd:a8:
         fa:f1:f0:c5:a5:ef:d7:69:cd:92:50:6b:59:ca:db:e5:47:b5:
         ee:24:35:c3:48:51:e0:69:d6:75:1b:b0:fd:61:08:4a:3e:6b:
         9f:1d:4e:53:9e:be:37:5e:9e:61:d9:79:2d:a2:53:f9:d8:1a:
         c1:3a:10:df:2b:2c:38:09:7c:19:80:05:86:57:af:b9:bd:1f:
         e7:f5:7e:85:27:bf:61:6c:be:77:f3:b6:81:ba:19:f6:ef:db:
         48:b6:35:0c:f9:66:6d:db:88:4c:89:04:22:18:bb:f2:6b:92:
         46:29:c6:58:c0:a1:0e:32:82:28:79:ab:b7:b9:4b:24:8b:4b:
         95:f4:36:e5:a5:8f:84:94:98:12:5b:79:93:58:16:3c:49:10:
         76:bc:32:b4:4b:36:6e:ed:8d:f1:a4:90:7f:97:cd:56:53:f3:
         43:92:ad:7c:32:a5:1a:f0:5f:16:8d:37:e1:9b:a1:46:84:7c:
         b1:54:fa:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 00:21:33 2025 by rpki-client