Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e3130302e302f32342d3234203d3e203532333936.roa
File:                     3136362e37352e3130302e302f32342d3234203d3e203532333936.roa (raw, json)
Hash identifier:          C4kdyy0E/8UNrtzx9QsS1hAX0eB/6CuxTFC9dGm2Ia4=
Subject key identifier:   37:B6:19:7D:BD:4F:E1:A7:DE:9E:88:AF:AB:F6:02:46:32:98:0C:C9
Certificate issuer:       /CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
Certificate serial:       1BF3FB04049A573A69A0FD39A5B0A74F12CE6D55
Authority key identifier: DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e3130302e302f32342d3234203d3e203532333936.roa
Signing time:             Tue 04 Feb 2025 18:28:23 +0000
ROA not before:           Tue 04 Feb 2025 18:23:23 +0000
ROA not after:            Tue 03 Feb 2026 18:28:23 +0000
asID:                     52396
IP address blocks:        166.75.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:fb:04:04:9a:57:3a:69:a0:fd:39:a5:b0:a7:4f:12:ce:6d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD21E8538F50D4CF3466F380D64FFA7779EE20D6
        Validity
            Not Before: Feb  4 18:23:23 2025 GMT
            Not After : Feb  3 18:28:23 2026 GMT
        Subject: CN=37B6197DBD4FE1A7DE9E88AFABF6024632980CC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:24:14:9d:ee:9a:e0:5e:44:d6:96:1f:8e:0b:
                    e0:9b:e7:29:51:65:a2:f8:e1:d9:b8:c8:ea:71:74:
                    da:44:41:5d:1c:3f:be:29:58:da:8f:7b:79:35:24:
                    05:2e:ee:aa:fe:0e:8c:db:d3:33:68:55:c3:fa:21:
                    a4:c3:b0:9a:ee:46:64:62:19:84:15:61:75:c2:52:
                    b9:47:78:0d:66:1a:f6:16:97:cb:3e:72:ce:99:2e:
                    83:3f:73:0c:95:bb:98:3b:96:57:79:f3:0f:bc:a7:
                    f6:f6:49:8e:a4:2e:0d:69:28:d8:ba:0d:2f:ee:4c:
                    d6:22:b8:31:b0:40:69:22:25:9a:8d:73:f2:ea:23:
                    9c:a9:0f:23:22:45:51:2c:73:44:44:ef:d8:65:00:
                    86:5a:70:bf:02:fa:e0:f5:cc:e0:b2:d0:2b:5b:9b:
                    64:e0:a1:f2:c2:d2:cf:f3:0b:26:0e:02:cf:ed:0b:
                    39:99:ab:d9:57:4a:c0:c7:08:e8:b5:90:6c:22:59:
                    de:49:da:7e:0c:23:8e:56:1c:5d:8f:a9:92:7b:8b:
                    89:a6:2b:20:d2:c5:72:6b:66:07:c8:9d:32:9c:89:
                    35:a5:bd:47:6c:cc:3e:24:fa:b9:da:67:ba:a2:a9:
                    98:3f:22:7c:a5:53:46:d4:8a:05:ec:8c:99:84:ab:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B6:19:7D:BD:4F:E1:A7:DE:9E:88:AF:AB:F6:02:46:32:98:0C:C9
            X509v3 Authority Key Identifier:
                keyid:DD:21:E8:53:8F:50:D4:CF:34:66:F3:80:D6:4F:FA:77:79:EE:20:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DD21E8538F50D4CF3466F380D64FFA7779EE20D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/84B6D054C66C929684279113BA9042194C396582A11C12043259A139B9F326B6/0/3136362e37352e3130302e302f32342d3234203d3e203532333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.75.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:4a:ec:f5:80:49:9d:ed:93:7b:4c:51:cf:49:a4:27:6e:
         dc:e3:68:2e:f1:39:a7:90:51:73:a1:a0:6b:9a:dc:93:80:55:
         d3:c6:d3:10:eb:66:d3:09:c2:b6:24:2d:0b:b0:f4:47:55:cb:
         a8:6d:48:6f:18:ef:3f:53:16:86:60:91:cc:42:71:09:9b:f9:
         58:33:f0:57:f6:3d:4d:47:1a:a8:aa:6e:5d:8f:e2:0b:a8:60:
         47:ad:91:d6:a8:a2:50:dd:1c:d6:3b:9e:1a:0b:10:ec:b4:7b:
         06:a6:52:3b:2f:78:89:33:df:5e:b0:8e:92:ac:1b:30:4e:44:
         08:08:3a:dd:ee:d8:48:f4:eb:72:f7:75:3e:88:aa:c5:93:7d:
         3f:5a:07:fd:d7:d0:0b:66:79:3d:b9:77:2e:cd:04:50:1e:be:
         f2:6e:58:d6:67:48:6d:18:08:ae:e1:74:d5:56:f1:14:b2:94:
         20:c5:d4:4c:63:c5:24:6a:08:78:f8:c2:5d:cf:be:81:e8:92:
         be:c6:7e:16:6d:c2:e8:ec:de:38:e5:85:e0:22:9d:bc:36:11:
         bd:d4:d5:8d:a2:dd:4d:f1:1a:9a:40:d5:2c:4d:8f:18:9f:ff:
         41:54:b5:03:2e:65:ec:2e:dd:6d:0d:36:4e:fe:16:3a:65:c3:
         2c:37:10:62
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUG/P7BASaVzppoP05pbCnTxLObVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQyMUU4NTM4RjUwRDRDRjM0NjZGMzgwRDY0RkZBNzc3
OUVFMjBENjAeFw0yNTAyMDQxODIzMjNaFw0yNjAyMDMxODI4MjNaMDMxMTAvBgNV
BAMTKDM3QjYxOTdEQkQ0RkUxQTdERTlFODhBRkFCRjYwMjQ2MzI5ODBDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAJBSd7prgXkTWlh+OC+Cb5ylR
ZaL44dm4yOpxdNpEQV0cP74pWNqPe3k1JAUu7qr+Dozb0zNoVcP6IaTDsJruRmRi
GYQVYXXCUrlHeA1mGvYWl8s+cs6ZLoM/cwyVu5g7lld58w+8p/b2SY6kLg1pKNi6
DS/uTNYiuDGwQGkiJZqNc/LqI5ypDyMiRVEsc0RE79hlAIZacL8C+uD1zOCy0Ctb
m2TgofLC0s/zCyYOAs/tCzmZq9lXSsDHCOi1kGwiWd5J2n4MI45WHF2PqZJ7i4mm
KyDSxXJrZgfInTKciTWlvUdszD4k+rnaZ7qiqZg/InylU0bUigXsjJmEq/T9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUN7YZfb1P4afenoivq/YCRjKYDMkwHwYDVR0j
BBgwFoAU3SHoU49Q1M80ZvOA1k/6d3nuINYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NEI2RDA1NEM2NkM5Mjk2ODQyNzkxMTNCQTkwNDIxOTRD
Mzk2NTgyQTExQzEyMDQzMjU5QTEzOUI5RjMyNkI2LzAvREQyMUU4NTM4RjUwRDRD
RjM0NjZGMzgwRDY0RkZBNzc3OUVFMjBENi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERDIxRTg1MzhGNTBENENGMzQ2
NkYzODBENjRGRkE3Nzc5RUUyMEQ2LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODRCNkQwNTRDNjZDOTI5Njg0Mjc5MTEzQkE5MDQyMTk0QzM5NjU4MkEx
MUMxMjA0MzI1OUExMzlCOUYzMjZCNi8wLzMxMzYzNjJlMzczNTJlMzEzMDMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzkzNi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKZLZDAN
BgkqhkiG9w0BAQsFAAOCAQEAK0pK7PWASZ3tk3tMUc9JpCdu3ONoLvE5p5BRc6Gg
a5rck4BV08bTEOtm0wnCtiQtC7D0R1XLqG1IbxjvP1MWhmCRzEJxCZv5WDPwV/Y9
TUcaqKpuXY/iC6hgR62R1qiiUN0c1jueGgsQ7LR7BqZSOy94iTPfXrCOkqwbME5E
CAg63e7YSPTrcvd1PoiqxZN9P1oH/dfQC2Z5Pbl3Ls0EUB6+8m5Y1mdIbRgIruF0
1VbxFLKUIMXUTGPFJGoIePjCXc++geiSvsZ+Fm3C6OzeOOWF4CKdvDYRvdTVjaLd
TfEamkDVLE2PGJ//QVS1Ay5l7C7dbQ02Tv4WOmXDLDcQYg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:01:06 2025 by rpki-client