Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230332e302f32342d3234203d3e20323634373734.roa
File:                     3136382e3139372e3230332e302f32342d3234203d3e20323634373734.roa (raw, json)
Hash identifier:          +rzoYBIa/uHKvJSyvzJudZvgAWngwfiA7KwpyjN0p9Q=
Subject key identifier:   26:BA:B9:6D:BE:AF:1D:C8:A8:34:F6:DD:CD:A2:A3:AD:4C:1A:15:FA
Certificate issuer:       /CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
Certificate serial:       76136584EC99E5C85AE316D6EA7C29EA91E511C3
Authority key identifier: 95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230332e302f32342d3234203d3e20323634373734.roa
Signing time:             Thu 20 Feb 2025 16:10:22 +0000
ROA not before:           Thu 20 Feb 2025 16:05:22 +0000
ROA not after:            Thu 19 Feb 2026 16:10:22 +0000
asID:                     264774
IP address blocks:        168.197.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:65:84:ec:99:e5:c8:5a:e3:16:d6:ea:7c:29:ea:91:e5:11:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9514A7D608C4CFA34185B1F9CECDCD5D234D119D
        Validity
            Not Before: Feb 20 16:05:22 2025 GMT
            Not After : Feb 19 16:10:22 2026 GMT
        Subject: CN=26BAB96DBEAF1DC8A834F6DDCDA2A3AD4C1A15FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:43:b5:04:52:b6:ef:0b:6f:50:08:d1:e4:3c:
                    31:63:ae:03:f2:7d:09:0a:98:8c:df:f5:b7:d6:a5:
                    48:3f:93:a6:aa:c8:a7:c4:ee:15:17:c1:88:9f:c7:
                    c6:7c:57:d7:94:08:53:a8:eb:ee:3e:d8:b3:73:06:
                    1f:9d:00:fb:bf:7f:33:8c:de:70:67:58:5f:ca:20:
                    4a:40:be:10:aa:82:a3:21:ac:45:08:de:3b:18:b5:
                    0c:19:cd:8d:e0:9d:ab:ec:80:ee:55:70:cd:1a:20:
                    79:17:7a:1d:bc:4a:d2:54:25:f9:40:3a:76:50:ec:
                    19:6f:85:0b:56:7e:b0:94:4a:6c:be:25:42:e8:15:
                    99:a1:e5:04:c9:b2:15:b4:cb:13:ac:64:32:05:aa:
                    c7:0a:e9:f9:07:72:58:cb:8e:9e:ca:00:16:86:f8:
                    4e:f8:e9:81:ab:a5:b2:27:59:f8:39:bf:f3:2b:02:
                    8d:73:af:b6:56:65:85:a1:4b:d4:2e:b0:9d:51:4f:
                    c7:ba:66:02:28:c2:37:b4:a0:ac:0c:4a:f2:3b:7f:
                    0c:26:b9:d4:c6:27:78:f2:e5:b1:46:11:b1:41:65:
                    a5:ef:dc:30:5f:a8:e9:98:47:1d:75:63:dd:5f:2f:
                    4a:59:19:8a:5c:e7:ca:f0:80:42:c9:df:89:39:17:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BA:B9:6D:BE:AF:1D:C8:A8:34:F6:DD:CD:A2:A3:AD:4C:1A:15:FA
            X509v3 Authority Key Identifier:
                keyid:95:14:A7:D6:08:C4:CF:A3:41:85:B1:F9:CE:CD:CD:5D:23:4D:11:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9514A7D608C4CFA34185B1F9CECDCD5D234D119D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9904E6B7B8D2E00850F88E32E2423B437905D8FAB166A1793DBC707772959D52/0/3136382e3139372e3230332e302f32342d3234203d3e20323634373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e3:dc:f0:1c:03:33:a4:31:6a:3b:62:17:e8:09:79:e2:a9:
         3b:7f:e8:df:3a:1f:aa:9a:1b:cf:a2:fa:13:c5:0d:df:1f:cc:
         8f:ba:35:0c:56:7f:28:8e:e4:6a:30:9c:3b:e1:08:04:51:82:
         2d:4f:85:ab:aa:43:54:96:86:9a:e6:81:d5:a0:a6:04:e5:2f:
         56:1d:6d:94:75:50:1d:e3:b5:a9:30:2e:dc:7f:b0:78:66:bd:
         98:2f:5b:e4:ee:ab:28:25:34:b7:49:fb:81:5b:cd:2e:66:dc:
         3e:46:78:87:30:81:18:7f:96:6d:d3:20:93:7c:04:9c:e7:b0:
         3f:02:69:e2:c3:05:a9:01:75:2b:a0:ce:f4:69:16:89:66:69:
         28:21:f8:da:9c:ef:91:51:82:9d:f3:b3:ab:6a:ef:14:ab:cf:
         cb:08:71:55:23:32:30:1b:c2:d5:3d:ea:d8:47:b9:bb:51:90:
         b2:cf:18:44:f9:1a:71:14:17:3b:6f:22:0d:7f:b1:9e:e4:f7:
         8e:10:86:01:98:00:e1:22:89:bc:df:7d:a8:67:9f:6a:48:91:
         44:41:36:26:de:1d:a9:19:1e:28:95:68:da:7f:1b:c5:6a:81:
         11:31:22:b5:89:28:94:59:3e:5d:69:f3:c9:50:bc:74:5c:a9:
         d2:8b:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:55:44 2025 by rpki-client