Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32322d3234203d3e203237383433.roa
File:                     3136382e3132312e34342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          BWBZkGl9x+jwY3B7C4vMLsgy057IRlJZAFior800zQI=
Subject key identifier:   F5:3B:A1:52:24:2A:B4:CE:29:FC:0F:7E:DD:AD:53:DF:8B:C9:46:A9
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       390A8E1F34E0E5F4F83476936D9152D9FFCB7690
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:05 +0000
ROA not before:           Tue 04 Feb 2025 18:01:05 +0000
ROA not after:            Tue 03 Feb 2026 18:06:05 +0000
asID:                     27843
IP address blocks:        168.121.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 03:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0a:8e:1f:34:e0:e5:f4:f8:34:76:93:6d:91:52:d9:ff:cb:76:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:05 2025 GMT
            Not After : Feb  3 18:06:05 2026 GMT
        Subject: CN=F53BA152242AB4CE29FC0F7EDDAD53DF8BC946A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:af:13:f5:19:02:6d:9e:e6:bd:a0:74:cc:73:
                    95:65:d3:98:37:b3:97:99:1d:93:48:b8:8b:e8:1c:
                    f4:b8:e5:0a:ab:91:52:e2:d5:8e:94:7f:e5:1b:86:
                    c2:de:a9:89:6d:af:b3:f3:44:b4:f1:15:9a:32:10:
                    e5:d7:39:49:c3:12:2b:f5:c2:16:a2:57:fa:1f:f1:
                    28:51:6c:c0:6c:22:b5:d6:00:4c:d7:7a:10:80:e0:
                    4d:17:de:ef:e7:6e:56:20:49:41:bf:29:23:e3:ef:
                    c3:48:4a:dc:d7:1a:40:00:0b:20:56:76:f5:16:83:
                    2b:31:36:14:f2:4a:ba:3a:5c:b0:68:64:95:3b:f2:
                    c7:15:2a:81:e5:0b:99:fd:13:1c:10:31:d4:dc:9f:
                    20:e4:54:18:5a:80:1a:bf:98:b6:21:6b:46:9e:b0:
                    4f:af:7c:88:85:6d:a1:89:02:d7:38:35:0b:68:b0:
                    e5:8b:28:00:a2:5d:96:da:c3:6c:7e:c2:e2:27:1f:
                    4c:87:08:b1:fc:92:93:38:20:c3:97:4e:a8:ae:97:
                    48:c9:d3:10:db:19:65:08:ba:96:ab:57:d5:9a:dc:
                    6f:76:d1:19:d6:6e:d2:71:cb:41:d0:c6:d9:07:ca:
                    b2:3e:82:33:83:35:7c:34:53:bc:65:68:c7:65:13:
                    a6:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:A1:52:24:2A:B4:CE:29:FC:0F:7E:DD:AD:53:DF:8B:C9:46:A9
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3136382e3132312e34342e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:14:59:46:d3:59:71:83:45:d9:85:eb:38:72:a8:ae:75:4d:
         b5:4e:0b:c5:e1:7b:59:d4:63:f9:15:bd:56:fe:f2:3f:96:83:
         e4:6e:15:46:0a:e6:93:3b:1f:c1:57:33:ff:cb:a6:27:2e:b0:
         65:a4:2d:84:53:64:de:74:dd:c2:ac:30:3f:b1:cb:82:8b:64:
         d3:38:92:d3:16:18:57:4e:7c:25:0e:7c:e8:db:6a:35:3e:31:
         77:0e:e5:ce:a3:00:64:f6:c3:33:6a:d7:f4:38:53:7e:14:0c:
         46:4b:a8:3a:d4:e5:60:bd:33:e7:ac:10:20:ac:23:19:ea:bb:
         b4:ff:8d:47:d6:f1:01:d1:36:13:78:7f:e2:dd:71:86:e1:ae:
         24:8a:33:83:77:9e:c0:b9:f4:28:88:74:2e:d1:d4:f8:5c:aa:
         53:9f:c2:29:25:4d:7c:ff:b2:ad:ac:46:96:8f:5e:2b:8a:9e:
         ca:1a:0e:39:29:91:db:09:e7:02:83:6a:90:e2:03:c9:6f:65:
         ee:9f:f2:cd:73:c8:14:97:84:ac:6a:62:47:64:65:6f:25:8a:
         3f:da:dc:b7:a8:3c:78:43:69:d2:b6:86:10:79:93:cc:d9:0b:
         7b:e2:90:3d:ce:02:d4:02:69:72:12:50:8c:77:5f:59:e7:9b:
         79:4b:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:37:11 2025 by rpki-client