Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa
File:                     3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa (raw, json)
Hash identifier:          JMJGqg9Bqw9ym3SbriJmewHD4KXEhzQYp/SVSCOLT3s=
Subject key identifier:   F8:4D:2C:08:B6:20:ED:E5:7D:CE:D3:AC:81:71:64:36:67:E6:DA:39
Certificate issuer:       /CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
Certificate serial:       58F08D6A98A7B1957BB3F094B9302E36B242FA2C
Authority key identifier: 71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa
Signing time:             Tue 04 Feb 2025 18:29:04 +0000
ROA not before:           Tue 04 Feb 2025 18:24:04 +0000
ROA not after:            Tue 03 Feb 2026 18:29:04 +0000
asID:                     271794
IP address blocks:        164.163.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f0:8d:6a:98:a7:b1:95:7b:b3:f0:94:b9:30:2e:36:b2:42:fa:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7104CDD93B39A8C01D7C8289677F1150E057E4A5
        Validity
            Not Before: Feb  4 18:24:04 2025 GMT
            Not After : Feb  3 18:29:04 2026 GMT
        Subject: CN=F84D2C08B620EDE57DCED3AC8171643667E6DA39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9d:f8:58:bc:fd:df:12:1e:63:56:f4:30:b3:
                    e3:57:92:ec:12:9f:76:78:ca:72:59:87:1e:ad:20:
                    73:d2:a0:97:69:dd:42:0f:44:ff:32:eb:d1:a7:2d:
                    30:8f:16:1a:18:ae:a7:78:8a:36:96:67:4e:dd:09:
                    9e:b4:41:56:c1:5a:5a:8b:8a:e4:4a:15:05:38:2e:
                    43:b1:7e:7e:9c:31:4e:26:b7:66:56:9f:22:9e:1c:
                    b7:60:6a:1f:21:75:c2:c9:b5:e9:a7:28:4d:cf:12:
                    3d:1a:18:b6:d2:87:fd:5a:6f:de:d2:4a:36:6b:04:
                    1b:f9:81:68:ae:94:e5:8a:2b:28:93:ac:3f:3c:e8:
                    37:42:12:1a:c4:c9:6d:13:ad:69:49:9d:63:a6:0c:
                    49:ca:75:6e:e5:69:1c:55:40:00:ab:56:61:0a:5f:
                    a0:4c:e6:6c:8f:b9:55:5d:42:3d:d5:a9:19:a7:92:
                    4b:d4:8f:81:b6:f9:90:37:7e:06:68:a1:f0:35:72:
                    c6:33:7e:54:54:e7:bd:e1:ab:f9:17:4b:06:04:7c:
                    d2:00:ba:27:05:94:84:eb:e0:e9:0e:e8:90:9e:80:
                    b9:a7:9d:27:f9:65:67:ef:eb:94:d0:c8:98:81:16:
                    5e:e5:2f:8b:23:8d:4a:2e:2e:af:85:87:a8:4d:a7:
                    2e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:2C:08:B6:20:ED:E5:7D:CE:D3:AC:81:71:64:36:67:E6:DA:39
            X509v3 Authority Key Identifier:
                keyid:71:04:CD:D9:3B:39:A8:C0:1D:7C:82:89:67:7F:11:50:E0:57:E4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7104CDD93B39A8C01D7C8289677F1150E057E4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A77B162F0FFF4E9650A937A8B13EBD6EBC7E9B7D0ED36E856E22D513497533BB/0/3136342e3136332e3138362e302f32332d3234203d3e20323731373934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         e3:e0:32:00:85:b7:b8:f6:1d:3a:90:54:84:97:8b:7a:b9:ce:
         30:b6:55:c1:63:3b:eb:cb:44:75:15:da:83:b8:75:ca:fe:57:
         8e:50:cc:be:ec:24:2e:e7:be:34:15:bf:9d:d6:f9:8d:21:87:
         29:12:cd:01:db:5b:8e:a7:ba:9e:ab:13:36:33:40:ab:b8:1e:
         2d:72:92:57:a2:9e:3e:13:78:0e:84:fe:ab:ca:66:f4:43:31:
         67:d8:b0:ef:fa:af:f9:53:8d:a8:8f:6a:45:45:5f:51:c6:4c:
         db:3a:25:fa:f8:c3:f5:2d:14:1b:2f:4a:fd:33:af:1a:2e:b9:
         ce:23:a5:f0:7b:d2:e6:29:53:e9:86:64:bc:75:3a:28:ae:a6:
         7b:ff:fe:7d:0d:ca:b8:24:40:16:03:78:93:20:90:08:28:fa:
         bb:37:c9:1a:4b:a7:28:a5:b6:98:f4:d9:52:7a:02:64:c6:05:
         57:c4:b6:a0:0d:e8:47:00:7c:1d:a9:5d:03:1d:f3:64:57:77:
         d9:6b:97:d3:4d:c5:fb:fa:91:0e:01:a3:f2:57:10:1c:85:db:
         52:a9:9b:9e:26:c1:ec:d4:4f:ec:74:e1:f7:9a:57:a3:35:b5:
         1a:ba:16:2a:47:31:63:15:6b:93:fa:ca:0d:00:18:1c:f3:81:
         30:03:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:30 2025 by rpki-client