Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139342e302f32342d3234203d3e20323633373235.roa
File:                     3136382e3232382e3139342e302f32342d3234203d3e20323633373235.roa (raw, json)
Hash identifier:          SHRjuS/+VEgeSoKcBRXkDZ9YR8FdrTn6A2Ji0A2Zr4E=
Subject key identifier:   E4:4A:91:A1:D9:F5:96:49:40:48:30:B3:36:A7:D7:17:07:A1:A0:24
Certificate issuer:       /CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
Certificate serial:       6529CDAA81F6A030E6EC75310915933F167770CE
Authority key identifier: BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139342e302f32342d3234203d3e20323633373235.roa
Signing time:             Tue 04 Feb 2025 18:50:04 +0000
ROA not before:           Tue 04 Feb 2025 18:45:04 +0000
ROA not after:            Tue 03 Feb 2026 18:50:04 +0000
asID:                     263725
IP address blocks:        168.228.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:29:cd:aa:81:f6:a0:30:e6:ec:75:31:09:15:93:3f:16:77:70:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD6389EB9345071F30B23938BAADDE36ADD7AE34
        Validity
            Not Before: Feb  4 18:45:04 2025 GMT
            Not After : Feb  3 18:50:04 2026 GMT
        Subject: CN=E44A91A1D9F59649404830B336A7D71707A1A024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9b:ac:16:e7:f2:1a:2e:51:ec:cb:61:78:45:
                    5c:0d:c2:59:a3:80:01:6e:e1:00:a4:55:b4:40:be:
                    6b:be:fc:7c:56:7a:4c:38:83:17:2b:2b:39:d0:12:
                    7d:a1:48:3f:47:49:36:b9:1c:64:35:d6:ef:a2:cc:
                    4a:9d:f3:15:ff:e5:06:a1:99:81:18:24:7f:00:29:
                    ff:5e:0e:d2:f9:d7:2a:0a:73:0d:4f:8e:81:2d:26:
                    31:8f:13:b4:a8:c5:eb:62:30:f8:24:f2:51:2e:be:
                    29:be:cc:99:f1:41:e4:fd:37:c9:db:20:70:09:42:
                    48:63:e6:ec:27:85:08:9e:a1:52:2f:ce:56:bd:5d:
                    79:0f:ee:55:a9:c2:57:9f:5e:c2:62:12:e1:ac:5a:
                    e9:18:ba:d9:b9:aa:bd:3d:4e:9c:b2:8e:b8:57:d8:
                    31:75:c4:09:11:9b:be:f4:0a:78:8d:f4:b5:0b:2c:
                    41:1e:a6:78:4f:34:00:dd:00:6d:30:eb:e1:6e:89:
                    dc:20:44:bc:f8:6a:f7:a0:ad:c9:66:70:87:70:7e:
                    e1:ba:bb:27:25:1d:9b:71:56:c8:56:a4:4e:ad:48:
                    2a:82:de:9c:6b:62:03:df:bf:43:b3:66:87:18:e6:
                    d0:d2:c9:97:cf:b7:0f:f5:5f:37:33:7f:01:24:6e:
                    cb:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:91:A1:D9:F5:96:49:40:48:30:B3:36:A7:D7:17:07:A1:A0:24
            X509v3 Authority Key Identifier:
                keyid:BD:63:89:EB:93:45:07:1F:30:B2:39:38:BA:AD:DE:36:AD:D7:AE:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD6389EB9345071F30B23938BAADDE36ADD7AE34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AB94BC7406DEBAE9C7A5277D4F0EE793D4D31DD105131EDAB4744087C0476C7D/0/3136382e3232382e3139342e302f32342d3234203d3e20323633373235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:ff:88:87:81:fe:ef:b0:b3:39:31:6a:5d:65:cc:23:83:3c:
         ad:d3:44:2d:ff:78:40:d5:a7:f4:03:d3:82:3e:a2:87:b7:f0:
         44:e4:fa:2c:da:80:2e:df:7a:fd:75:74:ac:99:00:91:5c:0b:
         98:83:21:e2:98:42:54:87:21:55:a6:64:46:15:36:c5:b9:a8:
         c5:f1:42:7a:c9:57:02:80:d1:f8:f5:32:66:47:21:a9:61:d0:
         69:c3:1c:db:05:5c:1e:7a:9b:f9:c2:27:8d:ae:ae:29:b2:cf:
         c6:62:53:64:12:22:43:cb:9e:91:6d:03:24:27:4f:4f:61:9a:
         bf:31:30:a5:15:84:1f:df:6b:8c:e2:74:5e:df:e1:05:22:cd:
         c5:d8:23:cf:c5:d9:10:a9:b3:e6:9a:18:13:8d:33:77:a1:8a:
         8a:c8:cb:83:7a:12:37:ab:a2:fc:ea:2d:ef:1f:20:c2:51:21:
         b6:0e:7e:00:cd:1b:14:f9:97:56:eb:58:6d:b4:67:7c:a6:98:
         f0:81:db:9f:19:af:ab:89:cf:ab:df:79:17:cf:e7:a6:c4:d3:
         c1:e2:ee:83:b7:23:bc:88:44:fd:b0:bc:00:21:99:89:5e:07:
         b6:f8:1a:bc:76:b6:9d:73:6b:6a:af:74:c9:e9:ca:47:86:53:
         7f:31:0c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client