Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa
File:                     3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa (raw, json)
Hash identifier:          QIgr5ysk8fmSnEXLxwNTHTMNVfmtFs2AAjmoBZMVOIQ=
Subject key identifier:   D6:51:7F:45:77:6A:97:93:5D:EF:16:43:A6:9B:89:3C:80:89:12:60
Certificate issuer:       /CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
Certificate serial:       455ADDBFE2F1BCE801068A900593661CA69770A7
Authority key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa
Signing time:             Tue 04 Feb 2025 18:53:10 +0000
ROA not before:           Tue 04 Feb 2025 18:48:10 +0000
ROA not after:            Tue 03 Feb 2026 18:53:10 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:5a:dd:bf:e2:f1:bc:e8:01:06:8a:90:05:93:66:1c:a6:97:70:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
        Validity
            Not Before: Feb  4 18:48:10 2025 GMT
            Not After : Feb  3 18:53:10 2026 GMT
        Subject: CN=D6517F45776A97935DEF1643A69B893C80891260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:47:c0:52:1d:3b:b9:45:93:4c:11:35:d8:
                    81:d6:eb:14:90:79:d7:fe:ee:22:92:3e:33:9b:2b:
                    96:8f:5e:58:32:ab:c4:50:5b:cc:41:9b:e2:aa:d9:
                    63:34:1f:d1:9c:9a:ce:3a:a3:48:7f:bd:b9:63:41:
                    6e:ab:48:89:34:50:98:25:a0:e9:50:c2:14:88:2c:
                    aa:9d:ae:4c:bf:29:3b:41:f3:c7:6f:9b:49:b0:4d:
                    ad:8a:dd:78:b4:1a:e2:7f:d1:18:9e:b0:7b:e0:ee:
                    c0:61:41:b5:40:7a:d4:d2:dd:c9:e0:f1:20:13:59:
                    1c:2e:20:fc:29:11:d2:83:9e:7b:e7:3f:f2:6f:36:
                    01:3b:b2:61:aa:14:fe:c2:7f:eb:ea:e9:45:06:2a:
                    17:b3:a0:af:00:6d:e6:21:a0:20:2a:6d:e2:74:62:
                    5e:26:a3:1d:63:22:80:12:9b:8b:36:54:f2:d1:3c:
                    3c:08:a3:92:23:c3:f0:1f:42:e2:dd:61:a7:9e:36:
                    cb:f3:b0:0d:61:f0:99:37:ef:5c:0d:91:09:a2:b9:
                    4f:eb:83:a7:39:db:a3:0b:6c:81:0b:0a:8c:da:3d:
                    14:a4:41:b4:29:96:f5:0a:f3:e8:7c:c0:d3:ae:15:
                    da:95:7c:be:ae:d3:59:15:07:ff:69:50:20:83:f4:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:51:7F:45:77:6A:97:93:5D:EF:16:43:A6:9B:89:3C:80:89:12:60
            X509v3 Authority Key Identifier:
                keyid:1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3232203d3e20323635373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:7e:a7:0c:7c:44:9f:3e:e0:73:24:69:75:49:36:48:b7:
         bd:09:72:6c:41:d7:60:ea:0b:b0:8c:74:33:2c:3c:76:3f:6a:
         d4:0e:f1:c4:eb:d7:3f:83:9b:15:09:84:aa:ec:0f:d5:3d:cf:
         c4:75:36:52:97:53:dd:ec:cb:a7:4c:f4:26:aa:81:99:9a:3a:
         0f:c5:b9:a1:47:4b:9c:41:42:08:c5:48:25:12:d2:5e:91:97:
         79:a0:3e:e7:64:0c:f0:16:9d:0e:7f:21:e5:a7:f5:c5:63:ac:
         cf:41:c0:df:b2:e0:e5:8f:85:2d:9f:df:1c:61:41:30:6f:09:
         0c:31:bf:ab:a6:5f:cb:29:9a:e0:0d:ab:e7:20:b6:e2:2a:1f:
         65:59:21:bc:04:c4:b9:5d:a9:e0:61:62:33:2c:be:b6:1d:12:
         8a:02:2b:61:d8:d7:ec:60:9c:7a:5a:79:26:39:53:ce:91:34:
         43:10:44:d8:f3:0d:f7:53:55:34:5d:59:57:66:76:e2:bd:48:
         49:44:52:b2:22:90:93:2c:03:8e:32:c6:3d:1f:67:20:5c:07:
         51:03:2d:7c:ac:84:22:52:68:0b:fa:2b:57:df:ad:ca:56:91:
         1e:44:3d:41:53:b4:ce:50:96:61:dc:de:82:d1:d9:fe:11:c1:
         21:a5:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:00:27 2025 by rpki-client