Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa
File:                     3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa (raw, json)
Hash identifier:          glF7PLbDpqTjaZlFz9pdRt4zdldVEoF0K1NcgOeVQ1k=
Subject key identifier:   35:5A:D4:D2:FE:1A:4C:27:97:94:9F:20:B2:B1:3B:85:7F:06:43:55
Certificate issuer:       /CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
Certificate serial:       268C6DF006A3D0CC3F8B0580489657B55A962795
Authority key identifier: 1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa
Signing time:             Tue 04 Feb 2025 18:53:10 +0000
ROA not before:           Tue 04 Feb 2025 18:48:10 +0000
ROA not after:            Tue 03 Feb 2026 18:53:10 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 23:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8c:6d:f0:06:a3:d0:cc:3f:8b:05:80:48:96:57:b5:5a:96:27:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F653A3DC4E68D4F848AD95F8C61B21806A6962F
        Validity
            Not Before: Feb  4 18:48:10 2025 GMT
            Not After : Feb  3 18:53:10 2026 GMT
        Subject: CN=355AD4D2FE1A4C2797949F20B2B13B857F064355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:13:a5:74:6b:88:f5:b8:e6:b5:ad:56:78:0b:
                    76:11:93:9a:0f:93:b1:ec:7c:fb:64:3f:ec:9c:31:
                    ef:9f:7a:84:05:0c:78:d9:aa:c2:da:62:12:e9:5a:
                    92:20:05:95:f4:b3:30:cf:e4:58:08:89:80:ea:7d:
                    5d:43:16:02:6e:b0:c6:ca:5a:4e:25:10:7e:37:24:
                    3d:fd:1a:8b:72:11:08:e3:1b:c4:89:50:8c:45:ed:
                    4b:59:43:e6:70:d9:41:f3:c0:bc:3b:36:1e:c3:47:
                    f9:74:5c:8d:43:94:32:a8:7b:07:7d:68:4e:6e:96:
                    fc:0c:4c:bc:09:09:85:5e:9c:bf:8b:3b:4a:ad:c4:
                    d0:f1:50:f8:e1:b8:27:9f:f6:61:e9:4a:32:8e:5f:
                    36:8e:a8:fc:5c:bd:a2:96:49:e2:46:78:6c:53:b6:
                    ad:28:77:47:48:6a:41:0f:82:df:81:22:81:47:ae:
                    bc:e4:59:d5:1f:0e:07:06:8b:4c:da:bb:9c:c0:00:
                    cd:84:94:c7:b3:68:1c:f1:99:aa:6b:cb:ac:ef:73:
                    03:11:27:6c:c7:75:36:67:56:80:b8:0e:6a:4d:af:
                    dc:3f:72:5f:90:bb:4e:bd:08:2e:49:4c:e1:4c:fb:
                    a9:e5:cc:7d:08:b7:13:a6:ea:10:b0:f1:08:e5:ca:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:D4:D2:FE:1A:4C:27:97:94:9F:20:B2:B1:3B:85:7F:06:43:55
            X509v3 Authority Key Identifier:
                keyid:1F:65:3A:3D:C4:E6:8D:4F:84:8A:D9:5F:8C:61:B2:18:06:A6:96:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F653A3DC4E68D4F848AD95F8C61B21806A6962F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ADFB38DEF03CDACFBC115FB5C45BB90BF78D25377B390C0B706A201C23F4D893/0/3136342e3136332e38302e302f32322d3234203d3e20323635373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ba:dd:9a:57:f7:d5:8e:eb:8e:1e:ad:0d:c1:70:71:2c:08:b1:
         31:45:eb:d5:e9:0d:02:b5:7a:cd:4e:fe:ba:83:02:bd:af:65:
         3a:0f:91:ac:62:17:71:6a:0b:50:e7:eb:2d:62:e1:ee:dc:47:
         e4:e4:5e:63:08:4c:71:f7:e8:50:2d:36:54:ba:b4:1d:87:2b:
         25:fb:67:5f:4a:c6:bb:4d:96:b6:76:8d:c8:d0:e5:0e:ed:f0:
         a6:73:d3:fe:36:6a:b5:c8:a4:5d:68:d9:87:c3:4a:fc:b3:7f:
         9a:f8:78:6f:dc:38:5d:08:d4:65:04:14:ff:9b:a6:97:07:24:
         4b:22:f9:e0:d5:0c:9b:84:3e:86:e9:4e:69:b6:d3:31:5a:9b:
         e1:24:00:e5:54:d0:d7:fa:3d:67:84:48:f4:6d:dc:0d:9b:59:
         fe:1c:6a:93:22:56:9b:6a:9d:f6:4a:a3:c3:ad:3a:cd:3d:55:
         5a:77:2f:3b:0d:2e:37:3f:b7:ba:1f:5e:6d:d6:8f:ae:80:05:
         a0:90:3f:91:a5:b8:9d:4c:86:76:ee:9f:6d:c7:c2:1a:55:06:
         85:b4:e5:b6:c6:db:ee:a1:4d:dd:d8:e0:3d:29:70:50:fb:f1:
         47:ec:9d:40:4d:d9:a6:66:a1:49:1b:c6:27:e0:0c:42:f8:17:
         c3:99:dc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:01:21 2025 by rpki-client