Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135312e302f32342d3234203d3e20323634373434.roa
File:                     3136382e3139342e3135312e302f32342d3234203d3e20323634373434.roa (raw, json)
Hash identifier:          ixZV32xBwK2CqDEJpCeFDfiXlo4zwSNc3UuXX0D80c8=
Subject key identifier:   D0:9A:15:9F:CF:03:56:0A:6A:7F:C8:44:B0:E2:6A:3A:2E:30:BF:11
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       2D102B4D6E05A77363AA0619879164075D967EF1
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135312e302f32342d3234203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:54:18 +0000
ROA not before:           Tue 04 Feb 2025 18:49:18 +0000
ROA not after:            Tue 03 Feb 2026 18:54:18 +0000
asID:                     264744
IP address blocks:        168.194.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 20:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:10:2b:4d:6e:05:a7:73:63:aa:06:19:87:91:64:07:5d:96:7e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Feb  4 18:49:18 2025 GMT
            Not After : Feb  3 18:54:18 2026 GMT
        Subject: CN=D09A159FCF03560A6A7FC844B0E26A3A2E30BF11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:82:17:5b:44:89:99:90:86:81:02:48:f6:
                    74:9b:59:db:30:44:71:e6:d9:df:2c:30:dd:f1:9f:
                    c2:59:36:f1:f7:ca:a3:84:4d:3f:e1:ff:44:fe:b4:
                    eb:7b:bf:df:92:0e:00:3f:52:6f:31:cc:fd:70:32:
                    b3:b7:60:f8:27:9c:78:72:b8:5b:6f:6e:41:30:eb:
                    f5:b7:24:4e:fd:0c:b9:99:c7:df:78:02:b5:4a:5d:
                    2b:f4:17:60:fe:d9:4e:89:98:94:75:17:09:e4:b6:
                    1c:04:83:ac:7d:cb:50:44:50:54:93:8f:02:9d:5e:
                    d6:59:94:79:56:53:2f:40:36:f1:bd:ca:ac:40:a7:
                    a0:cb:6e:ef:88:b5:6a:23:88:d9:37:b1:d8:60:f7:
                    21:35:7e:c5:46:e7:36:8e:1e:06:04:c6:f8:ed:e9:
                    f2:32:b1:3c:bd:1d:0c:eb:fc:91:33:14:04:55:33:
                    23:04:ed:57:15:c5:9e:c5:9b:87:d0:af:83:bd:80:
                    66:1d:82:93:28:27:d4:6e:40:80:f0:bc:92:45:8b:
                    a4:2d:d1:12:d8:8a:c4:bf:ab:26:06:74:e2:41:df:
                    c3:61:6e:47:f9:e3:1d:f5:0b:54:3f:2e:05:a6:b1:
                    b8:86:9a:21:69:1a:bc:ff:84:5d:59:52:9a:62:7b:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:15:9F:CF:03:56:0A:6A:7F:C8:44:B0:E2:6A:3A:2E:30:BF:11
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/3136382e3139342e3135312e302f32342d3234203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:ef:df:33:7c:1f:18:2f:25:b9:d5:47:87:95:1f:6f:61:
         70:0d:38:cb:92:6f:bb:24:3b:4d:fa:9d:d2:94:1f:fa:3b:f8:
         58:b2:ba:7a:86:ad:86:f6:95:c2:e7:90:88:93:ac:68:c3:dc:
         1e:71:c5:80:4b:0f:a0:ca:42:86:71:80:89:9d:28:3d:3b:d6:
         ca:02:7d:be:a4:ca:64:dd:97:85:83:a8:ef:3b:47:8e:ca:b4:
         85:c1:aa:2d:f3:a7:70:9c:b2:10:3d:c6:4c:cd:77:84:e1:05:
         a8:a6:7c:67:e2:4e:37:a8:07:2f:54:2d:b1:77:94:98:de:40:
         39:c2:a1:bf:00:20:51:f2:cd:20:e0:40:c5:16:75:b7:b5:9b:
         a2:48:e2:ac:83:dd:57:93:7f:59:c9:8f:bd:24:10:30:4a:cf:
         ec:27:68:51:2e:27:e4:22:a4:14:9b:67:16:21:2a:c9:2e:20:
         22:fc:d1:9c:00:de:93:87:5c:71:60:f9:7b:a7:d3:0a:3d:84:
         25:86:66:10:0c:cc:c6:7f:8b:74:3e:9c:da:0f:7f:80:aa:14:
         ee:c4:d6:f6:72:c7:bf:ff:bb:e1:68:e9:b0:ca:01:f6:47:94:
         67:68:b9:08:02:52:32:bc:28:2a:b9:78:fe:1e:3d:30:e3:98:
         c3:1d:81:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:45:05 2025 by rpki-client