Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
File:                     3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa (raw, json)
Hash identifier:          Kk2zv2R4Ho0tAP4JSXEs3Hwh2lEFq/+AD22LotNqQlc=
Subject key identifier:   86:2C:FB:EC:DD:65:42:FC:21:97:FD:8A:4F:F4:CB:0D:0B:93:BA:9F
Certificate issuer:       /CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
Certificate serial:       7FD111BA7A36355BD88985F94FB70BB31511279A
Authority key identifier: 49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa
Signing time:             Tue 04 Feb 2025 18:27:48 +0000
ROA not before:           Tue 04 Feb 2025 18:22:48 +0000
ROA not after:            Tue 03 Feb 2026 18:27:48 +0000
asID:                     28099
IP address blocks:        168.194.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d1:11:ba:7a:36:35:5b:d8:89:85:f9:4f:b7:0b:b3:15:11:27:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4937097E14B869A93E421FF4BF07878F7FE1DB12
        Validity
            Not Before: Feb  4 18:22:48 2025 GMT
            Not After : Feb  3 18:27:48 2026 GMT
        Subject: CN=862CFBECDD6542FC2197FD8A4FF4CB0D0B93BA9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:be:8c:75:44:36:58:ce:3f:7c:1a:e3:c1:
                    50:84:00:94:a5:fd:aa:0a:5b:79:08:e1:0e:08:95:
                    71:5c:f9:da:ef:0f:13:f5:06:97:a9:6e:e3:27:e6:
                    f8:06:93:75:7b:16:ea:f5:0e:11:3e:0d:b4:b0:a2:
                    30:7c:5e:dd:c1:ab:fd:56:52:11:9f:24:cf:bb:72:
                    2e:b3:7f:c7:ea:a0:48:cf:73:bf:16:78:4c:0c:a6:
                    46:23:fa:9d:47:dd:ee:5c:14:b0:c8:cf:25:7b:bc:
                    4e:08:03:e2:ed:0b:78:72:65:3a:0d:6a:11:79:43:
                    54:91:89:e8:71:fa:67:bb:80:8e:5d:6f:5f:9b:35:
                    70:24:8a:26:ae:af:9a:d8:ad:75:20:08:9f:6c:ea:
                    a1:f6:12:a9:ef:4c:e8:d1:13:de:cf:4e:da:49:ae:
                    d0:8f:c2:4a:97:39:2b:ad:e7:3a:db:9b:d1:70:e8:
                    71:d1:48:31:17:f9:9d:7f:43:22:c5:66:2a:33:d4:
                    58:2a:d3:6a:79:2e:2c:f2:6f:4e:93:53:9f:fa:c0:
                    92:f5:0a:b4:dd:eb:12:2d:73:3a:37:d0:c0:5f:9f:
                    8e:f7:73:51:32:ad:5b:0b:ba:16:e8:a3:cd:27:a9:
                    77:2d:47:b0:59:9b:e4:8f:55:d1:1e:14:df:67:e5:
                    c7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2C:FB:EC:DD:65:42:FC:21:97:FD:8A:4F:F4:CB:0D:0B:93:BA:9F
            X509v3 Authority Key Identifier:
                keyid:49:37:09:7E:14:B8:69:A9:3E:42:1F:F4:BF:07:87:8F:7F:E1:DB:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4937097E14B869A93E421FF4BF07878F7FE1DB12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B04A2DF34E4F232E4B89D386BCC8374360C42BB940E77DDD8B35800B6355CBB3/0/3136382e3139342e3139392e302f32342d3234203d3e203238303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b4:3f:e1:ba:e6:35:ac:00:55:f4:5c:48:aa:1c:9e:36:03:
         10:24:48:c7:73:d4:2f:a3:e2:d9:5b:c5:d9:4d:c9:c1:77:23:
         c3:d2:ef:86:f3:1d:f5:3d:0c:57:55:d0:39:c0:c9:01:eb:13:
         b0:2c:5f:c7:37:29:b6:23:13:4b:80:36:5a:78:50:9b:9a:eb:
         ff:87:89:19:29:66:cb:35:02:e8:6e:09:e3:82:7f:68:5a:75:
         6a:77:25:9a:49:af:d6:37:db:e7:78:83:a0:6c:f7:9c:35:33:
         17:a9:ba:2c:1f:5a:7d:d2:05:4d:6f:8b:de:0e:e5:18:d7:84:
         68:6b:0a:ea:1a:0c:e3:e2:92:9a:f1:6a:62:cf:88:d5:70:bb:
         6e:fb:f7:c1:26:2d:61:0e:41:51:35:75:0e:24:81:87:38:a8:
         a1:ad:9e:9f:17:93:22:07:cf:31:9b:8d:bf:b7:b3:a2:9d:11:
         ae:9e:24:81:ef:cd:bf:b5:4b:6d:3d:81:9a:36:e8:72:bc:e6:
         16:96:04:0e:df:a2:2c:70:84:cb:28:20:d6:10:6a:72:2b:58:
         0d:e0:2e:65:43:ab:2e:d8:de:00:20:e8:35:7c:8d:87:95:3c:
         3a:cd:22:a4:3c:19:c0:24:2f:d2:e3:2b:d1:ea:ec:f0:77:04:
         15:c2:d3:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:00 2025 by rpki-client