Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa
File:                     3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa (raw, json)
Hash identifier:          58B2jC76n/2Vz30j0kB5/6ywIxvIMYqaQ16kA+yjPrY=
Subject key identifier:   5B:BB:D8:26:0E:D8:6B:A5:08:0E:24:76:41:4C:A0:58:49:B8:62:5A
Certificate issuer:       /CN=0DD8C886E7D641E553703DC5E196957F1368902C
Certificate serial:       7FDB5967A55742502C57003FD4F42700ED0BCA09
Authority key identifier: 0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa
Signing time:             Tue 04 Feb 2025 18:34:34 +0000
ROA not before:           Tue 04 Feb 2025 18:29:34 +0000
ROA not after:            Tue 03 Feb 2026 18:34:34 +0000
asID:                     52436
IP address blocks:        168.181.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:db:59:67:a5:57:42:50:2c:57:00:3f:d4:f4:27:00:ed:0b:ca:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DD8C886E7D641E553703DC5E196957F1368902C
        Validity
            Not Before: Feb  4 18:29:34 2025 GMT
            Not After : Feb  3 18:34:34 2026 GMT
        Subject: CN=5BBBD8260ED86BA5080E2476414CA05849B8625A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:64:d2:57:77:bb:1a:87:79:66:09:01:ec:
                    86:38:b9:a1:92:2d:3b:a5:91:a1:c8:ad:e8:45:28:
                    e5:ae:a0:13:7a:8f:35:4b:c2:70:d7:1d:ab:7f:94:
                    02:53:38:7e:25:f9:fb:04:90:e2:af:f7:fa:b7:f5:
                    9f:4d:3c:8b:32:2b:fa:f2:70:5d:68:6f:00:72:99:
                    bf:95:0c:71:0a:a7:2b:79:8c:50:e2:e6:bb:bb:85:
                    46:76:0d:fe:2d:d1:ed:5e:73:66:45:7f:d7:20:1d:
                    e4:70:f6:dd:ef:e2:80:e3:03:af:fa:c5:ba:df:d0:
                    c6:a7:a0:f3:70:f5:6f:ed:65:73:0f:4e:31:70:17:
                    99:4d:7d:b1:06:90:83:52:c0:3e:14:e5:2f:8f:3d:
                    a9:99:97:38:35:eb:77:07:ca:37:25:a1:e9:a4:03:
                    ae:50:3f:0d:93:10:c7:0d:7c:45:26:39:06:66:3f:
                    ca:2c:ff:02:58:78:86:27:87:34:c5:d7:3c:38:8d:
                    80:09:85:6e:4c:ba:18:fd:46:39:10:7f:3a:6e:45:
                    16:46:e1:cb:24:e7:53:90:26:99:86:61:18:c6:70:
                    9c:94:5f:3f:96:22:24:5a:84:df:0a:3f:db:47:8e:
                    ce:74:2b:93:61:6b:c8:6f:11:3a:4f:2f:16:31:90:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BB:D8:26:0E:D8:6B:A5:08:0E:24:76:41:4C:A0:58:49:B8:62:5A
            X509v3 Authority Key Identifier:
                keyid:0D:D8:C8:86:E7:D6:41:E5:53:70:3D:C5:E1:96:95:7F:13:68:90:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/0DD8C886E7D641E553703DC5E196957F1368902C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DD8C886E7D641E553703DC5E196957F1368902C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BB554C471A70AB73B965B1569AA454FA3211FD142C831AEE1EAF89FA0FD12EB8/0/3136382e3138312e3230382e302f32322d3234203d3e203532343336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:03:8a:0c:1c:23:80:5c:85:8b:35:40:ff:0d:97:08:d7:9a:
         a7:a8:5d:08:27:ec:f3:b0:79:6e:f0:a9:ab:0a:4d:68:af:82:
         27:75:23:d7:15:3f:88:38:61:f0:26:a0:82:56:24:31:8e:7a:
         8f:4b:b7:71:f7:91:2d:7e:d5:cf:b0:13:0b:f4:72:a0:f0:96:
         1f:8a:7d:0a:2f:13:0d:30:92:6d:04:b7:2e:51:f8:17:9b:bc:
         5e:f9:7e:57:14:d7:f0:cc:f1:72:26:41:70:54:d9:f6:1d:d5:
         f2:d3:0a:05:68:09:ca:cb:5a:c1:87:99:ac:60:9b:9a:6c:44:
         fc:fb:48:8d:8c:4e:7e:67:83:a9:4a:51:ba:0e:76:8c:dc:d2:
         85:0a:c6:5f:fc:4e:5a:e2:7b:74:21:77:5f:d6:e8:1b:24:fd:
         c2:94:f1:bf:37:42:15:65:c4:61:fd:4d:ed:fd:40:3c:58:cc:
         04:1b:c6:1f:5d:8c:e5:90:ab:95:63:78:55:ad:a1:79:64:17:
         db:ed:29:5e:09:5a:a4:a3:d5:da:3b:8b:33:97:b6:df:27:2a:
         23:08:1b:25:13:ec:4d:4b:64:56:b6:a2:e2:9a:da:04:b6:57:
         06:00:f1:64:48:a4:f1:67:71:70:68:46:9a:67:79:24:a7:82:
         bd:05:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:56:25 2025 by rpki-client