Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32332d3234203d3e20323634373534.roa
File:                     3136382e3139342e3134322e302f32332d3234203d3e20323634373534.roa (raw, json)
Hash identifier:          DsUX0ZxOBxlwi5eNIcJvnqewsNdbeoOTWlyTEcr8Wak=
Subject key identifier:   5B:43:52:26:D8:2E:E2:F8:90:B7:6B:45:6E:A2:81:83:C5:5C:12:39
Certificate issuer:       /CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
Certificate serial:       093ACCB4DEB20CC7E6B7D79713F4690D1A489C8B
Authority key identifier: AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32332d3234203d3e20323634373534.roa
Signing time:             Tue 04 Feb 2025 18:32:40 +0000
ROA not before:           Tue 04 Feb 2025 18:27:40 +0000
ROA not after:            Tue 03 Feb 2026 18:32:40 +0000
asID:                     264754
IP address blocks:        168.194.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 20:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3a:cc:b4:de:b2:0c:c7:e6:b7:d7:97:13:f4:69:0d:1a:48:9c:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A
        Validity
            Not Before: Feb  4 18:27:40 2025 GMT
            Not After : Feb  3 18:32:40 2026 GMT
        Subject: CN=5B435226D82EE2F890B76B456EA28183C55C1239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3e:df:18:72:32:f1:04:1f:7d:71:c8:de:ca:
                    f0:c9:3c:62:6f:da:ab:e2:76:ad:29:96:c2:32:bf:
                    10:18:a2:d7:6f:d6:a5:a4:75:3e:36:84:41:06:37:
                    ee:8d:a8:4f:e9:cf:54:be:21:95:61:c5:ed:c2:e0:
                    17:3c:c7:ea:e7:a7:07:3b:dd:b2:97:84:ad:42:b1:
                    87:7a:99:ed:71:f5:d8:6d:3c:ff:c1:91:58:a3:bd:
                    b5:40:9a:0c:fd:16:f3:6a:ba:65:71:b1:d4:c1:f9:
                    46:ba:43:7f:35:a9:34:06:7d:d8:9a:70:c0:2f:86:
                    9a:e9:5c:8f:0f:bc:00:f7:2e:c7:ec:36:e1:d2:d2:
                    38:af:45:4e:0d:8f:17:a9:e8:0a:94:7b:24:6b:8d:
                    4d:9e:d8:b3:8a:9d:6a:8b:34:df:82:ce:0f:3e:1d:
                    6a:c0:28:77:06:f7:3c:e5:62:31:55:67:83:54:fd:
                    16:25:f6:4a:28:d3:ff:96:a2:c9:42:f7:40:5d:9c:
                    31:36:07:94:6a:08:19:50:ed:15:3d:3f:47:b2:74:
                    37:ab:e8:14:12:5a:a4:db:16:65:11:8a:ac:2a:98:
                    41:73:e2:70:b3:e1:0f:12:17:26:49:7e:c0:62:34:
                    88:73:0e:75:b3:ab:76:60:cb:8f:50:fa:56:0e:52:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:43:52:26:D8:2E:E2:F8:90:B7:6B:45:6E:A2:81:83:C5:5C:12:39
            X509v3 Authority Key Identifier:
                keyid:AC:7B:8B:A3:D0:5E:21:1C:F7:69:7D:C3:8D:BB:75:91:FC:D3:07:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AC7B8BA3D05E211CF7697DC38DBB7591FCD3075A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C0CE9AA0BC29760A13F1C1FBADBCAA564D094312E70029DFE6E0D0AFDC88405F/0/3136382e3139342e3134322e302f32332d3234203d3e20323634373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:37:a4:cb:cf:d7:ab:0a:bd:ee:9d:7c:c7:95:00:b0:0e:a1:
         2f:a5:4c:28:9d:92:8c:9b:44:f5:f6:c1:cb:2b:d5:c7:1f:2c:
         a1:36:cf:e5:b9:03:4f:fd:86:c8:cf:28:6d:36:a4:65:44:cf:
         ab:1b:17:20:7c:78:28:ae:ee:90:5c:20:34:bc:5e:ee:cd:26:
         69:77:70:cc:85:5e:60:4c:48:69:a4:af:f5:21:44:06:97:32:
         8a:0c:f2:da:01:45:07:7e:29:81:31:6a:0d:81:41:d2:13:58:
         ac:2a:3d:45:29:05:54:f9:53:91:a9:eb:1b:a5:2c:ce:b6:cf:
         7f:86:5b:39:9e:fc:09:f9:12:84:37:a2:21:11:20:33:75:72:
         d5:3a:bd:80:42:ac:c9:41:a8:8c:21:00:f4:8c:e3:5d:31:8e:
         c3:11:af:6e:68:a7:a1:9e:5e:09:2c:9a:83:e3:7b:87:1d:ad:
         2c:91:3d:80:82:31:66:aa:37:31:74:8c:3d:c4:d3:e3:10:b3:
         39:2f:5d:06:df:24:61:c0:eb:55:14:87:7c:0a:24:f5:e9:b5:
         89:75:3a:21:89:ea:35:1d:ce:04:2f:6e:12:47:ae:98:f8:dc:
         06:58:ae:af:7f:0b:1b:b1:6e:da:6f:a9:4e:0d:82:bc:00:56:
         7b:b0:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:17:44 2025 by rpki-client