Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          OPYjbHRR9PjF+krjPtOvk5w3O4MD8xOKgiX4LxvPUMw=
Subject key identifier:   C8:27:62:17:76:CF:F6:4A:C4:94:89:B5:C3:12:5E:E0:89:A2:89:8E
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       61A0310803CA86D7AEAD47E530931BBC28ED5C7F
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 18:52:05 +0000
ROA not before:           Tue 04 Feb 2025 18:47:05 +0000
ROA not after:            Tue 03 Feb 2026 18:52:05 +0000
asID:                     10778
IP address blocks:        168.196.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:a0:31:08:03:ca:86:d7:ae:ad:47:e5:30:93:1b:bc:28:ed:5c:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Feb  4 18:47:05 2025 GMT
            Not After : Feb  3 18:52:05 2026 GMT
        Subject: CN=C827621776CFF64AC49489B5C3125EE089A2898E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e8:ab:ab:a1:8a:dd:91:63:c3:60:aa:55:20:
                    f2:c0:d7:d2:c0:eb:ec:3f:1c:81:77:50:0d:a9:32:
                    f3:97:bf:26:7b:71:f5:f0:f4:a1:ee:8c:bf:db:80:
                    4b:51:8a:f6:2b:18:3e:54:f1:87:d6:35:01:7c:c7:
                    f4:e9:89:50:98:39:ca:cd:98:63:37:8c:4b:a0:8f:
                    15:93:dc:3a:92:f2:3f:30:79:db:a2:90:85:8e:61:
                    a7:e3:b2:bc:c6:84:df:85:bb:b0:05:06:9b:c6:f8:
                    7c:98:8b:a7:60:c6:3a:7a:0e:1e:c1:58:23:33:f4:
                    19:53:47:69:01:db:1a:18:ef:c7:79:a4:f7:30:93:
                    a5:b2:eb:31:8f:ef:e8:85:de:bf:0e:c0:01:65:d7:
                    72:1f:47:2a:e2:79:f5:1e:9c:ae:3a:f3:90:98:08:
                    52:25:53:56:0a:fa:1c:92:2a:66:3e:4d:24:89:b9:
                    b1:46:d0:f8:51:4a:a4:09:87:03:49:a4:05:af:d0:
                    5a:1f:15:bf:32:52:ff:bc:2a:ed:8d:a2:f8:f9:b3:
                    60:fe:65:9e:06:14:44:c3:e9:de:68:09:69:0d:85:
                    20:6a:61:3e:73:10:78:3f:f3:d4:05:7f:17:64:4f:
                    29:c0:dc:29:9c:fb:ec:5f:d7:5c:df:65:e2:44:1d:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:62:17:76:CF:F6:4A:C4:94:89:B5:C3:12:5E:E0:89:A2:89:8E
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138342e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f3:f6:12:d5:7b:34:24:3b:02:d7:3b:49:22:82:a8:b2:dd:
         d0:85:6b:dd:2f:eb:b1:5d:88:43:3e:48:5e:1d:da:76:4b:38:
         0a:fb:0a:b3:12:ff:0f:2d:49:91:11:70:12:97:00:2d:c3:55:
         5f:e6:45:00:c7:af:09:f1:51:2c:2d:78:ec:1f:c5:56:2d:ca:
         53:11:8c:a4:02:15:86:99:d6:84:87:58:18:98:b3:ba:40:44:
         5e:f1:fd:ba:6b:80:5f:14:ea:d9:a6:48:19:6c:a6:5b:eb:ae:
         a9:1e:86:be:eb:f6:28:8e:e6:5a:3f:57:5c:c8:c0:a3:a6:92:
         e3:0a:39:28:da:c3:5e:7e:f5:70:c3:8a:09:88:b3:c0:74:53:
         27:c9:7f:27:84:b4:1c:a1:9c:c4:f9:bf:78:92:63:a0:34:d5:
         82:c5:73:76:72:bc:4b:c0:88:34:67:56:cc:ce:e6:a5:20:60:
         e5:b3:6e:f6:57:54:7e:ee:0f:86:8b:78:5b:2e:3e:92:30:c7:
         3d:55:fc:a2:ce:58:0d:9a:f0:15:97:9f:c5:2c:84:52:cd:c7:
         00:63:dd:6f:6a:23:9c:aa:f2:a0:ec:e8:e8:b1:9d:ae:2d:2e:
         a0:fa:99:8b:1a:45:87:44:f5:73:fb:b9:6a:ef:68:11:19:9a:
         94:f6:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:40 2025 by rpki-client