Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
File:                     3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa (raw, json)
Hash identifier:          QNCgVq/3vm7yapRmC245ZsEW7wOcKQL1cn4D+DX4SDo=
Subject key identifier:   E1:59:8B:D2:3B:71:4B:E3:4F:01:7F:B4:7B:38:91:81:BD:87:35:D9
Certificate issuer:       /CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
Certificate serial:       276916FF552B0E7F8888658614F4843ECABD24D6
Authority key identifier: E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa
Signing time:             Tue 04 Feb 2025 18:52:05 +0000
ROA not before:           Tue 04 Feb 2025 18:47:05 +0000
ROA not after:            Tue 03 Feb 2026 18:52:05 +0000
asID:                     10778
IP address blocks:        168.196.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:69:16:ff:55:2b:0e:7f:88:88:65:86:14:f4:84:3e:ca:bd:24:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1FE19D68FCD8E2F46D7632D42E6373C148B46E4
        Validity
            Not Before: Feb  4 18:47:05 2025 GMT
            Not After : Feb  3 18:52:05 2026 GMT
        Subject: CN=E1598BD23B714BE34F017FB47B389181BD8735D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:03:c7:47:71:88:ce:a2:19:29:1e:d3:e2:
                    ea:96:f2:25:d2:35:1c:e9:db:f3:0d:be:7d:d1:0d:
                    cc:e7:da:82:98:23:e2:4a:9b:7b:e2:b8:0c:6e:ef:
                    8c:67:e5:e7:9a:fe:84:4a:ba:6e:5f:68:3a:35:58:
                    9d:82:bd:fd:04:a2:95:ca:4a:fd:80:89:e9:3f:08:
                    05:9e:81:8a:02:bf:90:98:7a:0a:d6:5d:c5:76:e3:
                    fa:71:56:c1:90:df:ba:83:ba:c1:d0:eb:b1:bc:30:
                    59:1f:d6:42:b4:31:ce:53:16:c6:f4:92:5b:4d:48:
                    b9:d5:2a:81:f1:d1:50:9c:a7:8c:a7:ff:67:da:38:
                    b0:f2:98:1f:a3:4f:da:6c:ae:02:89:8c:d5:1c:39:
                    e5:74:bd:fd:f5:1d:8d:93:9c:4b:f7:2a:4c:6d:e8:
                    75:ed:ed:fa:49:f5:af:45:af:bd:5b:94:54:bc:a5:
                    ea:fa:da:dc:61:3e:30:fa:04:2f:ba:f0:d6:43:cd:
                    42:b0:ba:55:06:8b:58:56:46:69:75:17:cf:29:ec:
                    4c:de:13:82:a1:76:d7:75:94:0c:77:97:57:cf:11:
                    6f:c4:d1:8d:22:e2:1b:42:34:56:75:bd:9e:ad:ac:
                    d7:31:18:a6:ca:84:5b:98:da:ed:05:b2:cf:6c:b8:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:59:8B:D2:3B:71:4B:E3:4F:01:7F:B4:7B:38:91:81:BD:87:35:D9
            X509v3 Authority Key Identifier:
                keyid:E1:FE:19:D6:8F:CD:8E:2F:46:D7:63:2D:42:E6:37:3C:14:8B:46:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E1FE19D68FCD8E2F46D7632D42E6373C148B46E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBAE3F2653825EA4CDE6B907DA95DCF926094AC068604C13D1B43A08748CD455/0/3136382e3139362e3138362e302f32342d3234203d3e203130373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:9e:f3:8b:95:e5:3b:b1:a5:a1:cd:9d:4c:6e:d2:48:20:0b:
         34:61:f6:83:5e:b0:d6:a3:2d:85:e7:8d:37:92:be:aa:6a:1e:
         7b:5f:11:99:b5:f7:aa:05:5b:b4:ed:97:15:00:e0:17:69:36:
         69:22:ab:85:3c:61:42:fe:79:66:ab:7d:58:28:6f:5c:da:ab:
         85:68:39:94:44:b3:ee:56:dd:6e:0a:a9:01:c0:f6:e7:75:05:
         3e:18:29:14:c7:25:5d:be:c5:28:79:41:1f:b4:17:8c:d1:17:
         67:55:43:21:3f:c3:f1:10:7e:77:dd:dc:af:26:cc:b2:02:ea:
         6d:6f:4e:00:ed:1a:de:98:27:3c:a4:21:ef:d5:e5:9c:98:bf:
         3e:a1:1c:e8:0b:06:c7:a2:c2:57:a7:aa:b8:a0:64:b8:21:e2:
         08:20:8e:43:9e:fc:52:2a:87:b9:75:29:9f:7b:55:9b:3d:44:
         6a:e0:1a:74:82:bc:aa:94:70:d9:fd:fa:e0:3e:e5:c1:2c:6d:
         fc:fd:05:36:56:06:e8:77:c1:0d:e9:a8:85:ca:e2:cb:4f:d5:
         dc:39:51:65:76:6e:74:9f:f4:02:28:e5:6c:2d:25:00:30:2a:
         ef:7a:fd:d8:91:35:d6:d1:8e:c2:26:83:bf:3b:c2:db:96:eb:
         bf:08:96:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:57 2025 by rpki-client