Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa
File:                     3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa (raw, json)
Hash identifier:          RXMLQSJlUvdQJjQ+d9jGG4i6809finknMguDa1lKaSY=
Subject key identifier:   6E:40:6E:1A:C3:DB:46:BE:28:C5:68:AD:AF:5D:0B:DC:B6:96:B2:C0
Certificate issuer:       /CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
Certificate serial:       6CC31CE1E6628C7F7BDFFA16DA8E57ABC5B29696
Authority key identifier: 5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa
Signing time:             Tue 04 Feb 2025 20:06:44 +0000
ROA not before:           Tue 04 Feb 2025 20:01:44 +0000
ROA not after:            Tue 03 Feb 2026 20:06:44 +0000
asID:                     264689
IP address blocks:        168.228.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c3:1c:e1:e6:62:8c:7f:7b:df:fa:16:da:8e:57:ab:c5:b2:96:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3D488DA45F1AFC6FFC9C444732139214BFD47A
        Validity
            Not Before: Feb  4 20:01:44 2025 GMT
            Not After : Feb  3 20:06:44 2026 GMT
        Subject: CN=6E406E1AC3DB46BE28C568ADAF5D0BDCB696B2C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e5:75:f0:10:74:08:59:e0:59:b8:b2:6e:49:
                    4c:66:35:79:d3:f9:75:b8:9a:c8:15:b3:8a:8f:cc:
                    d5:8c:37:34:01:12:c1:18:d8:55:4f:8d:6d:3e:a7:
                    ce:39:3f:a4:1b:f5:b1:4e:e8:12:81:fa:f7:38:2a:
                    c3:03:c3:b0:43:95:6c:25:56:12:6c:ca:db:bc:13:
                    ef:63:9a:40:d6:dc:19:e9:49:bc:68:f0:c5:1c:f6:
                    89:63:10:65:5e:53:fe:33:09:b0:87:59:58:fb:9c:
                    4c:b9:de:43:e5:61:73:5d:ed:fb:5f:62:ba:58:54:
                    35:a8:c7:44:c3:c5:c0:22:c5:5d:44:e4:f5:f7:7b:
                    00:de:db:0d:c5:dd:ae:65:ab:b0:cf:87:0f:28:ed:
                    8f:de:05:21:ba:05:e3:cb:52:b3:35:0c:4a:a4:bc:
                    56:49:82:68:17:62:67:03:3d:15:b9:79:ac:d7:2a:
                    ea:3b:6e:ff:c2:8d:7c:80:b8:26:6e:8d:19:04:73:
                    d4:5f:35:a0:60:03:1b:64:9e:5f:42:04:2e:0a:ec:
                    1d:81:eb:cf:45:c5:68:50:92:1c:b7:05:1d:96:fb:
                    aa:6d:00:0b:e1:40:57:48:f3:44:d4:59:27:5b:63:
                    3d:af:f2:01:29:c6:be:9d:fa:db:6e:ca:6a:eb:0f:
                    38:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:40:6E:1A:C3:DB:46:BE:28:C5:68:AD:AF:5D:0B:DC:B6:96:B2:C0
            X509v3 Authority Key Identifier:
                keyid:5A:3D:48:8D:A4:5F:1A:FC:6F:FC:9C:44:47:32:13:92:14:BF:D4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A3D488DA45F1AFC6FFC9C444732139214BFD47A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CF10B4659230E17F82D3BD36B9567293EB5B6FD0DB0104E3812C954C40FDD15A/0/3136382e3232382e3134302e302f32322d3234203d3e20323634363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:38:f1:30:44:24:d1:46:a3:87:15:f5:3c:6e:5a:58:7c:a7:
         a3:45:b5:d1:1b:d5:97:48:9c:a5:b2:34:f3:0e:25:51:d6:46:
         91:b8:76:6c:e4:8b:bd:9c:87:0f:a6:48:aa:8c:1a:13:69:c1:
         1c:27:f7:fd:79:bd:cb:5a:0e:0c:81:93:ff:9c:d0:bf:45:76:
         08:81:40:80:90:3d:fb:61:f4:b3:54:29:a1:23:b3:19:55:ac:
         d8:0c:3e:0d:f6:74:4a:98:a4:59:b9:4d:16:71:2a:3e:c1:dd:
         d8:91:a1:62:52:a5:9b:a6:4c:50:4c:93:47:59:57:ec:1c:44:
         c4:2b:6d:95:b9:a3:ee:30:82:40:1f:48:90:77:70:1c:39:e8:
         80:3a:3c:f8:30:02:ff:a8:38:05:26:29:84:66:08:11:4e:fd:
         9d:33:01:1a:88:80:bf:8d:e4:4f:d9:da:5e:38:4e:a3:28:87:
         c5:b8:75:ee:e9:e6:72:b4:77:07:7d:27:0c:03:0b:39:28:e6:
         95:26:40:2c:44:8e:b9:9b:30:6a:64:43:ef:19:97:bf:68:15:
         b3:1e:60:4b:39:74:a3:4c:7f:3a:42:da:fc:cc:b5:c8:ed:bc:
         1f:58:8c:f4:4e:e6:b3:a6:c3:28:d0:9c:be:88:4a:71:6f:13:
         32:d2:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:50:20 2025 by rpki-client