Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e382e302f32332d3234203d3e203532323530.roa
File:                     3136362e3131342e382e302f32332d3234203d3e203532323530.roa (raw, json)
Hash identifier:          o95BFeg2VDGva+VI7Ss9QoxJ56h0Y/w0u8mu8s9Z8RA=
Subject key identifier:   E8:06:48:5B:F8:C8:B4:42:A9:05:3E:26:E5:8B:6D:3F:2F:17:CD:22
Certificate issuer:       /CN=E840769E201D72D7EA098EEE7538061FBEA58116
Certificate serial:       0B5C4D45958C5BBCFD9BA84AD94760566E5AC0F9
Authority key identifier: E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e382e302f32332d3234203d3e203532323530.roa
Signing time:             Tue 04 Feb 2025 18:09:21 +0000
ROA not before:           Tue 04 Feb 2025 18:04:21 +0000
ROA not after:            Tue 03 Feb 2026 18:09:21 +0000
asID:                     52250
IP address blocks:        166.114.8.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5c:4d:45:95:8c:5b:bc:fd:9b:a8:4a:d9:47:60:56:6e:5a:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E840769E201D72D7EA098EEE7538061FBEA58116
        Validity
            Not Before: Feb  4 18:04:21 2025 GMT
            Not After : Feb  3 18:09:21 2026 GMT
        Subject: CN=E806485BF8C8B442A9053E26E58B6D3F2F17CD22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:51:0b:6e:0a:b9:54:b2:2d:1b:06:67:da:cd:
                    b4:52:51:62:e2:9a:fa:f4:cb:5b:d6:c8:b0:a1:8f:
                    4f:40:9e:c6:8e:a6:9d:d6:94:79:bf:10:80:0e:24:
                    37:e6:12:1d:c5:c8:a7:46:a5:f5:f6:9f:43:07:da:
                    59:a7:78:c6:50:a4:d7:c6:9a:45:43:a2:ae:88:ee:
                    20:ea:82:af:e9:cd:b6:61:87:3e:9c:e9:8b:38:1c:
                    ea:46:4d:1c:e5:47:9b:14:29:4f:67:0d:91:89:8f:
                    de:6a:fa:59:85:26:4c:f8:0a:28:3d:3c:06:23:53:
                    7e:97:c5:1e:2b:1b:1e:76:49:67:59:23:5c:f6:25:
                    c7:e1:77:c3:cd:ee:42:0b:30:43:de:89:85:38:a7:
                    04:62:aa:5d:08:d5:8c:4d:ae:ca:ae:b2:64:4e:82:
                    2c:91:b4:89:80:c6:87:b0:82:cf:bc:82:53:4e:48:
                    55:74:eb:27:5a:c6:65:83:9c:37:a9:b6:3f:99:e9:
                    26:fb:c2:4f:a9:7b:39:0f:ca:bf:12:d6:2f:38:92:
                    b7:7c:f8:a0:08:05:f9:32:01:cd:a9:1b:41:11:2f:
                    10:2a:c6:d1:e4:eb:b4:2d:68:a2:ef:72:83:39:63:
                    df:30:c0:8c:e0:e9:51:1c:69:b1:88:14:9c:57:1d:
                    d4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:06:48:5B:F8:C8:B4:42:A9:05:3E:26:E5:8B:6D:3F:2F:17:CD:22
            X509v3 Authority Key Identifier:
                keyid:E8:40:76:9E:20:1D:72:D7:EA:09:8E:EE:75:38:06:1F:BE:A5:81:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/E840769E201D72D7EA098EEE7538061FBEA58116.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E840769E201D72D7EA098EEE7538061FBEA58116.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFCFD7625B49F7425D8ECF19F720BDB1F1A7228A81B472507D2397D4A6F99AA9/0/3136362e3131342e382e302f32332d3234203d3e203532323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:4a:7e:e2:2a:c1:59:cf:7a:13:ec:d9:2e:d4:e2:9e:3d:d6:
         9b:14:9a:4e:67:61:1f:47:4d:3c:0a:55:9b:60:1b:34:d9:11:
         42:a9:1b:48:90:70:4f:73:d7:a1:a9:04:38:68:d4:c9:9b:07:
         cd:71:31:7d:6d:66:41:77:8b:a8:cf:a3:e6:a3:1e:b7:3a:77:
         c9:29:d1:a8:42:c4:96:c5:f4:ac:0d:25:5f:c7:17:3e:e0:39:
         12:6a:d8:15:b2:57:e3:22:9c:5c:99:0f:aa:9d:fb:71:69:4a:
         7b:33:4e:6c:bb:05:76:19:b8:c4:81:6a:35:25:a8:01:6b:41:
         95:35:b0:66:4e:2a:13:c1:e1:c9:2e:8a:3c:61:89:44:8b:40:
         6a:0e:80:9e:97:bd:15:f7:79:e3:c8:60:d6:47:a4:cf:56:b9:
         65:25:46:44:25:9a:3d:30:84:bc:9e:01:ad:58:a7:63:d1:5c:
         2e:4b:02:99:0c:03:93:08:85:a0:7e:57:54:d6:ee:51:d7:9e:
         c8:f6:df:a7:30:38:ec:01:4f:76:d0:f7:de:e5:cf:35:a7:13:
         38:42:e8:4e:01:cb:da:c5:ca:8c:f6:e7:bb:e8:d1:ca:d4:bb:
         ef:59:19:c7:1a:33:ef:0d:9f:da:af:b8:d9:f4:9f:04:66:67:
         d4:f8:4f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:46:51 2025 by rpki-client