Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323635373034.roa
File:                     3136382e3138312e3137362e302f32322d3234203d3e20323635373034.roa (raw, json)
Hash identifier:          ZXV/AbfAQ/B8Kxl/EP69s2FoTugAOhG7dACPBVQvwGs=
Subject key identifier:   D3:72:3C:24:23:E5:ED:B8:AC:81:61:2C:67:3B:58:F8:92:52:03:32
Certificate issuer:       /CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
Certificate serial:       3E365141647CE40F1125C3BA9E6BB6D183954A03
Authority key identifier: 79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323635373034.roa
Signing time:             Tue 04 Feb 2025 20:00:11 +0000
ROA not before:           Tue 04 Feb 2025 19:55:11 +0000
ROA not after:            Tue 03 Feb 2026 20:00:11 +0000
asID:                     265704
IP address blocks:        168.181.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:36:51:41:64:7c:e4:0f:11:25:c3:ba:9e:6b:b6:d1:83:95:4a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C
        Validity
            Not Before: Feb  4 19:55:11 2025 GMT
            Not After : Feb  3 20:00:11 2026 GMT
        Subject: CN=D3723C2423E5EDB8AC81612C673B58F892520332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:aa:b2:aa:cc:9c:8c:ca:fc:ac:11:c2:e3:
                    fe:52:29:25:ad:a8:b5:5d:92:ea:20:f7:f5:f7:d8:
                    6d:d3:48:0d:53:0a:41:d9:4d:a7:fd:51:8c:cb:76:
                    ec:00:09:58:d3:d2:4c:23:f2:54:fd:6b:5c:dd:a8:
                    66:f7:fd:11:b1:5b:ea:d2:7e:5a:b2:20:ff:9d:36:
                    01:78:60:48:c7:58:20:de:c8:de:03:fc:8a:da:c2:
                    d6:27:53:a2:88:d0:d4:d1:ec:bd:76:09:04:90:c6:
                    92:64:c4:64:4e:19:a4:f1:c8:94:6d:30:94:e1:16:
                    79:ea:9f:7a:8d:1d:89:16:62:56:df:ca:ff:c9:42:
                    f6:28:29:6c:db:6d:89:7d:fa:8c:fb:21:03:7f:25:
                    93:5a:08:ab:2f:1d:a7:c9:46:3c:c3:36:f0:81:65:
                    0d:f1:83:50:cc:8f:6d:9d:a1:80:c3:11:a9:dd:9e:
                    db:04:93:1e:05:bc:ce:c5:ff:66:7e:2e:66:fd:b3:
                    cb:0c:db:ed:50:61:07:83:20:24:ce:c1:e3:37:f4:
                    b8:cf:e8:fa:29:d4:f9:7a:a4:e0:18:a3:4e:f6:f6:
                    13:02:66:5e:f0:2c:31:28:ed:2d:17:e4:63:aa:a2:
                    98:9a:8a:61:2d:a5:78:c1:95:a7:34:71:39:fe:f5:
                    15:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:72:3C:24:23:E5:ED:B8:AC:81:61:2C:67:3B:58:F8:92:52:03:32
            X509v3 Authority Key Identifier:
                keyid:79:FC:E3:F0:0B:88:97:AB:D1:F0:4D:76:7E:FA:87:8B:E2:AF:0B:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/79FCE3F00B8897ABD1F04D767EFA878BE2AF0B4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2347CF04CD5F902AED1B8C3B72F7BA62FF27D689128DFE4380B7725C8FD5C83/0/3136382e3138312e3137362e302f32322d3234203d3e20323635373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:f5:e8:b5:06:c3:be:63:56:4b:b7:b4:93:96:50:79:4f:90:
         96:ed:d9:75:96:4a:48:3d:33:e1:58:12:8f:aa:30:c1:01:3c:
         f0:9f:c4:f4:02:20:d1:81:ad:30:60:c1:2c:49:44:fd:7f:75:
         84:95:dc:28:6a:b8:6c:39:9e:b4:87:c8:3a:7b:4b:2e:f0:3f:
         05:29:ea:72:6e:75:34:be:36:77:93:69:89:93:a7:2b:50:ae:
         f6:a0:84:a7:73:13:e9:52:7d:8c:e1:89:59:28:94:0d:26:d8:
         62:fa:1c:99:43:37:97:53:c7:49:85:4b:d0:d9:65:ed:fb:4f:
         80:1a:b8:d7:b8:5c:ab:3f:e7:19:6f:10:d7:41:1f:72:fe:3f:
         8a:bb:47:cb:f7:c0:6b:4c:2a:99:0d:53:65:83:04:8a:37:d4:
         a3:82:25:bf:ac:c7:dd:0c:a8:ca:df:9f:e8:4b:25:58:64:ed:
         66:a0:03:af:6f:da:08:df:f8:25:29:68:aa:0a:7b:3e:6c:92:
         9e:cc:8b:64:4b:86:22:4a:3e:6e:d9:76:af:e3:ac:ae:71:85:
         dd:b5:18:6e:80:d4:3e:4a:ed:d1:15:69:4e:03:7f:35:ca:91:
         11:35:93:ec:93:df:c5:69:f6:60:16:80:11:a8:b6:cb:70:40:
         1f:13:a9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:26 2025 by rpki-client