Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3136382e3233322e33362e302f32322d3234203d3e203236363137.roa
File:                     3136382e3233322e33362e302f32322d3234203d3e203236363137.roa (raw, json)
Hash identifier:          206RR9Ti42+OOTmiLCfnq5PgEdXdK7v59MsiotYwnd0=
Subject key identifier:   EC:F0:F4:71:93:A9:18:C2:69:85:30:36:0A:B6:38:CB:01:BF:D6:C9
Certificate issuer:       /CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
Certificate serial:       387D392FDD5637496792A97F3715979DDB3D2035
Authority key identifier: 5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3136382e3233322e33362e302f32322d3234203d3e203236363137.roa
Signing time:             Tue 04 Feb 2025 18:47:37 +0000
ROA not before:           Tue 04 Feb 2025 18:42:37 +0000
ROA not after:            Tue 03 Feb 2026 18:47:37 +0000
asID:                     26617
IP address blocks:        168.232.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:7d:39:2f:dd:56:37:49:67:92:a9:7f:37:15:97:9d:db:3d:20:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5
        Validity
            Not Before: Feb  4 18:42:37 2025 GMT
            Not After : Feb  3 18:47:37 2026 GMT
        Subject: CN=ECF0F47193A918C2698530360AB638CB01BFD6C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:21:3c:e8:a2:35:4d:0b:d4:21:5e:82:df:4d:
                    1f:93:09:38:54:ae:e0:0d:26:97:a0:ba:ae:30:5b:
                    5c:ce:d7:39:04:8e:8a:12:9d:8c:04:c4:80:bc:30:
                    87:99:b0:20:64:d6:5b:7c:96:f7:1d:4d:16:04:06:
                    43:f1:65:a5:22:45:49:c9:4f:51:df:c5:4d:4a:95:
                    6e:f1:71:36:40:a2:fa:2f:e3:7c:e0:3c:c4:23:f8:
                    3d:1b:0d:9a:5b:cc:d6:97:7d:b3:c1:f4:23:46:ea:
                    66:b3:52:f1:5b:e3:4f:81:c3:7b:46:4c:2e:da:a8:
                    ea:f5:42:56:f7:dc:fd:3a:36:4f:40:81:36:ad:e5:
                    0d:ea:dd:38:28:70:37:77:0d:c3:e7:dc:d9:fe:73:
                    f3:23:45:ed:80:0a:92:0b:cb:80:b0:9e:2e:82:a8:
                    93:5c:40:79:ea:2b:81:5f:ab:01:76:16:c2:8f:05:
                    05:de:29:4b:28:a2:78:1e:86:a8:18:35:4c:f7:fa:
                    02:92:db:b8:cd:42:59:62:3a:56:fc:fd:86:c3:77:
                    9b:08:ea:84:2b:54:c2:cc:e5:55:7b:21:36:8b:13:
                    92:ed:5c:2f:ac:56:e2:c3:8e:b7:31:74:47:1c:69:
                    59:e6:e9:00:1d:52:da:5d:41:e8:72:3d:e7:c4:05:
                    19:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F0:F4:71:93:A9:18:C2:69:85:30:36:0A:B6:38:CB:01:BF:D6:C9
            X509v3 Authority Key Identifier:
                keyid:5B:5D:29:B9:FD:18:B3:30:10:11:AB:FD:EC:89:A5:E5:56:A2:DD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B5D29B9FD18B3301011ABFDEC89A5E556A2DDD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D480B8677CF715BF17224C10EC07A310FFBD6D900314B8F0CDC5E62C1097B75B/0/3136382e3233322e33362e302f32322d3234203d3e203236363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:53:71:5d:de:f0:71:78:34:bc:ae:3b:82:f4:93:cb:8b:00:
         5d:f0:bc:bf:0e:fc:ea:a7:eb:9c:cd:21:40:0e:23:bf:e4:88:
         b6:76:a4:32:d9:f8:a4:40:f7:f3:a1:a3:06:29:f2:b4:2c:49:
         7c:ea:ff:77:54:c8:95:6d:5c:48:26:47:b3:b1:df:f6:b3:42:
         60:ee:e7:93:b9:3c:f7:10:60:08:d7:04:28:b0:a4:42:e0:17:
         3e:79:90:4f:1a:cf:0f:b7:4c:12:b9:22:59:f5:30:60:ba:99:
         dd:70:ed:f9:f8:71:bc:1b:89:da:1c:60:b4:ef:a8:2e:0a:bf:
         a6:9c:ef:12:7e:66:55:e2:6b:0c:a7:0b:df:66:de:d0:fc:98:
         00:99:30:89:b1:7c:f9:55:45:b9:9b:0f:8a:22:25:51:ba:50:
         a0:ca:12:2f:6a:0a:0f:f3:84:db:8b:18:ed:a3:d5:48:85:ca:
         96:6c:22:29:4b:50:45:79:a2:cf:23:5c:e1:3f:37:f4:a3:98:
         20:1b:96:ef:52:4d:1b:0f:93:06:3b:00:5a:68:44:1f:28:cf:
         e4:cd:91:b2:29:28:7b:29:f4:1f:6a:21:ad:86:28:79:c6:85:
         60:4a:e3:80:9b:de:2c:af:7f:48:15:6a:52:43:40:d3:9d:dd:
         c0:ae:7a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:04 2025 by rpki-client