Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa
File:                     3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa (raw, json)
Hash identifier:          5Q7+m/xpkccyaQsU6hyiixKQU9tMhR57vIPDt45LFFs=
Subject key identifier:   56:0C:D6:9F:09:70:83:F1:E1:A0:66:69:98:89:C7:DD:F4:68:95:35
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       5C975DE805BDB9F0CD63971EF95FA90BCCDAB008
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa
Signing time:             Tue 04 Feb 2025 19:59:10 +0000
ROA not before:           Tue 04 Feb 2025 19:54:10 +0000
ROA not after:            Tue 03 Feb 2026 19:59:10 +0000
asID:                     265761
IP address blocks:        164.163.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:97:5d:e8:05:bd:b9:f0:cd:63:97:1e:f9:5f:a9:0b:cc:da:b0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Feb  4 19:54:10 2025 GMT
            Not After : Feb  3 19:59:10 2026 GMT
        Subject: CN=560CD69F097083F1E1A066699889C7DDF4689535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:49:73:88:8f:dd:b9:ab:e0:31:80:71:55:a0:
                    82:ec:d8:3c:d5:72:e8:0f:d0:fa:da:a3:5c:97:46:
                    49:5c:66:1f:67:3d:e5:de:2d:d5:be:6f:f5:c0:ef:
                    72:ce:17:40:c1:3c:0d:07:5b:4f:85:29:c3:a7:68:
                    50:9f:ee:d5:9e:f4:b7:2f:5a:7a:7a:c3:1f:4f:31:
                    04:d2:f3:2f:57:6c:8a:b6:a6:ff:6f:16:97:6f:9c:
                    a1:57:53:9c:e2:87:6b:c5:e4:9b:86:0e:87:dc:07:
                    46:86:4e:36:87:9d:12:6b:dd:4b:45:e6:99:da:91:
                    7a:48:a1:3b:78:7c:32:86:e4:e0:bb:41:0a:ee:e5:
                    99:6a:59:08:55:69:df:3f:93:03:4d:fe:b4:3c:60:
                    b7:62:3a:a4:64:67:c6:77:34:be:91:11:66:07:8f:
                    11:9b:60:b1:7d:4c:5c:d8:20:df:42:bf:d8:37:c7:
                    76:30:18:06:0b:5e:a6:ab:6a:1b:19:a9:c5:66:ae:
                    dc:ce:cb:62:93:a3:c8:a0:3d:08:d1:5b:f6:2c:d6:
                    89:0b:08:cb:75:80:82:c5:98:00:75:68:d2:ee:f8:
                    b7:b3:9f:f1:ef:13:d5:31:db:e6:86:f9:57:e0:45:
                    45:a1:88:d7:fe:02:01:f9:40:77:1d:1c:1d:3b:a8:
                    6f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0C:D6:9F:09:70:83:F1:E1:A0:66:69:98:89:C7:DD:F4:68:95:35
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31302e302f32332d3233203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:d5:ca:db:34:ee:65:4a:fe:9b:ae:99:da:ca:5c:14:c7:98:
         be:bc:b9:f0:c5:aa:48:6c:3f:b2:ab:46:91:e1:ce:6d:d3:77:
         27:15:73:c5:ee:ee:c2:65:00:08:3a:60:e3:0b:63:78:28:3c:
         58:26:68:47:49:7e:e1:b8:b0:fd:5c:9a:70:1c:20:0b:b8:fe:
         56:18:eb:dc:e8:a2:09:b7:13:ea:fd:09:18:2e:e2:d8:82:a8:
         ee:b7:1c:f8:5f:5d:85:50:34:f0:52:10:37:bc:e6:a6:d7:ae:
         d8:6f:07:4f:fd:5a:a7:16:7c:cc:de:9b:fe:ad:18:35:71:5f:
         9b:69:b8:97:8b:67:f7:6a:42:22:d5:42:9d:13:d7:94:c9:72:
         d1:43:48:29:e9:5a:49:02:00:a8:b3:8c:2c:26:0a:8b:6b:dd:
         7c:42:d9:b6:c9:af:c2:64:3d:ed:9b:14:f6:76:01:41:2d:32:
         31:ef:bf:05:1d:6a:fe:c6:74:6f:a3:a8:18:83:54:04:a2:fb:
         e9:d7:7f:5e:a2:4b:78:e4:a0:23:93:a3:8a:5f:9d:32:61:c7:
         e4:a5:89:26:f3:d5:59:f3:98:35:4d:c0:fe:9c:a2:ce:0a:d8:
         b0:04:3e:9c:6b:67:ca:f5:a0:c1:30:5e:05:d0:6a:2a:e2:27:
         ef:a5:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:02 2025 by rpki-client