Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa
File:                     3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa (raw, json)
Hash identifier:          fuJyuwX41sP+gU5Q24Ghd5iTefR/EDk0bq/7vsDvTvs=
Subject key identifier:   1D:F3:74:4A:F5:E5:DF:DB:09:62:25:CA:29:26:A6:DB:91:0B:0E:14
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       2FF72E4AB24AF377C1DA04B8668AB804AB92D999
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa
Signing time:             Tue 04 Feb 2025 19:59:10 +0000
ROA not before:           Tue 04 Feb 2025 19:54:10 +0000
ROA not after:            Tue 03 Feb 2026 19:59:10 +0000
asID:                     265761
IP address blocks:        164.163.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:2e:4a:b2:4a:f3:77:c1:da:04:b8:66:8a:b8:04:ab:92:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Feb  4 19:54:10 2025 GMT
            Not After : Feb  3 19:59:10 2026 GMT
        Subject: CN=1DF3744AF5E5DFDB096225CA2926A6DB910B0E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:83:8a:a9:0b:1e:11:6c:b3:82:a5:db:96:7d:
                    12:c4:b7:56:d7:f6:8e:89:d8:eb:21:49:57:ae:51:
                    08:4e:ba:01:06:85:53:eb:4d:c0:4c:d4:44:f3:6a:
                    c2:51:5c:29:4f:12:81:52:fa:2d:b0:b4:3f:68:86:
                    99:14:4b:48:1d:50:6b:b7:06:18:ad:94:d2:6e:9a:
                    34:6c:24:e1:62:78:c0:be:cc:b8:fa:00:a5:2b:0c:
                    10:69:b3:9b:33:b9:ed:17:99:df:13:6b:9d:16:57:
                    c1:12:eb:04:00:cd:2c:f3:04:1e:c5:e9:b1:60:b5:
                    2e:9e:a0:2f:12:1f:f3:a1:d2:e4:f3:7c:55:ac:3e:
                    51:c7:46:de:13:11:21:72:c2:ab:b5:25:91:f7:1f:
                    0e:b9:f1:a8:76:e8:d3:a6:cf:c7:4b:45:be:06:01:
                    a7:a4:c9:cb:3a:bd:f1:e0:43:bc:34:ec:67:95:69:
                    f4:a0:3f:ff:d4:7a:25:aa:09:74:5c:37:d0:ea:6d:
                    86:46:e6:34:82:38:8e:b2:41:fa:42:08:54:4e:b1:
                    7e:22:0d:4f:08:c3:9d:a3:8a:4f:d3:24:f5:73:2f:
                    41:33:8b:84:5e:15:0d:25:b7:ec:ff:38:a0:8d:27:
                    57:17:ff:28:22:6f:a9:fe:b4:6b:0b:bd:9e:0c:05:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F3:74:4A:F5:E5:DF:DB:09:62:25:CA:29:26:A6:DB:91:0B:0E:14
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/3136342e3136332e31312e302f32342d3234203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:49:40:2b:ba:b6:e3:f7:86:c7:e4:fd:9c:37:90:44:ab:df:
         bf:cc:a4:fe:6c:be:59:ba:ba:b5:f9:f4:6b:56:0a:ab:ea:7c:
         26:16:f5:39:16:9c:a9:74:c6:5d:72:55:15:0d:64:80:56:6c:
         40:4e:50:d2:97:cb:d8:91:34:df:9b:c0:af:11:f9:9f:9c:ec:
         8c:14:dc:59:9a:2a:51:9c:9d:bf:c7:71:86:6e:0c:32:52:8e:
         47:47:8c:9f:23:1b:26:68:96:0e:82:21:d8:7b:8f:4f:d5:53:
         c5:8e:2d:57:5d:95:5a:31:54:53:2d:a4:46:c0:fb:b5:db:c0:
         53:aa:c3:9c:1b:3f:14:e8:1c:aa:30:2a:69:1a:5c:94:9a:48:
         0e:85:a5:97:7b:21:5b:9c:77:8e:b8:d8:16:40:ac:29:bb:cd:
         f4:13:ef:86:19:61:e7:00:14:2d:d6:c1:c5:b0:f6:86:1a:5d:
         8c:c2:d6:fc:91:59:0e:4d:de:36:16:0e:b3:2c:66:66:cb:ea:
         54:f4:5e:d1:17:06:03:0a:11:53:90:7c:1f:bb:ef:11:81:c2:
         ce:60:c6:7e:cd:30:54:c6:7d:54:42:c8:f3:2f:40:40:0a:fd:
         40:84:bc:07:ee:ee:cb:ab:64:5d:22:ee:cc:a9:2d:44:75:33:
         35:9c:6f:30
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUL/cuSrJK83fB2gS4Zoq4BKuS2ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzhBQkMxREQ2ODY0QzNDQzlGRTE4MTkyNzU2MEM3RjEw
QjgyQjQ0RDAeFw0yNTAyMDQxOTU0MTBaFw0yNjAyMDMxOTU5MTBaMDMxMTAvBgNV
BAMTKDFERjM3NDRBRjVFNURGREIwOTYyMjVDQTI5MjZBNkRCOTEwQjBFMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpg4qpCx4RbLOCpduWfRLEt1bX
9o6J2OshSVeuUQhOugEGhVPrTcBM1ETzasJRXClPEoFS+i2wtD9ohpkUS0gdUGu3
BhitlNJumjRsJOFieMC+zLj6AKUrDBBps5szue0Xmd8Ta50WV8ES6wQAzSzzBB7F
6bFgtS6eoC8SH/Oh0uTzfFWsPlHHRt4TESFywqu1JZH3Hw658ah26NOmz8dLRb4G
Aaekycs6vfHgQ7w07GeVafSgP//UeiWqCXRcN9DqbYZG5jSCOI6yQfpCCFROsX4i
DU8Iw52jik/TJPVzL0Ezi4ReFQ0lt+z/OKCNJ1cX/ygib6n+tGsLvZ4MBfNZAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUHfN0SvXl39sJYiXKKSam25ELDhQwHwYDVR0j
BBgwFoAUeKvB3Whkw8yf4YGSdWDH8QuCtE0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FRTNFQkFERDg2OTkwQUFEQkY3MzRCMjA5NDREREMyOEUz
QjQ1NzRCRTRDNjAyRUQwQkQ2MDM2MjM3RDQ3M0FCLzAvNzhBQkMxREQ2ODY0QzND
QzlGRTE4MTkyNzU2MEM3RjEwQjgyQjQ0RC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83OEFCQzFERDY4NjRDM0NDOUZF
MTgxOTI3NTYwQzdGMTBCODJCNDRELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUUzRUJBREQ4Njk5MEFBREJGNzM0QjIwOTQ0RERDMjhFM0I0NTc0QkU0
QzYwMkVEMEJENjAzNjIzN0Q0NzNBQi8wLzMxMzYzNDJlMzEzNjMzMmUzMTMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNjMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApKML
MA0GCSqGSIb3DQEBCwUAA4IBAQAYSUArurbj94bH5P2cN5BEq9+/zKT+bL5Zurq1
+fRrVgqr6nwmFvU5FpypdMZdclUVDWSAVmxATlDSl8vYkTTfm8CvEfmfnOyMFNxZ
mipRnJ2/x3GGbgwyUo5HR4yfIxsmaJYOgiHYe49P1VPFji1XXZVaMVRTLaRGwPu1
28BTqsOcGz8U6ByqMCppGlyUmkgOhaWXeyFbnHeOuNgWQKwpu830E++GGWHnABQt
1sHFsPaGGl2Mwtb8kVkOTd42Fg6zLGZmy+pU9F7RFwYDChFTkHwfu+8RgcLOYMZ+
zTBUxn1UQsjzL0BACv1AhLwH7u7Lq2RdIu7MqS1EdTM1nG8w
-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:15 2025 by rpki-client