Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136382e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3136382e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          CFvUg0D9eSenYXKkk12wLh+lUUYnLGomI5ghLA4k4bw=
Subject key identifier:   55:4B:49:7E:74:1E:14:24:23:9B:16:AB:EB:C5:8B:62:5F:9D:27:F3
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       1B7C25D991BEEC03C87BD0C020EA2B931BD1EA35
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136382e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 18 Feb 2025 22:10:11 +0000
ROA not before:           Tue 18 Feb 2025 22:05:11 +0000
ROA not after:            Tue 17 Feb 2026 22:10:11 +0000
asID:                     264696
IP address blocks:        168.232.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7c:25:d9:91:be:ec:03:c8:7b:d0:c0:20:ea:2b:93:1b:d1:ea:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Feb 18 22:05:11 2025 GMT
            Not After : Feb 17 22:10:11 2026 GMT
        Subject: CN=554B497E741E1424239B16ABEBC58B625F9D27F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5f:04:a6:13:74:bc:f9:0e:f0:6f:ea:d3:c0:
                    b2:d9:ae:08:ce:d0:f6:65:fa:7f:db:32:4e:2b:31:
                    d5:79:8e:11:8b:3d:e8:9a:ab:3e:0e:b5:c7:0b:1d:
                    87:e5:d1:88:f7:33:29:10:79:9e:6c:35:de:0f:6b:
                    57:da:d2:14:9f:da:81:11:16:1c:48:39:d4:e8:dd:
                    f8:7b:e1:3a:2d:12:2f:c5:8d:7f:d8:20:6e:db:b6:
                    9c:5c:b0:40:db:d3:a0:90:e7:5b:bc:a0:68:69:f5:
                    20:68:df:1f:30:15:a2:02:2d:cb:35:90:b4:ed:83:
                    34:ab:72:7f:ea:12:3c:04:9f:94:7a:d7:56:e0:ef:
                    46:93:39:44:23:df:e9:4f:f0:b2:86:e5:97:80:ae:
                    d6:a1:c8:4b:3c:ad:a6:5d:39:b1:12:ba:a2:6b:b9:
                    b1:e2:cb:9b:2b:4b:64:93:2a:24:f5:9f:98:c9:d6:
                    16:81:07:72:f3:e4:cb:4c:58:be:b7:25:c9:a7:3b:
                    f8:e1:6d:85:8c:a7:a6:2d:0b:61:b2:ca:b0:e6:0c:
                    04:3a:d7:67:53:f4:6c:8d:5f:29:67:96:39:02:d2:
                    19:c1:e4:2c:06:da:33:c3:cb:d9:38:7f:e3:ac:c7:
                    4e:ce:f6:45:e0:3f:f9:80:a1:88:69:d3:cd:19:62:
                    f6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4B:49:7E:74:1E:14:24:23:9B:16:AB:EB:C5:8B:62:5F:9D:27:F3
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3136382e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:76:c7:aa:ac:64:32:28:97:a9:75:d1:c5:4e:65:a2:73:6a:
         cd:7e:b8:92:2d:17:11:8c:32:0c:05:28:92:dd:0d:7a:1f:e3:
         d5:c9:7d:b9:8f:81:1f:20:69:cb:e8:12:fb:0f:ef:67:41:cc:
         2a:1b:26:cb:4f:23:88:30:08:36:40:81:f5:3d:73:9e:cc:67:
         86:8b:1a:fd:91:01:21:71:4b:5f:eb:0b:a2:6b:c9:24:8a:72:
         02:7d:50:13:14:0d:40:76:7c:34:b2:a1:f8:34:4a:91:69:d9:
         6a:5e:52:3e:e6:18:88:a4:71:b2:ac:08:d7:34:e7:15:c5:2e:
         55:3c:27:eb:5b:98:80:d7:1c:cc:3c:54:37:8a:7e:8f:e6:d2:
         d4:be:67:ae:68:55:bd:fc:6a:8e:dd:f4:12:6e:8d:d5:d4:3c:
         6d:b4:d2:42:71:33:62:5a:d8:f0:51:21:9e:4f:2c:9c:7a:eb:
         8e:4a:a6:c6:c6:bf:71:e1:ca:08:06:28:58:ab:f3:23:ef:03:
         03:0a:61:f9:e0:3e:5a:e0:63:7b:8a:cf:f8:b9:53:9f:66:0a:
         0c:94:05:a1:69:eb:10:10:48:cf:8f:a4:68:26:97:e4:28:cf:
         e9:c6:8c:a5:60:2d:f0:e8:91:58:23:87:f8:32:75:fe:23:4b:
         79:0c:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:14 2025 by rpki-client