Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3232203d3e20323635373734.roa
File:                     3136342e3136332e3231362e302f32322d3232203d3e20323635373734.roa (raw, json)
Hash identifier:          bm/t0Cb89pZr1jfJl2JDUq7YtZOH+KfvFBrY7Af7K20=
Subject key identifier:   A6:9F:59:B0:7D:C8:E0:1C:31:32:AA:CA:D3:33:44:DD:51:1D:FF:37
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       777CC72A288DF3E9FF4A615C3B2767656EBCD8B8
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3232203d3e20323635373734.roa
Signing time:             Thu 19 Dec 2024 15:50:00 +0000
ROA not before:           Thu 19 Dec 2024 15:45:00 +0000
ROA not after:            Thu 18 Dec 2025 15:50:00 +0000
asID:                     265774
IP address blocks:        164.163.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:7c:c7:2a:28:8d:f3:e9:ff:4a:61:5c:3b:27:67:65:6e:bc:d8:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Dec 19 15:45:00 2024 GMT
            Not After : Dec 18 15:50:00 2025 GMT
        Subject: CN=A69F59B07DC8E01C3132AACAD33344DD511DFF37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:86:7f:c2:e9:b6:f9:2b:09:17:52:90:a7:
                    c1:4e:4c:67:da:7a:0a:ae:cf:b8:a3:a0:c5:bc:04:
                    04:de:25:e5:d4:ba:cc:10:6a:c9:ae:2a:08:3d:f0:
                    b3:e7:55:26:98:9f:99:48:7f:b5:f2:c1:40:ec:c8:
                    d8:c4:29:bc:d1:19:a4:21:a9:30:64:a7:4f:6e:f2:
                    4e:d3:d7:a1:c5:a0:41:aa:d4:95:cd:13:24:2e:99:
                    4e:bc:f4:42:2f:d7:9e:6a:68:91:29:a7:78:ee:d9:
                    b7:f9:18:fc:55:1f:4c:7c:51:f8:aa:d8:41:65:88:
                    c8:52:c6:4f:5b:e3:d0:f8:d1:e7:5e:87:58:02:54:
                    4f:d5:70:fb:a2:8e:da:20:ad:6b:55:72:e6:16:fd:
                    24:bf:1e:62:fe:d9:90:64:2c:76:8d:ec:f0:b7:58:
                    b4:5c:19:39:97:84:10:d8:94:9b:6f:1b:3d:f1:4b:
                    5b:c4:bc:62:c0:94:5e:f1:9a:cc:56:54:96:0a:d8:
                    b3:73:96:5a:f2:02:22:32:40:de:b4:fd:72:84:27:
                    20:8c:f0:38:a0:39:24:ad:a5:a7:c5:ee:e4:52:40:
                    f7:a8:cd:2c:1b:c5:ba:8e:36:a8:c4:9a:8e:c2:14:
                    0c:88:ae:7d:55:9a:e8:18:c1:8b:60:88:99:39:b7:
                    9f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9F:59:B0:7D:C8:E0:1C:31:32:AA:CA:D3:33:44:DD:51:1D:FF:37
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32322d3232203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:c4:fc:12:fb:06:24:3a:e3:c9:f0:17:fb:0b:32:f0:bd:0c:
         ef:21:39:0c:3c:db:2e:20:01:30:be:e1:6c:d6:5c:bc:58:4b:
         9d:ee:f2:90:94:5f:89:6d:64:48:cb:49:45:89:c4:d6:90:69:
         1f:da:fe:cc:d2:4a:50:a6:17:2b:62:31:20:cc:c0:11:2a:e3:
         33:77:c4:aa:7f:72:8b:cf:de:bf:95:5d:9c:1c:22:03:1d:af:
         18:af:d9:05:a0:99:03:29:51:96:a7:29:c9:46:fc:bb:1b:20:
         ff:28:60:7a:c3:3b:01:52:8f:a7:f5:fa:5f:c9:04:7c:44:ed:
         ed:78:dc:b3:1c:47:a6:76:e8:e4:2a:78:e2:cd:e8:9c:eb:70:
         95:63:8d:5d:d1:11:e7:47:e6:bb:74:6e:77:07:5e:8f:2b:da:
         2f:5e:fa:bb:43:31:68:01:b2:0d:1f:5d:19:7b:a0:28:12:39:
         5c:a7:ad:47:fe:36:1b:43:ae:06:4e:b7:82:05:1c:48:e3:1b:
         ee:b5:71:90:fd:82:c0:71:ef:82:ff:93:82:c4:ce:d9:12:6c:
         e4:87:2f:90:16:97:f9:d9:c8:4a:66:e2:b4:49:85:94:5d:9f:
         ff:3c:bd:3f:09:d1:f0:46:a6:4d:7a:96:83:d9:46:b0:2d:63:
         2e:03:0f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:46:05 2025 by rpki-client