Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32342d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231362e302f32342d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          1pZ8vrQNTrwtKvA+N4+gDRDnDczC2V2FWEa0dMtoKzc=
Subject key identifier:   4D:1A:4F:18:76:2D:CC:34:EF:84:96:35:AA:11:5D:EA:C2:59:E2:5C
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       075CD05984F502AECF95566E02166A83776FC3D3
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32342d3234203d3e20323635373734.roa
Signing time:             Thu 19 Dec 2024 15:50:00 +0000
ROA not before:           Thu 19 Dec 2024 15:45:00 +0000
ROA not after:            Thu 18 Dec 2025 15:50:00 +0000
asID:                     265774
IP address blocks:        164.163.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 20 Apr 2025 18:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5c:d0:59:84:f5:02:ae:cf:95:56:6e:02:16:6a:83:77:6f:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Dec 19 15:45:00 2024 GMT
            Not After : Dec 18 15:50:00 2025 GMT
        Subject: CN=4D1A4F18762DCC34EF849635AA115DEAC259E25C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ba:ec:20:0f:04:d7:ac:5e:1f:71:e3:a1:fa:
                    d3:4d:a6:7a:4a:b8:01:83:44:61:ca:59:d0:23:ce:
                    3c:e9:d2:f4:28:d4:2b:13:d4:6d:8e:f7:23:d0:0c:
                    3e:f7:ca:f8:e1:46:21:89:10:1a:22:a4:48:a6:f3:
                    e2:52:76:c4:05:c6:f3:81:e8:b0:e5:8f:7c:b0:2e:
                    e6:c9:ab:74:de:f6:34:35:30:94:37:3d:62:92:49:
                    5d:25:97:d8:8a:81:f6:a8:dc:5b:10:eb:21:4c:bd:
                    b5:03:51:9f:d0:19:84:54:ae:0d:80:8c:4a:90:b9:
                    11:08:1b:89:b8:c0:34:55:c0:0f:13:4c:51:d1:7d:
                    6c:69:8f:3b:4a:ef:19:2b:00:79:c9:12:99:18:61:
                    45:b1:81:63:c0:e9:dd:0f:13:42:8a:b9:b4:f4:15:
                    15:1e:c7:2f:35:ce:85:e2:0d:bb:78:67:d6:18:d4:
                    fd:31:cc:c3:b3:ac:dc:68:f4:5a:d4:4f:7e:24:c2:
                    7c:79:47:61:e3:94:34:5c:8a:1f:81:78:69:de:77:
                    78:1f:e4:8c:2c:95:48:10:32:7c:67:56:11:b4:79:
                    3a:08:e4:26:86:4d:48:50:dc:19:54:65:63:9b:a2:
                    1e:5f:5e:84:8a:a8:03:4f:42:89:92:4e:74:7f:eb:
                    70:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1A:4F:18:76:2D:CC:34:EF:84:96:35:AA:11:5D:EA:C2:59:E2:5C
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231362e302f32342d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:9b:a0:4d:ac:9b:e6:d8:42:8f:23:da:2a:8e:48:0e:b3:94:
         bf:3e:4d:8c:7f:ce:f9:6e:7c:11:12:1d:65:34:07:fa:ea:20:
         53:ac:a8:ee:89:cd:5f:7a:4a:84:d0:b2:93:0b:77:03:8c:63:
         8e:43:49:29:81:e8:a4:2b:71:81:09:04:ea:bf:75:19:23:34:
         ba:08:d8:8e:67:fe:e7:d6:15:cd:b1:dd:60:02:a9:63:ba:b3:
         f8:21:8f:e9:69:9d:3e:bb:bf:81:50:9a:0f:de:74:4e:99:62:
         2f:7c:d8:49:b2:ae:a3:a9:d9:c2:e0:5c:21:86:10:ba:0b:4a:
         1a:b2:94:01:ba:67:59:25:c6:d9:ef:9c:20:e6:11:0c:2c:a4:
         dd:a7:1b:88:0e:b7:10:aa:30:64:76:12:9d:58:9e:1a:ac:7a:
         1d:dc:81:4d:5b:c1:cd:f4:00:6d:25:c0:fe:90:aa:d5:dd:de:
         dc:42:1a:2d:3a:4d:b7:2e:10:a2:d7:98:3e:6d:cd:ca:5f:6e:
         62:58:3d:d0:01:ab:4f:28:82:8f:3d:52:50:4d:22:84:ec:24:
         b7:d1:c2:04:8d:99:ae:f9:aa:46:9a:a4:f9:15:7a:b6:3d:a6:
         00:96:e2:28:df:31:40:29:7c:0b:bb:1b:f2:7d:79:ed:89:1c:
         59:ad:5e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:48:56 2025 by rpki-client