Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa
File:                     3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa (raw, json)
Hash identifier:          iPM4CXndJi3BtPvxt9IluRw3ftk2TWIQT2bo2wRF2Ik=
Subject key identifier:   35:89:91:05:B8:01:E9:8B:65:50:8A:2D:0B:F1:6C:3E:A5:EB:AF:A3
Certificate issuer:       /CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
Certificate serial:       3DE9D41D87419CD9B3AFE7136BEB54B066AFCAA1
Authority key identifier: D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa
Signing time:             Thu 19 Dec 2024 15:50:00 +0000
ROA not before:           Thu 19 Dec 2024 15:45:00 +0000
ROA not after:            Thu 18 Dec 2025 15:50:00 +0000
asID:                     265774
IP address blocks:        164.163.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e9:d4:1d:87:41:9c:d9:b3:af:e7:13:6b:eb:54:b0:66:af:ca:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5A898170FB3A0741FC2D324965B61B368DB0A4E
        Validity
            Not Before: Dec 19 15:45:00 2024 GMT
            Not After : Dec 18 15:50:00 2025 GMT
        Subject: CN=35899105B801E98B65508A2D0BF16C3EA5EBAFA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:11:89:4e:68:0d:cd:8e:31:f4:86:2d:23:d9:
                    5e:89:1f:89:67:d6:61:e0:a7:29:26:e9:07:9f:9f:
                    0b:d0:f6:b1:17:a8:96:12:fd:90:5b:b6:ef:fb:35:
                    73:9c:ba:fb:eb:08:eb:6c:6b:40:13:c1:f5:9a:c4:
                    b5:f8:56:c5:0b:17:8d:3d:68:55:3b:6f:a1:12:52:
                    b2:5f:81:c6:a1:c5:8c:bc:e0:af:11:38:07:06:d4:
                    28:f4:dc:12:b6:94:7c:1a:7c:53:44:3d:1d:d6:4b:
                    99:fa:0c:d7:4b:ef:52:9a:5c:80:74:6a:6d:07:3f:
                    39:bd:bc:8b:e7:b9:c4:2b:be:f0:52:60:2f:2f:c3:
                    45:7c:c1:fc:31:5d:32:ee:85:9f:4a:8a:31:6b:be:
                    21:f0:53:cd:56:55:56:78:94:20:71:99:d2:de:59:
                    b9:bf:64:55:fb:2f:69:34:68:17:0e:73:3e:ba:59:
                    fa:d8:06:b0:b9:f2:f5:5d:f8:59:48:f3:2e:40:47:
                    52:c4:ce:46:44:8f:c4:62:1f:93:d7:e7:9a:64:3e:
                    20:69:a9:43:ed:75:d2:87:d8:4c:be:a8:b9:b7:78:
                    fa:93:89:12:a2:f5:b9:ef:0f:a8:ee:13:28:69:68:
                    a6:37:c8:ec:88:31:2f:9c:02:47:6a:06:83:c8:2e:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:89:91:05:B8:01:E9:8B:65:50:8A:2D:0B:F1:6C:3E:A5:EB:AF:A3
            X509v3 Authority Key Identifier:
                keyid:D5:A8:98:17:0F:B3:A0:74:1F:C2:D3:24:96:5B:61:B3:68:DB:0A:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5A898170FB3A0741FC2D324965B61B368DB0A4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F8D0FA491CC2A20C494EF7C547C586BC5A101F0E95C0B68513D058084B6A1308/0/3136342e3136332e3231392e302f32342d3234203d3e20323635373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:44:1a:82:03:8d:0d:d6:d6:f9:36:43:c2:fb:bb:dd:b6:fe:
         5d:6c:53:84:70:b7:78:bc:a3:09:cd:ff:9c:81:25:0d:1f:d9:
         37:90:89:d3:82:41:68:98:b6:94:29:ad:85:1c:20:fb:c2:a9:
         20:82:71:fe:1f:03:00:c0:ad:eb:e6:17:1e:e8:46:a8:87:40:
         0d:27:6a:2e:1b:f6:57:53:eb:6c:f1:3a:53:47:87:22:fd:08:
         9a:20:87:57:dd:67:87:f5:55:03:6f:63:62:2b:64:e7:f6:c7:
         0c:90:8b:0d:e3:1a:3d:65:0e:fa:79:17:27:a7:31:2a:e0:d7:
         34:74:6f:aa:65:0d:3c:59:f2:30:43:d9:ac:ec:fd:3f:aa:e5:
         16:da:c6:ed:3e:19:5a:67:e8:09:81:59:e6:17:36:cd:00:fc:
         21:5a:0b:a1:81:07:04:86:18:9a:ef:cd:27:a0:4e:2c:78:14:
         2e:23:69:7b:7e:d2:2a:41:68:fa:c0:0c:a9:75:d8:b4:66:41:
         1c:66:ac:92:4e:84:95:50:f2:78:34:24:60:ff:f9:55:df:f5:
         04:66:04:12:36:68:19:af:7e:ce:15:d6:36:e0:fc:cd:11:56:
         2a:44:5b:9d:7d:07:52:b6:ac:ba:21:b0:78:17:0b:77:2f:7c:
         4b:37:6a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:48:54 2025 by rpki-client