Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e3132382e302f31372d3234203d3e2036353638.roa
File:                     3136362e3131342e3132382e302f31372d3234203d3e2036353638.roa (raw, json)
Hash identifier:          C35rPuQZtO+5TVDIWJHM6GSgpMRvUPMp710hoPp3yHs=
Subject key identifier:   3B:78:B4:A2:C2:23:30:AC:66:C3:08:19:01:17:FD:95:EB:E7:A2:92
Certificate issuer:       /CN=677CEC9F1C4060755422FE75661CBC3718515578
Certificate serial:       39268D7061C9A67801C85EE45931C7C722438032
Authority key identifier: 67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e3132382e302f31372d3234203d3e2036353638.roa
Signing time:             Thu 22 May 2025 17:10:00 +0000
ROA not before:           Thu 22 May 2025 17:05:00 +0000
ROA not after:            Thu 21 May 2026 17:10:00 +0000
asID:                     6568
IP address blocks:        166.114.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 12 Jun 2025 06:52:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:26:8d:70:61:c9:a6:78:01:c8:5e:e4:59:31:c7:c7:22:43:80:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677CEC9F1C4060755422FE75661CBC3718515578
        Validity
            Not Before: May 22 17:05:00 2025 GMT
            Not After : May 21 17:10:00 2026 GMT
        Subject: CN=3B78B4A2C22330AC66C308190117FD95EBE7A292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b9:da:c3:f2:bb:4b:5e:da:88:33:96:ac:86:
                    4c:e7:04:21:56:0d:8e:59:3e:df:6d:cf:98:17:3d:
                    9c:c6:eb:8d:74:ea:d5:d3:50:fa:35:ce:12:e5:2c:
                    66:a2:46:ed:bf:83:a1:22:9c:13:d3:45:20:17:3c:
                    ff:35:0a:69:92:5c:92:80:0d:6c:8e:aa:59:0a:80:
                    fe:74:de:f8:61:72:d4:57:5b:4b:8a:70:d7:13:b6:
                    66:69:76:a6:24:3f:b9:43:25:11:f9:ae:3d:0e:7a:
                    06:f3:2a:5b:49:86:4e:6e:47:24:6b:ef:b0:e1:1e:
                    b8:3c:f2:5e:54:85:82:f1:84:df:cb:e8:df:68:d9:
                    4e:61:50:6e:01:51:0e:c7:91:69:83:03:75:16:41:
                    66:7a:ad:58:cd:3d:f5:9b:59:9f:1a:17:ac:f1:5d:
                    e7:eb:ca:28:5b:9b:f4:4e:71:e4:c8:48:75:e3:1e:
                    c6:83:75:38:03:e5:b6:d1:95:7d:4d:d7:fc:99:58:
                    20:7f:bd:f1:4f:4e:29:82:4b:20:c3:eb:f0:0c:38:
                    2c:1b:5c:ad:7a:50:da:ed:ff:d3:90:2e:f3:1d:7f:
                    51:7a:d1:6c:a5:cd:8f:09:e7:b2:03:58:28:f4:74:
                    42:76:f6:d6:10:66:56:70:b5:f3:f0:d4:21:d1:25:
                    57:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:78:B4:A2:C2:23:30:AC:66:C3:08:19:01:17:FD:95:EB:E7:A2:92
            X509v3 Authority Key Identifier:
                keyid:67:7C:EC:9F:1C:40:60:75:54:22:FE:75:66:1C:BC:37:18:51:55:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/677CEC9F1C4060755422FE75661CBC3718515578.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/677CEC9F1C4060755422FE75661CBC3718515578.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE23E216DF322905837021068BCA30C55CB95FDC90C21B9DDF83AC1123186D29/0/3136362e3131342e3132382e302f31372d3234203d3e2036353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.114.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9f:c4:d2:f0:b7:1b:38:ce:36:98:a4:f0:65:f0:03:52:61:83:
         22:d1:7b:60:1f:bf:98:0e:01:27:02:43:8b:0d:5b:ac:05:b7:
         b4:82:51:24:40:58:f6:5e:8e:79:01:69:66:36:64:b2:c1:6c:
         70:7e:55:b7:00:ac:42:71:07:b4:22:89:22:c4:73:f8:f9:80:
         88:db:d0:44:04:18:11:5c:ce:14:9f:f3:44:7e:54:ed:76:e7:
         fe:e7:c1:1e:49:55:68:e3:cd:d6:5a:b2:85:a5:99:93:a0:4a:
         7c:f5:22:a2:8f:92:d0:83:ea:b7:89:d2:55:9d:9a:df:45:cb:
         00:de:10:de:fd:d7:c0:97:f3:07:27:3c:bc:b1:2f:58:9f:fb:
         29:d7:7a:93:b8:26:a7:8b:8e:39:8c:dc:d9:f8:6e:b8:0f:6f:
         85:f0:ae:7d:69:b7:e5:0a:66:19:7e:37:52:13:50:a4:ee:cd:
         00:24:b0:ce:bc:5d:ab:2a:30:75:14:75:1e:ed:06:57:36:98:
         12:18:69:78:a2:b5:cb:20:6a:0b:03:9e:da:f0:d9:50:78:3d:
         f7:f8:00:a5:23:e6:f1:c8:99:d8:c8:44:65:93:f9:1c:74:20:
         be:63:b1:66:af:38:66:c9:fe:c3:5b:43:0d:e1:c4:f9:c1:9c:
         03:e7:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:27:04 2025 by rpki-client