Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa
File:                     3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa (raw, json)
Hash identifier:          D8Ph2cVYLdLQxRqpD+hyo+Hf7l4LWNoDzxsHA2aKPsg=
Subject key identifier:   E8:17:05:98:2F:63:D9:02:A1:C5:2D:65:E6:49:8C:87:EA:76:FA:74
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       6294632CE4AC7F061E3E1278543D72C1883804A6
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa
Signing time:             Wed 07 May 2025 02:15:00 +0000
ROA not before:           Wed 07 May 2025 02:10:00 +0000
ROA not after:            Wed 06 May 2026 02:15:00 +0000
asID:                     274053
IP address blocks:        168.243.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 20:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:94:63:2c:e4:ac:7f:06:1e:3e:12:78:54:3d:72:c1:88:38:04:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May  7 02:10:00 2025 GMT
            Not After : May  6 02:15:00 2026 GMT
        Subject: CN=E81705982F63D902A1C52D65E6498C87EA76FA74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4d:e8:31:00:9e:d3:59:8a:46:76:db:45:48:
                    7a:6c:00:35:51:b1:2b:cf:e2:89:42:c2:1e:99:a3:
                    9c:b7:d9:69:3d:d6:3c:c0:5b:1e:ee:f4:6a:86:cb:
                    7e:1a:8f:1b:74:e8:8a:38:23:6b:7a:65:1c:8b:a4:
                    23:43:0a:68:03:62:c4:72:ce:07:f9:0c:2a:ed:0c:
                    c3:2e:e2:0e:8b:80:12:7c:0e:d1:a6:e6:fb:9f:b4:
                    f6:03:64:9e:9b:dc:71:3c:28:92:df:25:c1:67:cd:
                    81:20:3b:33:86:b6:e0:e3:6b:5e:10:c5:b2:e5:35:
                    4e:4b:89:e4:3d:fa:98:d7:bc:b5:55:24:63:02:09:
                    38:af:7e:f7:ea:8e:e6:59:f4:74:b5:cb:f5:e1:27:
                    f6:00:e7:02:a6:ec:42:d6:d0:07:11:69:94:45:b1:
                    30:72:70:8d:16:02:1e:c9:e5:51:3f:9f:93:76:a2:
                    dd:cb:d9:f4:5c:a9:1e:18:0f:40:a1:17:a0:57:c9:
                    f0:1a:1c:82:4a:a8:82:8e:b3:30:1b:2a:4c:6c:95:
                    47:83:25:fa:23:0b:14:db:7f:2c:1b:f2:c0:ae:5d:
                    39:54:19:08:f5:b0:2b:09:d1:ad:cf:f1:f5:fe:65:
                    87:ca:13:82:b6:b6:bb:da:70:bc:df:8e:a1:60:c2:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:17:05:98:2F:63:D9:02:A1:C5:2D:65:E6:49:8C:87:EA:76:FA:74
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e37322e302f32342d3234203d3e20323734303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:4a:ac:db:05:99:1b:9f:88:84:19:d7:d3:46:ae:d1:29:
         5d:fb:39:a2:c6:99:a0:d0:bb:81:2e:16:3f:3c:db:89:b7:79:
         71:39:73:28:e9:43:1c:7b:87:0c:8a:7d:90:a4:c7:98:e0:c5:
         de:19:74:e0:36:34:4e:a5:8f:9f:e5:06:6a:dd:b9:6f:c9:8d:
         01:f1:9f:a7:90:89:4d:a7:1e:f2:4d:62:03:bd:14:1a:53:9d:
         3b:d8:1b:cb:59:9c:bb:e1:cc:b8:71:ad:ce:ea:94:c0:6b:cc:
         05:5d:f2:07:dc:e7:cb:b6:f6:13:81:e3:cc:1c:68:a4:4f:9c:
         35:ab:5b:bc:c6:1a:24:c2:06:ae:98:08:5d:4f:35:bb:d4:b7:
         92:7c:f6:ab:55:40:9f:49:c5:be:b4:df:be:fa:72:78:e2:0e:
         ca:2f:d9:80:56:5e:3e:04:50:e7:3a:3c:49:bb:d8:f2:3c:a1:
         ae:07:41:fe:10:70:6f:0c:6f:fc:d2:42:c7:50:77:93:c7:f2:
         10:62:64:37:e5:90:01:92:98:37:c2:1e:10:c2:ac:9d:f0:ee:
         1f:cc:47:18:33:7d:c9:23:1a:3b:86:36:b4:c4:a8:56:71:5e:
         d2:f3:01:82:5e:4d:72:63:39:3b:d9:73:8b:4f:7f:b8:14:60:
         83:97:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:44:37 2025 by rpki-client