Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38382e302f32312d3234203d3e20323632313739.roa
File:                     3136382e3234332e38382e302f32312d3234203d3e20323632313739.roa (raw, json)
Hash identifier:          TuN36cjCFbcO+cGwKpYW2UQ2BFbpdaE2mxM7C3ivPUI=
Subject key identifier:   4A:8B:F9:D2:B8:71:83:9D:DF:08:94:AA:99:7B:24:0D:E2:26:02:BE
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       3DBBE5038E1C619DBAC42934BED13D510D4D8222
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38382e302f32312d3234203d3e20323632313739.roa
Signing time:             Mon 05 May 2025 14:45:00 +0000
ROA not before:           Mon 05 May 2025 14:40:00 +0000
ROA not after:            Mon 04 May 2026 14:45:00 +0000
asID:                     262179
IP address blocks:        168.243.88.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 13 May 2025 20:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:bb:e5:03:8e:1c:61:9d:ba:c4:29:34:be:d1:3d:51:0d:4d:82:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: May  5 14:40:00 2025 GMT
            Not After : May  4 14:45:00 2026 GMT
        Subject: CN=4A8BF9D2B871839DDF0894AA997B240DE22602BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:9a:96:df:ae:02:ef:59:3a:fe:80:6a:39:
                    61:4e:47:89:60:48:fe:3c:17:5c:96:42:e7:7a:14:
                    a9:79:59:ec:87:db:2d:57:b6:59:2c:8c:93:2b:10:
                    6e:b1:83:c5:49:75:43:00:e1:0b:6e:19:07:3f:6e:
                    e3:4f:75:c4:6a:4a:e6:30:a3:10:cd:f0:25:86:5c:
                    ef:00:4d:c6:f7:af:94:d1:ed:29:b0:8e:47:b7:26:
                    e4:9e:de:51:96:7c:10:ee:16:24:1f:48:93:c4:aa:
                    24:4b:80:95:c9:83:2f:6d:d3:c3:2c:3d:f9:85:5d:
                    d0:9c:91:0e:c8:db:6a:79:18:dc:cc:75:1d:90:13:
                    1a:d7:56:0d:d0:e4:aa:c8:6f:fd:7f:17:d9:3f:bb:
                    78:ed:a4:2e:ec:80:91:7d:b4:20:82:ee:be:f5:f9:
                    da:53:03:4f:7a:93:14:0c:32:5b:36:ec:f9:6e:bb:
                    b4:28:61:c6:d6:73:77:e5:3b:a3:0c:c2:61:2c:14:
                    78:2b:72:ca:12:69:96:78:e2:87:19:bb:3a:92:41:
                    f2:93:2e:d6:6d:02:ce:dd:e4:7f:fe:82:b6:f0:9a:
                    6f:da:83:3b:1e:a2:1f:7f:c6:33:e3:6b:3a:86:7b:
                    79:c9:5b:41:90:15:75:44:c7:d5:08:a5:dd:1a:cf:
                    50:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:F9:D2:B8:71:83:9D:DF:08:94:AA:99:7B:24:0D:E2:26:02:BE
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e38382e302f32312d3234203d3e20323632313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:6c:3f:e1:4d:e2:88:4d:cd:21:b3:82:19:f5:1a:a3:9d:ce:
         18:41:5b:7c:d5:9e:07:0a:88:a2:80:95:10:76:7b:c4:a8:62:
         8d:d8:ee:14:b7:2c:f1:ff:e8:26:5a:83:9d:4a:87:52:8a:d5:
         11:58:43:18:a4:69:56:fb:1f:f0:5d:1c:12:4e:68:d5:c3:e0:
         e0:5c:d2:29:fa:24:cd:d0:d0:57:1d:16:df:b9:08:2c:98:02:
         e3:71:77:e0:4f:1f:40:6f:eb:56:af:97:1f:74:ac:80:70:29:
         3c:24:cb:66:02:9f:68:80:64:58:c7:c0:f4:90:c6:44:96:0c:
         ba:76:0f:6b:e2:27:33:2f:6a:b5:2e:5c:b0:54:cc:31:0d:bc:
         c4:04:b5:4a:78:12:53:fe:b0:6b:c3:a9:47:90:dc:63:3a:6f:
         c8:ea:54:eb:cc:7e:4b:68:d5:14:24:9c:f6:e3:e5:15:65:cf:
         4e:c9:3e:18:19:a4:61:90:34:65:69:30:26:90:67:4b:57:7a:
         c5:5c:23:2a:26:c7:06:ee:06:be:a3:32:c2:4f:79:11:56:88:
         94:c0:32:f5:52:fb:60:c6:4a:9e:a4:56:29:de:d4:75:b0:66:
         48:db:10:37:dd:c8:64:7e:a7:6d:78:e0:83:22:ef:ac:83:da:
         93:7f:7e:b2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPbvlA44cYZ26xCk0vtE9UQ1NgiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDM1MDNEMDNFM0Q0REZBMDc2N0Y2REZGM0JBNzFERDdC
NjIzNkFGQTAeFw0yNTA1MDUxNDQwMDBaFw0yNjA1MDQxNDQ1MDBaMDMxMTAvBgNV
BAMTKDRBOEJGOUQyQjg3MTgzOURERjA4OTRBQTk5N0IyNDBERTIyNjAyQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv85qW364C71k6/oBqOWFOR4lg
SP48F1yWQud6FKl5WeyH2y1XtlksjJMrEG6xg8VJdUMA4QtuGQc/buNPdcRqSuYw
oxDN8CWGXO8ATcb3r5TR7Smwjke3JuSe3lGWfBDuFiQfSJPEqiRLgJXJgy9t08Ms
PfmFXdCckQ7I22p5GNzMdR2QExrXVg3Q5KrIb/1/F9k/u3jtpC7sgJF9tCCC7r71
+dpTA096kxQMMls27Pluu7QoYcbWc3flO6MMwmEsFHgrcsoSaZZ44ocZuzqSQfKT
LtZtAs7d5H/+grbwmm/agzseoh9/xjPjazqGe3nJW0GQFXVEx9UIpd0az1CzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSov50rhxg53fCJSqmXskDeImAr4wHwYDVR0j
BBgwFoAU01A9A+PU36B2f23/O6cd17YjavowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wQkIwNzFEOTZEOEZCRTJBODY5OTA5MDVEQzE3RTE5OTM3
MEE1NzA1MjM2QTAwMDY1RDY4NTYzRkFBREI4NUU2LzAvRDM1MDNEMDNFM0Q0REZB
MDc2N0Y2REZGM0JBNzFERDdCNjIzNkFGQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMzUwM0QwM0UzRDRERkEwNzY3
RjZERkYzQkE3MUREN0I2MjM2QUZBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEJCMDcxRDk2RDhGQkUyQTg2OTkwOTA1REMxN0UxOTkzNzBBNTcwNTIz
NkEwMDA2NUQ2ODU2M0ZBQURCODVFNi8wLzMxMzYzODJlMzIzNDMzMmUzODM4MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzIzNjMyMzEzNzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqPNY
MA0GCSqGSIb3DQEBCwUAA4IBAQCvbD/hTeKITc0hs4IZ9Rqjnc4YQVt81Z4HCoii
gJUQdnvEqGKN2O4Utyzx/+gmWoOdSodSitURWEMYpGlW+x/wXRwSTmjVw+DgXNIp
+iTN0NBXHRbfuQgsmALjcXfgTx9Ab+tWr5cfdKyAcCk8JMtmAp9ogGRYx8D0kMZE
lgy6dg9r4iczL2q1LlywVMwxDbzEBLVKeBJT/rBrw6lHkNxjOm/I6lTrzH5LaNUU
JJz24+UVZc9OyT4YGaRhkDRlaTAmkGdLV3rFXCMqJscG7ga+ozLCT3kRVoiUwDL1
UvtgxkqepFYp3tR1sGZI2xA33chkfqdteOCDIu+sg9qTf36y
-----END CERTIFICATE-----
Generated at Sat May 10 07:27:43 2025 by rpki-client