Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e20323636373531.roa
File:                     3136382e39302e39322e302f32322d3232203d3e20323636373531.roa (raw, json)
Hash identifier:          imKEkBYDTXnJ3cOMG1cYnulnCcivBvHjK9vK4u7yqkE=
Subject key identifier:   69:74:79:80:57:85:21:76:47:26:5F:E4:48:3E:6E:5F:C1:51:F6:9A
Certificate issuer:       /CN=E45FE5E7213B150375DA656763256CB72EEEE655
Certificate serial:       6B1C65EB29069C2EB31265664CE53DF91ED714CE
Authority key identifier: E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e20323636373531.roa
Signing time:             Fri 02 May 2025 20:17:34 +0000
ROA not before:           Fri 02 May 2025 20:12:34 +0000
ROA not after:            Fri 01 May 2026 20:17:34 +0000
asID:                     266751
IP address blocks:        168.90.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1c:65:eb:29:06:9c:2e:b3:12:65:66:4c:e5:3d:f9:1e:d7:14:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45FE5E7213B150375DA656763256CB72EEEE655
        Validity
            Not Before: May  2 20:12:34 2025 GMT
            Not After : May  1 20:17:34 2026 GMT
        Subject: CN=697479805785217647265FE4483E6E5FC151F69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:77:aa:e0:85:aa:4d:cd:64:c5:ba:10:a5:
                    43:d2:60:f8:ff:3e:e9:83:b7:bf:95:03:93:a3:45:
                    bc:c4:c3:be:37:30:0d:c7:09:05:d4:66:d1:1e:53:
                    77:be:51:d7:c4:a8:88:32:e1:4d:be:19:07:22:f9:
                    7e:69:8e:0c:5f:df:3a:60:98:20:74:fe:a4:b9:f8:
                    0d:3a:dc:70:c6:09:9a:77:4d:17:10:36:80:6b:c5:
                    59:5c:54:98:0e:52:51:28:b7:84:80:72:dd:e5:89:
                    62:26:5f:e9:03:e3:65:cc:15:62:ab:41:75:e6:2d:
                    a3:79:52:11:f2:c7:9e:5d:ff:f5:8b:86:de:8a:ea:
                    aa:d4:0d:29:ca:dd:d0:2c:40:42:16:8e:ea:43:1a:
                    14:40:34:e8:bd:29:93:0f:12:c1:31:a3:ef:6d:91:
                    7e:a6:19:7f:b4:8c:53:3d:26:d7:3e:b3:38:49:b2:
                    7d:61:d6:98:92:4a:02:89:20:53:d7:07:2e:ff:94:
                    7b:56:65:52:d1:66:79:88:1d:67:01:c0:5e:74:83:
                    57:78:8e:33:e3:6e:fd:ea:71:37:77:2d:33:b5:26:
                    9b:17:12:66:cf:46:a7:fd:6b:1d:72:3c:bf:57:83:
                    27:64:04:6d:bb:75:16:69:4e:89:1e:a5:0d:ea:75:
                    63:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:74:79:80:57:85:21:76:47:26:5F:E4:48:3E:6E:5F:C1:51:F6:9A
            X509v3 Authority Key Identifier:
                keyid:E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/3136382e39302e39322e302f32322d3232203d3e20323636373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:2c:72:0d:bf:10:af:b5:4b:47:0f:ba:8b:32:21:c3:87:28:
         2c:e7:36:b8:de:3a:86:2c:d0:9f:56:23:e6:34:71:4c:f2:f5:
         19:40:29:51:3b:18:ed:f3:e3:4d:c2:9f:61:a7:bf:66:6d:0c:
         de:54:20:75:93:fd:23:d4:91:55:0f:7e:d7:a2:1a:80:f4:ce:
         82:e0:2b:ff:5a:22:98:63:31:fb:fa:fc:7b:2e:e6:a1:a9:93:
         1e:d6:2b:05:2a:46:39:b6:3c:f0:7c:38:24:97:75:fd:98:ef:
         3e:69:06:2f:c5:cf:d3:4a:12:03:d0:b1:e4:79:2c:53:07:a4:
         0c:5a:be:ad:38:ad:02:ee:20:f5:62:58:a8:5c:a6:9f:51:6d:
         57:26:eb:21:59:9f:fd:94:f4:56:f9:a0:d4:59:a7:76:e5:14:
         68:f1:62:ac:43:12:23:02:38:b6:7d:c8:ec:e6:5d:cd:4e:66:
         36:d3:52:b9:30:7c:f0:7c:4c:be:60:5c:fc:3d:5b:d8:48:88:
         42:ec:b0:1a:c2:d6:a2:b2:b6:7f:69:d6:30:16:f0:95:ce:48:
         0b:8e:6b:4d:02:5c:3e:1f:57:57:c0:9f:df:c0:01:78:a9:8f:
         fd:f0:b1:ba:26:c7:dd:f9:89:b2:a1:98:d6:e3:d9:76:af:8f:
         49:04:55:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 22:36:16 2025 by rpki-client