Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e203532343233.roa
File:                     3136382e3139372e39372e302f32342d3234203d3e203532343233.roa (raw, json)
Hash identifier:          Syl2R81cTbiuTVNPl/7M0y8eA1J1SnWngg+fbFS04T8=
Subject key identifier:   4A:01:22:0E:90:E7:8E:DF:DA:E8:AE:33:A2:4F:1C:D8:07:46:43:0F
Certificate issuer:       /CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
Certificate serial:       1AE6958B9DBE35FE8D19C56D879260CE0D55DDF5
Authority key identifier: 04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e203532343233.roa
Signing time:             Wed 18 Jun 2025 19:50:00 +0000
ROA not before:           Wed 18 Jun 2025 19:45:00 +0000
ROA not after:            Wed 17 Jun 2026 19:50:00 +0000
asID:                     52423
IP address blocks:        168.197.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 09:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:95:8b:9d:be:35:fe:8d:19:c5:6d:87:92:60:ce:0d:55:dd:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=044328B588D7E6AB4F049D26F9E6FDBB2FB51970
        Validity
            Not Before: Jun 18 19:45:00 2025 GMT
            Not After : Jun 17 19:50:00 2026 GMT
        Subject: CN=4A01220E90E78EDFDAE8AE33A24F1CD80746430F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c0:52:47:fe:8b:3b:97:ef:10:92:3c:58:39:
                    2c:f2:66:33:42:de:07:fe:5b:eb:be:15:88:c4:95:
                    32:b1:27:48:31:d4:6b:9d:ad:67:f4:8c:cd:87:2a:
                    03:47:bb:45:72:ed:f7:a4:ab:5b:0a:f4:22:ca:e5:
                    c9:a6:11:17:16:ec:6d:ea:e8:23:87:0c:ca:35:3e:
                    c3:ac:35:c4:59:ab:ca:e7:5a:45:17:fb:ba:35:8c:
                    93:7e:22:f6:33:e1:36:6c:74:55:f4:d4:c8:d7:54:
                    0d:59:8d:83:c3:d1:cd:92:bf:66:17:7a:2f:8f:ca:
                    27:b3:ac:f9:6d:39:ae:5d:58:43:4a:62:95:7e:40:
                    63:b7:3b:fb:3e:94:47:d0:03:f4:10:77:89:61:b5:
                    b6:bc:ad:a4:7e:42:22:61:c1:e9:48:37:43:a2:f8:
                    1f:8f:aa:73:ff:84:73:d2:6a:11:e9:0f:da:ce:8d:
                    e5:32:1f:17:c7:4b:7a:76:03:3a:37:25:3c:d3:54:
                    ad:77:b6:f4:e6:a4:bc:87:b5:bc:42:b9:f8:86:d7:
                    f6:6e:33:28:db:b8:24:a5:0b:b5:fe:70:bf:09:eb:
                    f8:6c:ac:58:fa:f8:fd:a5:f1:b0:de:ae:5e:f8:9b:
                    f7:90:2a:5c:ff:c9:e9:a1:ce:45:e6:39:7f:34:87:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:01:22:0E:90:E7:8E:DF:DA:E8:AE:33:A2:4F:1C:D8:07:46:43:0F
            X509v3 Authority Key Identifier:
                keyid:04:43:28:B5:88:D7:E6:AB:4F:04:9D:26:F9:E6:FD:BB:2F:B5:19:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/044328B588D7E6AB4F049D26F9E6FDBB2FB51970.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1F00C0A324484A0E532189EE68B426AA220331435BA450CFFCF3816BF1031989/0/3136382e3139372e39372e302f32342d3234203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:c4:f4:ed:07:d4:45:34:21:8a:a0:5d:cd:c6:a1:fa:87:dc:
         70:64:3e:a6:9d:a2:43:84:bc:57:4a:db:0b:84:c9:06:51:67:
         54:02:19:a9:a3:d1:7f:98:48:a1:85:99:87:69:a1:08:07:e3:
         13:70:ee:29:d1:fb:5b:86:61:0d:90:27:a9:3a:81:b2:74:8e:
         d2:37:9d:19:bd:f2:53:3e:c0:23:d3:c8:86:da:7c:56:a5:56:
         71:8c:ff:64:be:96:20:26:15:dd:98:0d:d5:84:46:1c:39:6e:
         8c:ea:a7:49:16:a6:c9:58:c1:f5:76:d4:29:76:a1:00:79:ef:
         7a:82:4d:c0:94:07:e1:8a:72:a5:50:4e:9f:a2:75:cc:18:47:
         b4:71:77:d5:f6:b8:3c:18:1d:78:ee:66:4f:bd:13:03:fd:2c:
         4f:ad:fb:f0:d0:5d:27:7a:b4:22:99:de:0c:35:88:e5:d5:46:
         43:f6:38:27:97:b2:75:00:14:ab:90:13:0d:6a:9c:5b:29:30:
         d9:78:18:7e:de:9e:c5:14:25:2b:b4:11:a6:9b:1c:f6:eb:6d:
         09:90:0e:c9:61:d9:36:c8:3d:9d:27:29:be:ae:7a:45:ca:96:
         ad:2d:b1:68:0a:e7:e7:35:e5:ba:67:fb:09:56:66:dd:ae:3f:
         bc:55:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 03:40:13 2025 by rpki-client