Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
File:                     3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa (raw, json)
Hash identifier:          1rOztEk+zHzUL6uxKGC26TXnp6sBi8hHDXO0Pd+PJlc=
Subject key identifier:   AF:23:E3:81:A9:8A:F0:5A:3E:EF:FC:9B:A4:24:E9:8E:81:B8:82:22
Certificate issuer:       /CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
Certificate serial:       66B38836B47CD2A11C14420B68D2C1AFF2D1F1E9
Authority key identifier: 6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa
Signing time:             Mon 16 Jun 2025 22:22:32 +0000
ROA not before:           Mon 16 Jun 2025 22:17:32 +0000
ROA not after:            Mon 15 Jun 2026 22:22:32 +0000
asID:                     263758
IP address blocks:        161.238.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 26 Jun 2025 18:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b3:88:36:b4:7c:d2:a1:1c:14:42:0b:68:d2:c1:af:f2:d1:f1:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AF2210EC798A4DD44D1A8A7F55D135CD13483E5
        Validity
            Not Before: Jun 16 22:17:32 2025 GMT
            Not After : Jun 15 22:22:32 2026 GMT
        Subject: CN=AF23E381A98AF05A3EEFFC9BA424E98E81B88222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:75:b3:ed:31:a1:c6:18:57:e4:3a:83:f1:
                    80:db:78:2c:cf:47:fa:ce:34:45:ff:f7:96:7c:38:
                    82:a6:6a:39:da:fe:67:1d:e6:2e:7b:6a:a1:9e:38:
                    20:b6:a2:bd:1e:2b:3e:f0:94:e2:b7:9e:10:9f:d6:
                    87:ae:08:e7:5b:b7:e7:d7:6e:3d:b5:8d:19:f6:66:
                    de:2e:e5:c9:31:ed:13:2a:ca:46:0f:c4:08:0a:fc:
                    6c:ab:c5:a5:cd:8a:f7:77:72:1f:66:8b:a1:98:ce:
                    b8:fa:0e:5a:c2:6a:fd:60:1f:42:64:2b:db:51:b3:
                    89:9b:2f:83:00:50:c4:a5:b7:af:5b:82:d5:e6:25:
                    37:78:0d:56:cc:c0:2d:c8:4e:11:2b:76:98:21:5c:
                    3e:5b:ff:90:ad:d4:9e:0b:72:a2:80:5b:7c:15:98:
                    18:b4:00:32:eb:9a:8e:5f:e5:3e:60:b1:bb:a1:c2:
                    e7:50:0f:28:3a:f4:d6:32:61:19:8a:90:5d:b8:d5:
                    bd:32:c0:8f:3d:63:6a:a2:6b:00:c8:e2:bf:d6:d2:
                    22:94:f7:75:f2:a7:d8:9b:30:e6:3a:4b:fa:52:ae:
                    28:cc:ee:b9:80:dd:b9:4f:4f:b9:09:b8:31:9b:84:
                    e6:73:df:d2:56:41:e1:54:7e:e2:77:8f:6e:5c:0b:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:E3:81:A9:8A:F0:5A:3E:EF:FC:9B:A4:24:E9:8E:81:B8:82:22
            X509v3 Authority Key Identifier:
                keyid:6A:F2:21:0E:C7:98:A4:DD:44:D1:A8:A7:F5:5D:13:5C:D1:34:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6AF2210EC798A4DD44D1A8A7F55D135CD13483E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6888F0635BFCD890E69538C4F4480933B04941B21E1D85B156AF0B5CD685CFE1/0/3136312e3233382e3233362e302f32342d3234203d3e20323633373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.238.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:d4:29:3d:45:a3:91:da:d3:d8:e5:e1:6d:c2:60:9c:26:7d:
         56:38:45:17:0c:59:cb:25:6f:67:c2:57:b0:be:73:d4:49:60:
         14:13:69:42:ee:a5:b0:2e:55:27:30:2a:ab:04:ef:e9:3d:79:
         94:02:0c:d4:c6:a3:75:1e:c6:9f:43:43:42:51:0c:d3:b8:c4:
         f4:2a:0d:5c:19:05:1c:2d:bb:4b:74:c0:4f:fc:a8:69:d7:13:
         50:70:69:0f:d7:57:db:92:97:07:e8:b6:83:ba:12:b2:ee:d9:
         8a:a2:51:da:6e:d8:f8:96:05:f5:64:0f:25:12:5a:08:90:38:
         21:42:df:cc:d3:ef:12:ff:3e:1b:d5:66:6a:d9:7a:48:93:84:
         43:b6:01:20:01:93:76:aa:17:8f:15:a1:74:78:04:4b:11:de:
         97:88:f2:fb:9b:68:03:4d:e6:99:95:3a:c6:ed:31:87:c8:c0:
         fe:bb:a6:f1:ac:11:74:27:02:95:2f:ff:81:c7:ed:9d:70:8a:
         74:7c:42:c4:71:fd:20:5a:4b:f4:d2:f4:4e:fe:32:be:a7:f2:
         6a:fb:36:1b:f9:87:96:85:5d:a8:28:bb:d4:ef:20:c9:1c:2e:
         e9:f5:cb:97:93:43:fb:68:09:c4:5f:e7:bf:22:eb:ed:1b:5f:
         eb:e1:79:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 23 06:33:00 2025 by rpki-client