Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234352e302f32342d3238203d3e20323633383031.roa
File:                     3136382e3139362e3234352e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          c1ctlqNRznRTNBnofWtGphDofLsyfLcNyRUZkzCs6xw=
Subject key identifier:   76:3F:E9:55:E1:5A:6C:AA:D3:97:59:33:10:4E:B5:27:0B:24:B5:EF
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       44DDBDFCBCFE86F0434C8FEC4D0DACCFFC371EE2
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234352e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:02 +0000
ROA not before:           Mon 05 May 2025 00:10:02 +0000
ROA not after:            Mon 04 May 2026 00:15:02 +0000
asID:                     263801
IP address blocks:        168.196.245.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 12 May 2025 13:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:dd:bd:fc:bc:fe:86:f0:43:4c:8f:ec:4d:0d:ac:cf:fc:37:1e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:02 2025 GMT
            Not After : May  4 00:15:02 2026 GMT
        Subject: CN=763FE955E15A6CAAD3975933104EB5270B24B5EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:91:3e:e5:a6:b3:97:5b:ec:2d:24:cd:46:bb:
                    07:5a:5b:f6:fa:b7:d0:3c:7f:b9:33:9f:98:da:cf:
                    bb:eb:f4:2f:df:da:36:4e:b7:6a:da:81:bd:63:dc:
                    81:7b:86:5c:94:a6:f8:d4:bd:0c:f3:24:0a:ff:65:
                    ea:55:7e:a5:98:38:a4:dd:7b:87:5b:f4:33:dd:3d:
                    90:21:07:ae:07:e4:d3:c4:9c:f3:af:f2:15:a2:bc:
                    7c:0f:1e:d9:37:eb:65:d7:36:74:46:5e:b9:4a:f2:
                    9d:8a:c5:b1:37:e5:d5:a8:95:2e:cf:65:fe:0b:b7:
                    2c:d5:3e:ea:92:ac:46:26:ee:41:74:38:7c:41:53:
                    74:09:f8:49:42:02:ac:f4:f2:ca:41:95:2f:49:6a:
                    1b:79:3d:ee:41:2f:55:d8:03:f2:3e:54:90:03:ab:
                    8d:da:05:0e:2c:8a:07:fe:99:c6:c6:3b:e3:63:08:
                    bd:ac:3c:ed:5f:1d:aa:e9:07:58:ad:4c:fd:b4:88:
                    93:9b:7c:4b:a3:68:99:bd:eb:d0:59:54:c7:83:18:
                    56:f9:45:8a:de:13:ef:29:62:e5:73:88:ad:a7:15:
                    7f:d7:dd:a8:2c:98:8e:cd:8b:18:94:12:fd:3e:9a:
                    0a:aa:fc:91:bf:28:78:9a:c0:e5:a1:0a:0f:3b:17:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3F:E9:55:E1:5A:6C:AA:D3:97:59:33:10:4E:B5:27:0B:24:B5:EF
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234352e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:85:0c:d4:09:ac:58:19:00:79:ab:5e:49:b7:36:ee:87:ad:
         46:c6:50:53:5c:3a:55:39:c8:0d:20:1e:c6:0d:89:c6:46:0a:
         29:4d:a3:5f:a0:61:7d:d3:1c:50:3d:91:fe:ca:6f:f7:0f:ba:
         42:06:8d:4a:81:28:97:4c:c7:59:6c:fb:7c:7a:b7:94:ab:80:
         5e:23:8a:cc:e9:a3:a1:97:4b:a8:8c:cb:1b:f8:e4:11:32:7b:
         23:35:6f:b2:fa:26:6e:8b:c7:96:60:60:fc:76:d1:59:15:b9:
         ee:ff:25:a8:a2:6e:d6:dd:9f:6b:f1:96:c1:13:e0:3f:13:4f:
         00:40:1c:35:a8:b6:37:a3:14:01:b3:ce:2f:87:d3:8b:33:a9:
         c8:4a:2d:bb:59:b2:23:48:cf:f4:24:8a:e3:ce:99:18:2a:a1:
         93:17:49:97:9b:f6:e1:91:61:2c:b2:6b:42:ac:73:8e:34:19:
         94:bc:66:de:6e:67:66:b4:81:fe:24:f6:52:aa:13:dc:4e:f0:
         a5:a2:87:7c:07:52:a4:25:06:0d:d7:56:e4:db:fd:57:6e:7f:
         18:b4:a4:80:fe:38:68:8c:8a:3c:2c:5e:64:10:3f:2a:2e:12:
         d1:e1:41:7c:a7:dc:80:43:51:eb:4d:82:2a:89:cd:38:67:d1:
         77:48:f9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:18:49 2025 by rpki-client