Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32322d3232203d3e203233323436.roa
File:                     36362e3233312e36342e302f32322d3232203d3e203233323436.roa (raw, json)
Hash identifier:          LKdq4GJ3xryoYefVpYLmRYQXPKOldTsJN3FvcpLv03s=
Subject key identifier:   F1:F8:7C:A0:94:1A:F1:DD:1F:65:1F:12:0A:E0:1D:EE:97:1C:C6:5A
Certificate issuer:       /CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
Certificate serial:       2A07F68D285C5F6CA1C6F78C3E4C604541417AAD
Authority key identifier: C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32322d3232203d3e203233323436.roa
Signing time:             Tue 10 Jun 2025 06:21:39 +0000
ROA not before:           Tue 10 Jun 2025 06:16:39 +0000
ROA not after:            Tue 09 Jun 2026 06:21:39 +0000
asID:                     23246
IP address blocks:        66.231.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 25 Jun 2025 23:28:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:07:f6:8d:28:5c:5f:6c:a1:c6:f7:8c:3e:4c:60:45:41:41:7a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0
        Validity
            Not Before: Jun 10 06:16:39 2025 GMT
            Not After : Jun  9 06:21:39 2026 GMT
        Subject: CN=F1F87CA0941AF1DD1F651F120AE01DEE971CC65A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:4e:b3:6f:2a:28:50:21:94:fe:8c:c1:20:
                    c2:0e:12:e2:cd:ea:ab:98:6c:7d:1d:4b:a1:a4:97:
                    74:a1:79:f5:3b:d0:2d:77:82:39:70:18:13:36:2c:
                    c6:c7:73:a3:9d:81:51:ee:82:de:22:b1:5e:33:ef:
                    45:58:83:bf:00:5f:cd:bb:fb:75:e5:46:e8:bc:58:
                    dd:8d:dc:47:ed:9c:d3:3b:93:db:5b:d5:f8:27:9f:
                    8c:cb:61:4a:86:f5:a4:73:9f:e2:74:ca:74:35:4c:
                    08:78:a6:f7:56:d0:8b:48:97:4c:04:77:cb:f0:e3:
                    b0:b4:48:e7:3e:a2:c2:ff:a3:a5:39:51:86:ee:d7:
                    f1:61:1b:2f:8d:98:f7:4a:47:b5:65:bd:83:6d:6b:
                    2a:cb:94:81:95:8c:4b:13:d7:1b:28:2e:d5:a1:6b:
                    43:9e:e8:a7:9a:f0:99:f0:f7:c4:cc:93:2f:d5:a1:
                    c8:ea:9f:eb:4e:e1:55:35:eb:c4:f0:08:87:f6:3c:
                    41:c1:e6:22:d3:6b:f7:78:9d:9a:07:89:f4:4b:8a:
                    2e:9d:95:49:dc:79:85:da:a8:0c:e8:98:5e:4a:bf:
                    ca:ed:f5:5a:4c:5b:7b:31:db:c7:d0:8f:64:1d:76:
                    af:bd:b7:a3:ce:44:95:57:7f:ab:ad:c6:b8:23:f8:
                    76:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F8:7C:A0:94:1A:F1:DD:1F:65:1F:12:0A:E0:1D:EE:97:1C:C6:5A
            X509v3 Authority Key Identifier:
                keyid:C2:96:7F:F3:10:9E:0A:A7:EE:5E:C1:C6:40:30:0D:5A:00:FF:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2967FF3109E0AA7EE5EC1C640300D5A00FF41B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA104D7777B029EDA782DAA6A6F7434FDB777CE68A094979781464EC59FF8A9A/0/36362e3233312e36342e302f32322d3232203d3e203233323436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.231.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:79:1b:4c:a7:2a:97:34:53:e2:21:24:3c:b9:9e:9f:26:5b:
         3d:c8:c4:41:a0:48:e9:c4:60:cd:be:4f:8d:12:89:a3:2d:f8:
         5e:60:8c:e9:78:d5:e8:40:df:19:a2:9c:45:e8:79:9f:cf:eb:
         9b:d9:8d:9e:89:19:3d:ca:fa:82:30:5e:d9:5c:4b:15:09:6a:
         cc:3b:8f:2d:c7:89:0c:a6:42:15:36:d3:80:77:51:ba:43:01:
         9b:e1:81:e5:32:c5:f4:5c:0b:9c:33:f1:27:ea:a7:44:f4:f6:
         a0:3e:ab:b5:7a:65:37:2d:e4:5f:f3:7e:ac:48:7b:3f:36:ca:
         e7:ca:4b:df:55:a8:cc:11:06:2f:db:4b:a6:d6:9a:bd:7b:a5:
         8b:90:d1:40:c7:75:e9:c7:40:89:8a:07:8e:b1:fc:8a:24:92:
         0e:17:d2:a0:14:58:e8:aa:60:b9:ea:f4:d3:28:13:c1:44:61:
         9d:56:b4:e9:7b:0b:54:1f:ee:0b:6f:d2:f2:6a:59:7a:50:bf:
         67:51:fe:e6:77:fc:e4:92:3e:77:e2:24:85:c6:f3:14:e8:a5:
         83:86:bd:da:5f:35:7b:d3:a1:86:b5:2f:cb:79:ed:f5:ca:05:
         7e:60:bc:9b:ff:de:cd:a6:f2:18:40:57:0a:20:ba:d2:d0:d6:
         0f:f2:41:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 13:22:18 2025 by rpki-client