Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa
File:                     3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa (raw, json)
Hash identifier:          SCKrawD+6AtpldmxqwG0jmPJt8/c/3ul1CRY11pvCBQ=
Subject key identifier:   FF:CD:F7:65:64:AC:D4:74:D8:D6:D8:96:BE:B8:46:B5:50:9A:0F:A2
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       3661EB90D0D5C9A45BA883C64177349306F49E5F
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa
Signing time:             Thu 19 Jun 2025 20:50:00 +0000
ROA not before:           Thu 19 Jun 2025 20:45:00 +0000
ROA not after:            Thu 18 Jun 2026 20:50:00 +0000
asID:                     16592
IP address blocks:        168.243.206.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 20:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:61:eb:90:d0:d5:c9:a4:5b:a8:83:c6:41:77:34:93:06:f4:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jun 19 20:45:00 2025 GMT
            Not After : Jun 18 20:50:00 2026 GMT
        Subject: CN=FFCDF76564ACD474D8D6D896BEB846B5509A0FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:30:50:26:ad:0f:1d:ce:03:19:d7:bc:de:44:
                    2b:5d:ef:bf:0e:d0:38:3b:af:c5:c1:06:d6:2d:d6:
                    e9:55:fa:70:cc:f0:bd:62:7f:ad:9b:11:df:1c:f1:
                    92:71:cd:d4:5a:c8:ad:f4:73:70:d5:d1:9f:1a:03:
                    97:52:31:c0:ad:5c:13:5c:08:ff:e6:e9:ae:eb:75:
                    21:d7:9c:77:f6:32:df:e7:28:55:f8:21:d2:dc:15:
                    ee:e8:a3:0d:8e:f1:85:a5:93:67:b1:0c:9a:df:3a:
                    32:a4:5c:b6:6b:6b:18:5d:06:65:de:43:94:b6:d6:
                    24:c1:5c:11:05:fb:57:71:e7:2a:13:84:eb:1e:d6:
                    59:7e:19:98:aa:52:fb:fa:f9:23:21:69:bc:f8:35:
                    7d:1a:77:14:0c:8c:52:0d:fd:6b:ac:e2:f2:1b:73:
                    ab:82:ff:1d:1e:e5:75:c3:84:91:7e:f5:62:a0:a5:
                    50:b1:a6:39:e4:96:33:23:71:49:f3:66:c5:91:88:
                    da:64:8b:11:97:23:8b:a0:c6:c4:0d:ae:5c:13:05:
                    35:a9:30:7e:c6:b1:95:9d:96:50:76:bf:06:b4:d1:
                    d2:9e:40:69:77:3e:05:11:30:81:62:28:34:fd:52:
                    ae:ce:1d:4e:47:c5:b9:f3:15:aa:84:f6:90:e5:34:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CD:F7:65:64:AC:D4:74:D8:D6:D8:96:BE:B8:46:B5:50:9A:0F:A2
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230362e302f32332d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         87:6b:a0:92:ec:bd:da:d3:9f:a0:3a:4d:c8:ae:5c:0a:f4:29:
         33:7c:07:f0:17:8f:1f:c3:a4:03:e4:9d:a1:b5:5c:7a:b2:93:
         32:9b:a4:2c:2f:e6:a6:97:22:e6:6c:c7:d5:94:c8:dd:0d:4c:
         9c:51:5a:b1:c7:fd:c4:40:bc:bf:55:d2:58:12:9e:a3:61:5b:
         3f:47:3f:4c:3f:5c:92:3b:80:9e:29:cd:8f:ce:76:f1:dd:5d:
         5c:f7:6e:de:00:ce:5a:7b:75:94:c5:17:6a:0e:c1:f8:8f:b7:
         3f:7a:9c:32:bb:97:2a:b2:0d:89:81:28:87:6b:93:97:fb:d3:
         a5:e0:a5:70:3e:7c:c0:fc:7f:df:94:a2:b9:64:4f:14:95:6f:
         1f:7b:44:09:e6:08:26:e2:8c:54:57:03:79:b9:df:18:97:68:
         f3:d9:b8:44:4e:c9:2b:b0:dc:01:ea:3c:a1:59:7f:ec:e2:30:
         4b:82:d5:1e:06:0f:de:47:19:56:6c:75:58:09:b9:4c:21:b7:
         70:68:86:6d:5a:12:14:0f:7d:f2:d5:05:6b:9e:30:91:37:e0:
         ea:05:77:b8:45:60:04:7e:de:22:a6:fc:87:cb:7e:53:4d:33:
         cd:7b:7d:7f:52:cd:f0:a7:fa:fd:0b:31:11:69:df:06:56:47:
         fd:57:74:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 00:17:12 2025 by rpki-client