Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230382e302f32332d3234203d3e203136353932.roa
File:                     3136382e3234332e3230382e302f32332d3234203d3e203136353932.roa (raw, json)
Hash identifier:          i39wvO1ghLBbHJqf3s5udSpZIHOySb1Ihadr+oJNkTo=
Subject key identifier:   16:93:57:15:3E:1B:B6:19:B1:AA:3B:6B:94:C7:EA:63:1C:EC:46:30
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       295C3BA2CE530A583DDBBFA079477E8A7743CCDE
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230382e302f32332d3234203d3e203136353932.roa
Signing time:             Thu 19 Jun 2025 20:50:00 +0000
ROA not before:           Thu 19 Jun 2025 20:45:00 +0000
ROA not after:            Thu 18 Jun 2026 20:50:00 +0000
asID:                     16592
IP address blocks:        168.243.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5c:3b:a2:ce:53:0a:58:3d:db:bf:a0:79:47:7e:8a:77:43:cc:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jun 19 20:45:00 2025 GMT
            Not After : Jun 18 20:50:00 2026 GMT
        Subject: CN=169357153E1BB619B1AA3B6B94C7EA631CEC4630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2a:11:42:79:7b:72:ef:44:f0:bf:86:3a:2a:
                    e9:2b:cc:5f:43:63:83:5d:10:65:e3:16:47:4f:21:
                    ec:0f:c2:73:d7:87:eb:a5:db:59:3d:78:7f:2e:2b:
                    f2:a6:48:ac:84:64:02:5d:05:e0:0a:7a:d9:79:e5:
                    a6:25:f4:b1:1b:ff:0c:3e:76:a8:aa:72:ec:45:5e:
                    a2:e3:51:46:a6:8f:00:c1:75:69:e6:57:cf:d4:fb:
                    b1:5a:94:ac:5f:11:a0:9c:67:38:50:40:36:d1:fe:
                    47:ef:39:80:69:8f:37:a0:72:a7:ff:63:40:46:c0:
                    cc:42:ff:54:a2:19:89:c1:f9:bb:7c:3f:82:55:8b:
                    d8:c9:9b:21:b7:69:2f:f5:ea:d4:eb:3d:17:1a:ce:
                    fb:97:b2:04:62:98:ab:69:9d:ce:61:48:9f:87:12:
                    51:fd:2a:d6:29:13:52:17:e8:0c:10:f3:e5:c8:ac:
                    50:ad:87:62:08:34:50:97:6f:9d:53:54:eb:33:35:
                    ed:29:fa:2c:65:1c:07:6d:58:f1:c4:cc:d2:31:64:
                    7a:cc:d5:14:a3:a0:71:7a:7d:47:65:a8:d1:79:6b:
                    c2:5c:43:14:73:58:3f:c4:81:ba:fa:26:5d:48:1b:
                    6f:4e:09:0c:9b:53:7e:ce:28:45:05:cd:bf:e0:59:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:93:57:15:3E:1B:B6:19:B1:AA:3B:6B:94:C7:EA:63:1C:EC:46:30
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3230382e302f32332d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:87:12:33:db:17:a6:d5:2c:da:56:d5:ca:66:77:b6:fc:c3:
         15:7b:8d:c6:d8:17:b8:8d:c4:c5:01:e8:8f:a8:ee:0b:45:e8:
         31:8e:b6:5c:a2:4a:6c:55:d5:62:a6:31:2a:e2:2d:f5:2f:cc:
         03:99:95:7f:30:48:26:9d:fe:ac:fc:55:16:c1:27:4a:0c:53:
         81:e3:03:8f:d6:2d:78:7b:eb:25:31:2d:1f:4d:3b:39:de:38:
         ae:3b:4c:79:f9:65:78:f8:57:52:ed:89:b3:b6:41:9c:03:90:
         fc:21:f3:94:51:02:d4:1d:bc:3c:2a:fd:e4:33:db:8d:ba:c6:
         8b:3b:d4:32:53:06:6c:12:64:1b:61:45:1e:b2:96:c7:bb:9c:
         88:dd:e4:aa:f2:dd:eb:97:ce:bd:03:93:55:5e:a7:30:6e:36:
         ff:51:97:c1:1e:6b:84:e9:e1:6d:3a:28:40:bb:f6:32:d6:4d:
         20:0b:99:36:c4:e7:2c:94:91:f6:35:87:4e:fb:ba:8a:5a:d6:
         02:0c:04:f9:7f:44:9f:8a:ce:ba:bf:87:7e:97:80:bc:2d:bf:
         52:f9:5f:ae:d5:79:5f:60:d2:9c:73:7f:73:f9:33:c2:ec:5d:
         1e:4e:52:2a:8c:94:7b:b3:71:f4:b0:83:f7:78:c3:27:5d:8b:
         5f:f2:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 16:51:33 2025 by rpki-client