Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231322e302f32322d3234203d3e203136353932.roa
File:                     3136382e3234332e3231322e302f32322d3234203d3e203136353932.roa (raw, json)
Hash identifier:          WMU9/4sYl5kiILvZNPIxfuPy0pb7hGmpu9KpJrwJm3M=
Subject key identifier:   06:9D:85:8E:B9:66:50:41:6B:3D:FD:B8:40:17:6E:23:E7:55:D6:02
Certificate issuer:       /CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
Certificate serial:       5C2949AEEE471259A6ACB9BEB58DF0B6D15EE60A
Authority key identifier: D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231322e302f32322d3234203d3e203136353932.roa
Signing time:             Thu 19 Jun 2025 20:50:00 +0000
ROA not before:           Thu 19 Jun 2025 20:45:00 +0000
ROA not after:            Thu 18 Jun 2026 20:50:00 +0000
asID:                     16592
IP address blocks:        168.243.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 20:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:29:49:ae:ee:47:12:59:a6:ac:b9:be:b5:8d:f0:b6:d1:5e:e6:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA
        Validity
            Not Before: Jun 19 20:45:00 2025 GMT
            Not After : Jun 18 20:50:00 2026 GMT
        Subject: CN=069D858EB96650416B3DFDB840176E23E755D602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5b:6d:c2:a2:7e:2d:32:9b:04:df:15:7b:e9:
                    0d:75:bf:f0:4d:b9:18:5c:92:28:eb:0f:82:34:28:
                    9b:33:2d:97:42:80:d7:33:f4:7a:c9:0d:20:55:bc:
                    46:30:97:72:75:a2:e2:33:cd:37:b3:34:ba:fc:b4:
                    8c:32:d2:e4:ab:66:81:c5:c6:c7:ac:04:a0:1a:78:
                    d9:6e:95:50:2a:e9:50:86:df:b7:c8:0e:14:6f:b7:
                    b3:5a:29:81:9e:2d:48:fe:7f:f2:46:4b:90:0d:ff:
                    6a:e0:21:b3:2e:34:54:a3:52:23:c4:72:c9:84:65:
                    d4:65:09:dd:29:90:85:34:9e:c0:c8:7e:c5:22:90:
                    32:65:5e:8b:ed:6b:63:a6:68:da:f3:d6:89:70:a9:
                    63:fc:ac:9a:41:b3:f6:30:35:e9:5f:0b:93:8d:e2:
                    b5:06:1c:bd:64:bc:14:57:11:ee:38:6d:b6:52:6e:
                    20:6c:42:b0:e8:d3:a2:99:7e:16:c8:50:62:08:c8:
                    67:52:dd:c0:aa:6e:45:c5:5c:d1:52:6f:3a:bb:83:
                    1b:76:12:20:c9:18:e9:7c:fb:6a:e3:d6:1e:ad:f6:
                    0d:37:95:95:ed:c1:b3:c0:f4:9c:b9:91:d3:87:8b:
                    64:13:34:83:09:ba:a0:3c:9d:c7:e9:8b:04:0e:96:
                    80:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:9D:85:8E:B9:66:50:41:6B:3D:FD:B8:40:17:6E:23:E7:55:D6:02
            X509v3 Authority Key Identifier:
                keyid:D3:50:3D:03:E3:D4:DF:A0:76:7F:6D:FF:3B:A7:1D:D7:B6:23:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3503D03E3D4DFA0767F6DFF3BA71DD7B6236AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0BB071D96D8FBE2A86990905DC17E199370A5705236A00065D68563FAADB85E6/0/3136382e3234332e3231322e302f32322d3234203d3e203136353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.243.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:f3:68:b0:f9:a1:5b:d4:72:9d:6d:c0:cc:64:e1:aa:22:f1:
         8a:87:47:50:5e:13:ae:80:3a:be:b1:9f:0c:0c:68:58:81:cd:
         db:48:8e:c4:50:09:72:e9:e4:bd:82:54:62:d3:04:e9:ce:64:
         ab:0a:c3:3a:43:2a:e5:f3:d9:0e:0c:7a:94:d5:b8:5d:8b:c6:
         99:bd:1c:12:ad:ef:50:20:8a:5f:c6:2f:b6:9c:8a:70:be:73:
         db:fd:3d:39:d3:f6:a3:06:68:59:a0:fd:e3:a4:57:35:6c:e3:
         8f:16:ae:d7:67:7a:8d:b5:15:31:16:9d:b8:af:ce:d1:f0:81:
         e7:d8:92:8c:e8:c8:59:76:34:9b:23:72:f9:b2:11:a3:5b:23:
         50:f8:19:60:96:dd:b8:2d:ed:d3:f0:82:98:34:35:67:54:fa:
         8f:c4:17:04:65:53:15:96:b2:d1:fe:55:4d:d9:a3:11:57:9a:
         68:be:49:c4:da:3e:25:b5:d5:30:cd:c8:93:7f:db:c3:b3:dc:
         85:1b:d4:aa:80:57:fa:f7:c9:1a:08:23:b3:59:38:2d:f5:fd:
         b5:6f:5a:c9:b6:51:39:52:94:33:fd:fa:3c:3c:d4:c8:f3:d3:
         5c:68:e8:f9:9a:c6:d8:4d:a4:36:e0:85:8c:fb:27:7f:33:68:
         ee:22:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 06:55:45 2025 by rpki-client