Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
File:                     3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa (raw, json)
Hash identifier:          YXs/H/mqByRO2SjIgi5JsMhwZi4dwaMYtbJa1jBNA6U=
Subject key identifier:   1E:20:24:0A:A2:7A:DB:9B:08:0F:1D:D3:17:8D:14:D5:AB:9C:63:5D
Certificate issuer:       /CN=B137142754DED915D3341628E74A8B91AF0CB76A
Certificate serial:       460583A0ABCD87D4C154BCA4550EF54236AF5267
Authority key identifier: B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa
Signing time:             Fri 02 May 2025 14:17:32 +0000
ROA not before:           Fri 02 May 2025 14:12:32 +0000
ROA not after:            Fri 01 May 2026 14:17:32 +0000
asID:                     61461
IP address blocks:        168.232.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:05:83:a0:ab:cd:87:d4:c1:54:bc:a4:55:0e:f5:42:36:af:52:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B137142754DED915D3341628E74A8B91AF0CB76A
        Validity
            Not Before: May  2 14:12:32 2025 GMT
            Not After : May  1 14:17:32 2026 GMT
        Subject: CN=1E20240AA27ADB9B080F1DD3178D14D5AB9C635D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:d9:73:2c:eb:60:31:41:b3:95:7a:c9:97:
                    36:0c:3c:0e:40:29:98:7b:5a:c7:64:f7:cc:9e:cc:
                    c5:6f:d6:e8:aa:09:06:ee:ae:d0:2b:42:56:d4:d7:
                    e5:f2:0b:37:95:60:fe:29:3f:0d:2a:1f:bf:0b:47:
                    e8:01:64:12:09:a6:75:63:65:5c:1f:7d:c6:92:ec:
                    aa:76:30:51:73:40:5c:6f:df:75:b1:b1:b9:04:25:
                    07:f4:eb:9c:14:ac:1e:2d:c5:e2:f3:79:20:24:16:
                    7b:d9:c6:2b:3d:27:8f:1e:2e:a6:89:9f:44:53:b4:
                    76:5a:fd:b5:21:4a:e0:6d:e5:74:d4:c9:07:1b:a2:
                    2f:dc:fe:1e:61:ee:5f:4d:b1:92:d0:0d:0c:aa:e0:
                    0d:7c:7e:ba:9b:9c:97:8a:94:be:e6:10:35:03:f5:
                    a7:49:8c:ca:cf:1a:e5:47:49:94:8d:50:6f:e3:20:
                    0d:2d:5e:5c:a0:2a:47:8d:53:6a:fd:59:e7:7e:67:
                    7e:3f:06:54:df:7b:c9:13:38:07:94:82:29:2a:4a:
                    75:ea:5f:e4:38:b9:16:55:ee:7e:92:e6:8d:dc:85:
                    44:52:94:0d:5a:12:17:0a:ae:b4:55:52:76:c5:b4:
                    ad:e6:58:c8:4d:c4:a0:54:00:c4:e4:75:50:87:82:
                    65:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:20:24:0A:A2:7A:DB:9B:08:0F:1D:D3:17:8D:14:D5:AB:9C:63:5D
            X509v3 Authority Key Identifier:
                keyid:B1:37:14:27:54:DE:D9:15:D3:34:16:28:E7:4A:8B:91:AF:0C:B7:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/B137142754DED915D3341628E74A8B91AF0CB76A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B137142754DED915D3341628E74A8B91AF0CB76A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2E7B64309727F4467B68A76D90D305BFE3CCFC91518535BD875EE550381A1DFC/0/3136382e3233322e3130322e302f32332d3233203d3e203631343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:32:8f:f9:c6:a9:82:d5:0e:59:59:aa:22:72:89:9b:c7:
         62:e6:42:ad:b2:ba:a2:40:e3:16:9e:55:a3:fd:20:75:43:31:
         14:b5:4e:8d:23:f8:d4:ce:79:d8:c3:d8:f6:f4:0d:67:6e:11:
         ff:df:d9:b6:aa:ca:ea:39:12:75:9c:b9:78:c9:d3:e8:f2:c6:
         72:f4:e3:68:f8:a3:1f:31:96:9f:e8:39:55:16:1b:9a:bb:89:
         91:bd:ca:9d:a7:f1:25:05:cf:f9:c4:1e:87:d1:64:18:99:f9:
         94:1d:6c:99:1a:3e:cd:84:3c:b2:59:9f:37:96:a3:c6:60:7d:
         5e:41:8f:2b:03:f9:94:81:6e:25:f6:81:7a:64:25:5e:a2:77:
         ff:d5:24:be:1c:14:ac:bd:d2:9f:b5:49:b8:9e:d7:56:24:9e:
         4a:39:d3:af:64:ac:0b:9c:92:40:bb:d5:b5:80:4c:5f:4a:ff:
         5e:47:9c:f8:24:d1:5f:ea:cd:1e:5f:fc:ec:86:d4:9f:4b:7e:
         b5:4e:47:31:9b:30:5a:98:e9:f6:41:0e:fc:be:4b:b0:68:e3:
         8c:9d:74:e9:22:00:d0:d2:43:1e:75:97:2f:c8:89:08:d5:0f:
         1b:04:ba:8c:57:8c:c7:4d:23:3a:58:8f:21:ca:e3:b8:21:ba:
         f8:a2:64:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 20:46:12 2025 by rpki-client