Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/3136342e3136332e3136332e302f32342d3234203d3e20323637363939.roa
File:                     3136342e3136332e3136332e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          oP0jX52XP1M2DFiu5PYG15oA9OZm0Vs9Pn1Yc3RemFU=
Subject key identifier:   01:90:88:BB:26:CA:54:F5:63:99:22:47:AD:EC:81:3B:45:F4:BD:98
Certificate issuer:       /CN=EB6F7C65D0D0E90316E9740CDF465857E2002AA0
Certificate serial:       3DFEF6B8304553FCF1C4CDE98C3D3B730C2392F0
Authority key identifier: EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/3136342e3136332e3136332e302f32342d3234203d3e20323637363939.roa
Signing time:             Mon 12 May 2025 22:18:33 +0000
ROA not before:           Mon 12 May 2025 22:13:33 +0000
ROA not after:            Mon 11 May 2026 22:18:33 +0000
asID:                     267699
IP address blocks:        164.163.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:fe:f6:b8:30:45:53:fc:f1:c4:cd:e9:8c:3d:3b:73:0c:23:92:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB6F7C65D0D0E90316E9740CDF465857E2002AA0
        Validity
            Not Before: May 12 22:13:33 2025 GMT
            Not After : May 11 22:18:33 2026 GMT
        Subject: CN=019088BB26CA54F563992247ADEC813B45F4BD98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:a3:5c:a4:cc:ff:46:e5:5a:65:98:86:14:
                    11:f2:ea:51:35:49:aa:4c:98:e8:4e:0e:a4:bd:b8:
                    5c:da:e0:6c:e8:2a:5c:ef:30:30:f9:03:68:07:fc:
                    97:ba:f6:b8:49:b9:d4:af:f3:2f:dd:24:52:cb:d0:
                    ca:68:71:41:12:e4:54:60:43:78:48:e4:54:9b:11:
                    35:37:3f:0c:fd:e0:f0:4c:cd:4b:45:f9:ae:cc:83:
                    ea:12:33:3b:9f:8c:de:b6:97:a7:d0:0c:f8:69:c4:
                    06:e5:ff:64:d6:34:65:86:ad:a1:fe:87:6e:d3:75:
                    f2:b0:df:18:79:79:de:bc:48:b8:5b:f8:2b:92:2e:
                    69:8e:d2:79:c3:2e:2b:28:f7:4b:3f:48:bc:4c:d2:
                    ec:b1:9c:50:41:e7:f0:ce:83:ea:a7:55:7d:d4:c9:
                    3a:04:d2:47:dc:e4:29:71:c9:7b:e6:27:d5:58:af:
                    a2:12:8d:9c:c9:de:5c:3c:41:72:7d:0a:83:bd:08:
                    d4:a5:16:d3:eb:08:20:f8:d3:fe:34:38:43:3f:c4:
                    cb:03:59:7a:96:4a:a5:97:11:5f:42:30:56:bc:dc:
                    63:83:e2:be:ed:aa:28:5e:ba:38:ad:fc:b2:f3:15:
                    62:43:35:71:c2:5d:80:6a:9f:3a:7c:dd:dc:4d:32:
                    84:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:90:88:BB:26:CA:54:F5:63:99:22:47:AD:EC:81:3B:45:F4:BD:98
            X509v3 Authority Key Identifier:
                keyid:EB:6F:7C:65:D0:D0:E9:03:16:E9:74:0C:DF:46:58:57:E2:00:2A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB6F7C65D0D0E90316E9740CDF465857E2002AA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/597F7AA232F21919B58016692954265E42C59FFE514E65734CE69AF641E8E827/0/3136342e3136332e3136332e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:cb:b0:b2:75:67:7e:aa:ec:42:ba:7e:fe:c2:a9:55:e9:ea:
         06:98:04:15:d1:14:97:2d:32:5f:71:91:e6:bc:21:f5:bd:a7:
         06:ef:3e:85:91:b4:61:5a:a6:b5:80:12:0b:84:96:83:86:29:
         f5:25:4e:f2:1e:d8:87:8b:30:7c:98:9f:0b:1c:65:46:fc:7b:
         1a:d4:e2:02:75:65:16:8a:52:5f:65:1a:5c:2a:72:00:94:22:
         a5:e4:21:11:66:55:b6:90:f8:10:ec:33:03:05:f4:56:98:91:
         68:55:d4:66:b9:a3:a4:84:c2:72:ec:28:25:2f:9a:25:b0:87:
         87:ae:d3:ac:02:f9:4e:40:0a:a5:a7:2a:fa:e4:4a:f3:e4:66:
         fd:1f:5f:d6:e9:ad:18:e5:d1:1a:ef:cb:5b:aa:db:85:c9:bf:
         6d:a2:3d:63:06:b3:d9:af:e3:c0:40:fe:2d:8e:69:1f:39:d2:
         d9:d0:1a:64:07:88:2c:0a:e4:8e:c3:b2:e4:0d:33:81:5b:f0:
         07:ba:0d:cc:4a:dd:a0:fd:5e:83:f8:91:6f:05:47:e8:f4:c2:
         ba:4e:7b:c0:dc:c1:12:1e:8d:5c:ed:55:de:29:f4:9f:49:84:
         00:7c:48:ff:31:f3:87:b9:95:59:5a:8a:6f:72:13:1d:8a:97:
         7c:dc:c8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 09:23:54 2025 by rpki-client