Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32342d3238203d3e20323633383031.roa
File:                     3136382e3139362e3234342e302f32342d3238203d3e20323633383031.roa (raw, json)
Hash identifier:          QGMVEz9dW9v4beRVu0irDFnGnCicO8NBQGBZQue4Ydg=
Subject key identifier:   08:EB:3D:17:60:80:DE:74:D8:33:0B:78:32:37:39:CC:14:7C:7C:F0
Certificate issuer:       /CN=E450DBD4224F12B91D8B103471C79E21494AAABE
Certificate serial:       0A193C506EB7E2842A0ACBA428D4AB2213085648
Authority key identifier: E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32342d3238203d3e20323633383031.roa
Signing time:             Mon 05 May 2025 00:15:01 +0000
ROA not before:           Mon 05 May 2025 00:10:01 +0000
ROA not after:            Mon 04 May 2026 00:15:01 +0000
asID:                     263801
IP address blocks:        168.196.244.0/24 maxlen: 28
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 01:23:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:19:3c:50:6e:b7:e2:84:2a:0a:cb:a4:28:d4:ab:22:13:08:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E450DBD4224F12B91D8B103471C79E21494AAABE
        Validity
            Not Before: May  5 00:10:01 2025 GMT
            Not After : May  4 00:15:01 2026 GMT
        Subject: CN=08EB3D176080DE74D8330B78323739CC147C7CF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:91:23:32:a9:39:ad:f5:6c:27:5d:af:a5:
                    a0:54:f5:d0:f4:de:d1:32:c7:ba:79:44:55:34:86:
                    b2:47:3e:57:3c:fe:8a:90:d7:ef:14:a8:a2:92:87:
                    99:5b:17:c9:ca:a2:cd:03:8b:13:d4:0c:dd:11:fc:
                    13:9f:9a:49:61:7e:af:19:6a:f9:f0:60:2d:91:27:
                    13:bc:66:de:82:fd:e4:1b:1b:5a:56:5d:3e:c1:a2:
                    50:dc:0c:77:f8:26:cf:4d:4e:08:c6:bd:27:17:0b:
                    0c:8c:1b:89:cc:42:a7:44:c8:5c:b4:59:a9:82:ae:
                    e0:ec:79:39:c2:83:67:63:80:9d:50:e1:ad:8a:b9:
                    c9:13:08:92:f2:69:71:9d:3d:11:ca:17:34:28:b8:
                    fe:48:c9:d6:f6:dd:ce:e5:11:62:87:7b:07:ff:4e:
                    af:10:7c:2b:88:14:ba:ef:be:69:c4:78:cc:ec:b2:
                    70:49:30:45:1a:e8:ff:09:e4:fe:fa:94:e2:96:38:
                    44:04:3f:b1:15:85:75:e4:44:44:94:fa:9c:94:5b:
                    d2:e6:04:00:51:c3:3c:90:7d:78:43:f4:b6:47:8d:
                    6d:31:08:9a:34:a3:b7:48:95:cb:2a:0f:a5:98:56:
                    a1:4a:9e:0e:ef:a7:b8:64:25:fb:92:24:64:47:08:
                    d2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EB:3D:17:60:80:DE:74:D8:33:0B:78:32:37:39:CC:14:7C:7C:F0
            X509v3 Authority Key Identifier:
                keyid:E4:50:DB:D4:22:4F:12:B9:1D:8B:10:34:71:C7:9E:21:49:4A:AA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/E450DBD4224F12B91D8B103471C79E21494AAABE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E450DBD4224F12B91D8B103471C79E21494AAABE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/77DC0D408A1222C03BF62FE7EB13F2DD959AC2BD351FFAAF1269CB76CE1F8BFB/0/3136382e3139362e3234342e302f32342d3238203d3e20323633383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:7b:64:fb:0e:2b:31:fc:ca:c0:8d:dd:bb:b4:8d:44:f3:60:
         c3:3d:e7:f6:fa:e3:62:2b:06:87:de:06:c8:f7:fc:52:b5:6c:
         86:48:71:cc:a3:06:72:d2:09:6b:5e:ff:71:fe:ed:ac:5f:9b:
         a5:a2:43:87:5c:9a:41:66:60:1b:ef:12:5d:45:f2:02:2f:04:
         4a:93:81:e7:7e:36:31:be:48:f3:e9:58:5b:4c:fe:da:36:a1:
         e0:b6:49:4c:6e:78:32:8c:f1:a2:86:d3:bd:12:dc:e4:40:dc:
         1b:97:4a:cb:28:a4:93:ee:3c:f5:2e:ab:ae:e7:3f:1a:14:7f:
         ab:22:43:05:dd:00:e1:16:b8:a6:f9:30:3f:74:10:10:37:46:
         1d:73:9d:b5:8c:24:e7:9a:27:ef:90:c6:7e:c8:83:a3:d9:db:
         01:b5:32:5f:ba:33:87:8d:af:59:b2:88:09:e2:dc:ad:c6:7b:
         32:e8:e1:1c:21:87:f8:78:09:3e:7d:f3:29:9b:69:f6:ca:0d:
         cd:0f:f4:bd:3d:75:5b:9c:33:24:95:45:34:f3:3d:ab:9d:e0:
         98:d6:66:2a:39:3d:3f:09:bd:21:15:92:11:e5:23:cd:6e:12:
         80:52:b1:55:d7:34:40:b8:f6:b1:8e:72:8e:67:9f:c8:da:f4:
         66:85:c4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 21:44:45 2025 by rpki-client