Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa
File:                     AS22368.roa (raw, json)
Hash identifier:          E9eO+4YM/YU5OW7TGosPZHKx4Rwf1qqNmig2fmk/0iw=
Subject key identifier:   32:61:62:E2:DD:39:AC:4D:EF:04:9D:59:A5:D5:7F:24:52:3D:65:A5
Certificate issuer:       /CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
Certificate serial:       32A527420E13C90128AC8BD4C677A731ACDB2234
Authority key identifier: DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa
Signing time:             Thu 12 Jun 2025 16:21:54 +0000
ROA not before:           Thu 12 Jun 2025 16:16:54 +0000
ROA not after:            Thu 11 Jun 2026 16:21:54 +0000
asID:                     22368
IP address blocks:        152.200.204.0/24 maxlen: 24
                          179.33.108.0/23 maxlen: 24
                          181.236.176.0/20 maxlen: 24
                          181.236.192.0/21 maxlen: 24
                          181.236.224.0/19 maxlen: 24
                          190.252.104.0/24 maxlen: 24
                          190.252.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 07 Jul 2025 18:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a5:27:42:0e:13:c9:01:28:ac:8b:d4:c6:77:a7:31:ac:db:22:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB06236B96EE00934FCD39A560E5BC04EB7B9EA4
        Validity
            Not Before: Jun 12 16:16:54 2025 GMT
            Not After : Jun 11 16:21:54 2026 GMT
        Subject: CN=326162E2DD39AC4DEF049D59A5D57F24523D65A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:05:9e:cf:d5:b8:5d:22:9c:c0:40:a9:d2:
                    c3:59:07:0a:3d:26:0d:5d:33:da:f7:e0:88:ac:2d:
                    d3:15:de:5e:db:80:a0:85:62:8b:a4:fe:a8:35:19:
                    4d:8c:1f:ef:e0:38:0e:72:b2:dd:a1:b8:3c:57:15:
                    f0:3c:d7:00:00:8e:fe:6a:d4:6c:c8:dc:f7:0e:f0:
                    6f:35:ea:e5:53:7e:c7:04:9a:89:ff:3e:01:ef:04:
                    2d:35:20:c8:b3:8e:dd:06:40:b1:5f:14:e1:03:e8:
                    c7:4c:b8:9e:52:ed:0b:db:4b:99:b6:ca:6a:5f:6e:
                    b6:5f:cb:2d:6f:b9:7d:71:8e:5a:44:6e:0c:68:14:
                    48:7a:c3:50:2d:ca:34:6d:da:25:c2:73:a4:fe:07:
                    f8:a3:e9:34:20:a1:00:46:ff:de:db:f8:a4:7d:1b:
                    b2:77:ee:58:90:33:81:10:3d:dc:74:34:6e:62:2c:
                    82:e7:cf:ec:c5:75:7d:72:eb:33:ed:a0:61:7e:0e:
                    75:b9:8d:cf:28:fb:f7:12:d4:2c:6a:32:c8:1e:ac:
                    dd:42:86:9c:ca:67:75:3d:b7:b8:17:a3:9e:50:ca:
                    38:d6:29:b9:55:7c:a6:a2:69:88:2b:48:3d:ad:69:
                    b9:ff:0f:08:d8:a7:81:03:f5:27:41:f4:8a:0b:ab:
                    37:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:61:62:E2:DD:39:AC:4D:EF:04:9D:59:A5:D5:7F:24:52:3D:65:A5
            X509v3 Authority Key Identifier:
                keyid:DB:06:23:6B:96:EE:00:93:4F:CD:39:A5:60:E5:BC:04:EB:7B:9E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB06236B96EE00934FCD39A560E5BC04EB7B9EA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BA04F3BF61DC0454379E83625D7693221D247D7E77E1CEB2F9E7A49974AB707/0/AS22368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.200.204.0/24
                  179.33.108.0/23
                  181.236.176.0-181.236.199.255
                  181.236.224.0/19
                  190.252.104.0/24
                  190.252.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:42:98:09:8e:d7:69:bb:ca:16:3c:be:db:db:59:25:0a:e4:
         a6:fc:65:bb:0a:7c:4a:ec:43:1c:bb:f2:61:99:ae:31:25:e4:
         f2:90:b7:dc:ab:68:ba:54:bf:c3:61:29:99:b3:37:8c:25:cd:
         ba:8f:8c:ad:72:7e:16:e3:cd:47:bc:ba:2b:8e:e9:20:ed:87:
         ec:7b:94:11:0c:63:b4:92:c6:c4:df:54:52:48:43:c6:43:48:
         73:10:b1:7d:e2:67:04:e8:83:be:91:1c:79:c0:28:58:cb:62:
         6b:60:e3:59:2f:13:2c:e2:e0:2e:7f:7d:ae:e5:88:8f:d8:65:
         2d:2a:4b:be:bd:69:5d:bb:50:fe:76:ff:27:52:a3:2f:96:18:
         29:0b:dc:0b:d3:ab:d7:e3:f0:5d:d0:52:78:16:34:25:bf:f3:
         8b:f0:04:34:f6:61:64:f4:b5:ea:74:09:a7:78:69:2f:ae:7c:
         b2:46:53:31:3d:df:3e:4a:dc:9b:b3:d7:8e:fd:1a:91:56:a4:
         55:37:8c:32:94:33:87:28:dc:f0:c3:5b:82:69:a1:13:6d:98:
         58:e8:b6:c6:f7:6d:af:79:3d:d7:b1:e8:2f:b1:1d:64:5b:e0:
         bb:4f:56:58:44:01:ee:e4:f0:4b:bb:79:e2:21:d9:81:14:ac:
         fb:aa:77:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:23:22 2025 by rpki-client