Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32312d3234203d3e20323633323336.roa
File:                     36362e3132382e33322e302f32312d3234203d3e20323633323336.roa (raw, json)
Hash identifier:          I9VBGOqJTU7ylRRi8GNg2lmNaEYTPzMWiGWlvz19Q2Q=
Subject key identifier:   AF:19:6D:52:48:B9:2F:67:05:DD:62:27:54:A3:D9:2E:D0:8B:BC:D4
Certificate issuer:       /CN=160B7951E0606756250A049D4BCA8B87E03112C2
Certificate serial:       325C2437D1C227C99307758E586F8BC21F6DA3A9
Authority key identifier: 16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32312d3234203d3e20323633323336.roa
Signing time:             Thu 12 Jun 2025 22:22:00 +0000
ROA not before:           Thu 12 Jun 2025 22:17:00 +0000
ROA not after:            Thu 11 Jun 2026 22:22:00 +0000
asID:                     263236
IP address blocks:        66.128.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Jul 2025 20:28:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5c:24:37:d1:c2:27:c9:93:07:75:8e:58:6f:8b:c2:1f:6d:a3:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=160B7951E0606756250A049D4BCA8B87E03112C2
        Validity
            Not Before: Jun 12 22:17:00 2025 GMT
            Not After : Jun 11 22:22:00 2026 GMT
        Subject: CN=AF196D5248B92F6705DD622754A3D92ED08BBCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c9:11:6d:70:8b:92:70:e4:fe:9d:95:97:2f:
                    14:cf:ba:50:56:7f:60:d1:5e:24:46:cb:0c:fa:e3:
                    78:4b:29:07:17:d8:54:0d:bd:37:54:45:3c:e0:88:
                    50:d2:b3:72:38:57:27:e9:a3:1e:a9:db:a7:ee:c5:
                    66:8b:56:4c:ab:33:cd:7b:b5:34:7e:dc:d6:47:4e:
                    97:91:52:29:b9:44:5f:cb:97:19:d3:fd:45:6c:9d:
                    06:f2:f7:f0:fa:98:29:cc:3c:a9:f7:20:99:9f:e0:
                    63:24:29:f2:85:44:9d:12:5d:52:a5:f0:cb:0f:48:
                    63:ba:81:55:98:f7:fb:84:fa:b6:89:06:b0:70:bd:
                    cb:48:a6:33:04:f5:55:08:a5:5d:7a:6b:9c:b3:37:
                    25:c5:f9:60:a4:1a:3a:59:51:98:64:c5:3c:f2:a4:
                    f1:e4:16:09:9b:4c:e2:9d:34:a7:5e:f5:51:06:f0:
                    bc:11:54:8d:e3:f5:cd:54:db:75:4a:8f:ef:7f:30:
                    5b:ac:20:9c:ce:57:f8:45:07:49:3d:a1:cf:c1:51:
                    f6:78:b5:86:df:88:99:e1:dc:34:32:f7:14:da:21:
                    af:7a:0d:22:6d:57:6f:ab:df:14:42:2d:99:cb:e8:
                    68:38:bd:35:7d:29:1b:72:3f:76:d2:6d:e3:bb:42:
                    a6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:19:6D:52:48:B9:2F:67:05:DD:62:27:54:A3:D9:2E:D0:8B:BC:D4
            X509v3 Authority Key Identifier:
                keyid:16:0B:79:51:E0:60:67:56:25:0A:04:9D:4B:CA:8B:87:E0:31:12:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/160B7951E0606756250A049D4BCA8B87E03112C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/160B7951E0606756250A049D4BCA8B87E03112C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/968E0ACB76CBF36C95DF5D96E80D200EF6E74615658B4932191E5F1827E4DAF7/0/36362e3132382e33322e302f32312d3234203d3e20323633323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.128.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0b:82:95:68:dc:38:cc:33:73:5f:1a:bd:ca:0f:45:4f:f5:6b:
         05:a4:bc:50:4f:d8:08:c2:f8:53:d2:24:a2:c9:c5:d9:b6:4a:
         0c:69:48:52:5a:76:2c:17:5f:57:b6:be:85:9c:a1:7c:0a:5f:
         53:a7:dd:5d:b6:ab:83:51:83:a0:3a:11:87:d1:e9:16:8c:66:
         c0:f9:90:ef:8a:8d:49:39:71:5f:80:d0:41:6e:d9:f6:e2:04:
         39:89:f2:b8:23:69:47:58:ab:ae:c9:1b:32:00:3b:3c:0b:d2:
         ee:93:85:b9:cf:79:c0:92:46:43:82:4e:57:74:c5:68:6c:bd:
         85:4c:9a:4b:de:0f:52:27:9e:34:8a:80:e4:fe:12:be:88:c4:
         98:a1:71:e4:a2:d9:d5:33:f6:31:95:64:2d:9b:94:00:59:64:
         b4:8a:b0:92:4e:21:41:3a:87:88:2d:14:07:86:13:c2:f2:54:
         b7:a4:07:a9:49:83:3b:fb:b2:38:28:55:fc:65:79:f5:e6:5a:
         71:73:d3:39:6f:49:b1:72:b6:88:52:d9:c3:98:71:cd:36:62:
         96:db:13:9e:87:0d:7d:9f:f0:36:1e:7d:36:c7:0a:a9:a9:0c:
         d7:0d:8e:c4:13:4f:99:50:3c:29:cc:59:8e:c5:6d:4d:39:57:
         6b:30:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 23:40:55 2025 by rpki-client