Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa
File:                     3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa (raw, json)
Hash identifier:          sgBeJspsx3sreJcKYbLvU0mlWYh2+5KKW6dFgAKT1mc=
Subject key identifier:   A6:13:CF:7F:D5:79:BB:5B:E9:11:FE:8C:35:9D:67:5E:A4:D7:E4:24
Certificate issuer:       /CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
Certificate serial:       5849A81867D28A3FFAD75F00F778CB2E2DEAD114
Authority key identifier: EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa
Signing time:             Mon 16 Jun 2025 22:22:30 +0000
ROA not before:           Mon 16 Jun 2025 22:17:30 +0000
ROA not after:            Mon 15 Jun 2026 22:22:30 +0000
asID:                     264756
IP address blocks:        168.195.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl
                          rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Jul 2025 04:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:49:a8:18:67:d2:8a:3f:fa:d7:5f:00:f7:78:cb:2e:2d:ea:d1:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2B06518939C1FC269F5724C5C4C914D7CF5731
        Validity
            Not Before: Jun 16 22:17:30 2025 GMT
            Not After : Jun 15 22:22:30 2026 GMT
        Subject: CN=A613CF7FD579BB5BE911FE8C359D675EA4D7E424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:47:23:3b:80:c1:c8:33:25:bf:35:9e:15:
                    12:ab:f8:60:e1:da:91:ec:c3:ea:14:48:40:19:5e:
                    83:7c:fe:ea:77:ec:5b:d2:f7:0a:38:5c:00:c4:fb:
                    d6:6e:1a:d5:32:b5:c6:a5:fd:f5:da:0d:ed:24:25:
                    44:4e:63:53:57:b4:31:41:78:e2:15:5a:3d:7f:1d:
                    e3:1d:e1:ca:af:24:d3:e0:52:6a:98:dc:94:ec:a7:
                    59:3b:6a:49:fe:35:7b:8f:c3:b8:cb:c7:5b:04:8b:
                    71:eb:09:d6:00:cc:30:e9:e7:83:5f:0d:ec:02:89:
                    39:93:bd:ea:1a:97:37:a0:7f:a0:d3:f9:e4:79:29:
                    74:d9:e0:d0:fa:b6:16:94:8c:a7:00:4f:c0:68:af:
                    ce:47:b2:0e:0a:a6:9b:d9:33:d8:10:50:e9:c2:86:
                    23:09:25:ca:43:8e:8b:a8:64:b2:58:e8:98:cb:4b:
                    68:95:ac:c3:bd:30:28:ba:94:42:1c:4f:90:45:bd:
                    4d:c7:cf:3f:bf:49:9b:46:bd:66:98:f3:47:74:37:
                    09:1f:47:9a:5a:e3:b6:98:15:37:25:2e:ec:05:b8:
                    ba:c1:04:cf:10:99:62:d8:ec:c1:47:00:e7:5d:9d:
                    bc:bb:6f:2a:64:2d:cf:3d:b1:6a:4a:d7:99:75:37:
                    e3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:13:CF:7F:D5:79:BB:5B:E9:11:FE:8C:35:9D:67:5E:A4:D7:E4:24
            X509v3 Authority Key Identifier:
                keyid:EB:2B:06:51:89:39:C1:FC:26:9F:57:24:C5:C4:C9:14:D7:CF:57:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB2B06518939C1FC269F5724C5C4C914D7CF5731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/981EFF369EE0E95975ED2E6F1968E7081A272BBF012EDC6EBF0119E4CB59EFB2/0/3136382e3139352e3232342e302f32322d3234203d3e20323634373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:54:d9:98:f3:cc:13:a3:bc:44:0b:32:7f:37:87:28:75:5b:
         21:5e:cf:d4:2c:cc:b6:3c:0e:c1:68:14:40:6e:6f:d7:39:9c:
         1c:cf:51:25:4e:42:86:c4:a7:be:ed:17:49:b5:e3:a6:39:f2:
         37:7a:c1:95:19:06:c8:c2:a6:28:e5:f3:ca:7c:99:b4:71:da:
         5b:8d:53:3b:1f:33:25:14:b4:03:26:ff:5d:8b:b8:d8:76:94:
         bd:58:42:5f:bb:a1:b5:2c:ba:7c:26:a8:17:e8:1d:9b:7e:eb:
         cb:9d:8e:b1:b7:a1:24:bd:3f:74:90:1d:4c:ff:59:25:80:8f:
         a1:43:67:c0:5e:c3:3b:db:16:57:ce:01:e0:13:b3:ed:ab:24:
         a1:4e:86:cc:1c:d0:99:53:1f:f0:d1:7a:d6:b4:51:72:c4:67:
         4f:63:df:54:34:7e:37:32:65:a6:24:38:5e:41:0a:51:74:2e:
         1e:53:4f:6c:02:f3:fd:99:d5:6c:c8:5a:f9:d2:a5:d8:42:0d:
         7c:3f:9a:fa:15:e4:8b:b6:68:f7:46:52:70:97:90:c6:c5:2f:
         d8:79:5b:fc:ab:8d:8e:a8:ce:45:c1:d0:57:61:49:a3:f7:53:
         fb:c0:ab:ae:47:6e:7b:a8:db:16:ea:b9:73:2d:3c:fc:e5:7a:
         26:c3:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 01:48:28 2025 by rpki-client