Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa
File:                     3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa (raw, json)
Hash identifier:          hjsUD9KSvL2NQsrwZrB5oKh2Sn4yKTPMfpApvP1JEik=
Subject key identifier:   6B:58:E1:A2:C0:53:C8:61:D5:85:E8:8F:B7:97:C6:D1:D6:BB:68:87
Certificate issuer:       /CN=EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0
Certificate serial:       328E955971778E0DB4A08E231DFAFCB60F88EA81
Authority key identifier: ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa
Signing time:             Fri 09 May 2025 14:15:00 +0000
ROA not before:           Fri 09 May 2025 14:10:00 +0000
ROA not after:            Fri 08 May 2026 14:15:00 +0000
asID:                     264691
IP address blocks:        168.228.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 10:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8e:95:59:71:77:8e:0d:b4:a0:8e:23:1d:fa:fc:b6:0f:88:ea:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0
        Validity
            Not Before: May  9 14:10:00 2025 GMT
            Not After : May  8 14:15:00 2026 GMT
        Subject: CN=6B58E1A2C053C861D585E88FB797C6D1D6BB6887
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:31:bc:fa:35:16:ac:ec:1a:30:51:a6:b1:d4:
                    52:cb:0b:49:f7:91:20:f6:22:6f:a0:02:1c:d0:0c:
                    21:cd:eb:c6:f3:8c:9f:fc:ec:8f:72:f1:1c:25:62:
                    8e:8f:c0:6c:1f:56:03:38:a3:8c:f7:a4:d8:fb:f2:
                    1a:e7:46:7b:bb:56:5c:0d:60:c8:45:e1:c9:24:95:
                    f4:f5:50:ea:59:c3:4c:ce:63:c6:ca:d8:79:ac:f6:
                    05:35:95:3a:14:15:8f:e2:07:c1:4d:a7:93:2a:5f:
                    14:5c:5b:86:0b:7a:f2:a3:8c:e0:22:10:c7:d6:15:
                    62:57:48:a5:aa:2b:79:49:fc:18:24:c2:58:94:10:
                    54:04:66:d6:f0:86:f9:c5:50:07:f6:b8:48:66:94:
                    5f:ab:c2:c2:48:a4:12:5d:b4:df:3e:e8:e1:40:71:
                    c3:6e:45:10:d9:af:37:17:0b:d3:0b:c0:1d:0f:2a:
                    dc:16:2b:16:4d:94:ac:65:96:12:c1:80:3d:6b:51:
                    1f:96:85:4b:6f:0c:aa:52:75:4a:6d:d7:a5:ad:f8:
                    2e:f8:13:70:6e:e2:8b:16:6b:02:44:24:1f:0f:73:
                    db:49:a6:90:5c:26:c1:32:f9:a2:0a:16:88:5f:03:
                    f0:56:7e:6f:aa:35:54:3d:e0:62:ab:d8:29:38:5b:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:E1:A2:C0:53:C8:61:D5:85:E8:8F:B7:97:C6:D1:D6:BB:68:87
            X509v3 Authority Key Identifier:
                keyid:ED:A4:DB:FF:F9:37:06:F4:3A:CB:CC:A3:97:D5:16:46:7F:A2:B7:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EDA4DBFFF93706F43ACBCCA397D516467FA2B7C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAAF7FD78307B7257548536C216AD24C82EB25F5DBFBD292E83568E608B06078/0/3136382e3232382e3232342e302f32322d3234203d3e20323634363931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:5b:ca:9e:86:a3:c8:c7:bc:28:c8:0b:b4:31:ea:87:78:c3:
         fc:81:d3:e8:75:75:56:c9:33:4a:41:38:57:e6:bf:95:d5:b2:
         95:fe:39:79:31:06:cb:23:8e:70:9a:c6:26:3c:83:8d:e4:02:
         f4:28:1c:13:13:28:9d:96:8d:9f:fe:36:02:e4:33:fd:71:04:
         18:19:aa:05:6a:54:ba:e1:3a:46:58:fa:55:a7:d6:c8:cc:2d:
         17:28:67:ef:be:a9:f4:6d:20:4d:21:37:26:cf:ed:ca:62:78:
         37:20:c3:91:b3:14:06:d6:56:0f:a4:0c:fb:d6:fb:e8:6e:28:
         3d:be:85:1b:53:10:f6:36:9a:32:b9:9e:fc:02:69:87:4e:c0:
         93:46:f3:9f:2a:fe:e1:a7:98:69:b5:9e:ff:94:e8:d7:91:9c:
         17:b1:3c:26:b7:30:ed:b9:9b:de:44:a1:40:80:0a:c1:ca:65:
         52:5a:98:22:dd:85:7b:f4:aa:4e:1e:e9:c5:20:1b:27:a6:be:
         b4:c9:26:16:4f:39:f9:0d:1d:f9:85:3d:a3:47:c5:3b:30:cb:
         bb:f8:e7:f9:cd:3c:c1:ee:42:fd:2b:8d:79:9d:5e:94:10:ff:
         5b:26:f3:d2:d2:b1:84:29:5f:eb:66:87:b4:db:d8:98:87:3c:
         4c:31:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 07:10:44 2025 by rpki-client