Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3137302e37382e3139322e302f32322d3234203d3e203230323037.roa
File:                     3137302e37382e3139322e302f32322d3234203d3e203230323037.roa (raw, json)
Hash identifier:          itLLRDhq4XsO+7N+XmitpL/15n2i504EJBe9rQa4XlM=
Subject key identifier:   FE:45:B4:CE:0D:81:08:9E:24:79:CF:3A:F7:AB:4C:66:8A:D8:A2:BE
Certificate issuer:       /CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
Certificate serial:       4CE6F18ACE0AD7F9450F09CD3A5696705A446860
Authority key identifier: 4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3137302e37382e3139322e302f32322d3234203d3e203230323037.roa
Signing time:             Tue 04 Feb 2025 20:00:39 +0000
ROA not before:           Tue 04 Feb 2025 19:55:39 +0000
ROA not after:            Tue 03 Feb 2026 20:00:39 +0000
asID:                     20207
IP address blocks:        170.78.192.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 06:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e6:f1:8a:ce:0a:d7:f9:45:0f:09:cd:3a:56:96:70:5a:44:68:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F99A2A558BEB359E92AC3908E9098C384DE72F7
        Validity
            Not Before: Feb  4 19:55:39 2025 GMT
            Not After : Feb  3 20:00:39 2026 GMT
        Subject: CN=FE45B4CE0D81089E2479CF3AF7AB4C668AD8A2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:71:72:7c:9a:9b:d3:a9:dc:ce:c5:4e:6d:71:
                    ce:8e:da:b5:b4:da:a7:28:b4:f9:7d:2e:c3:eb:e5:
                    4b:4c:a5:98:ed:87:59:c9:2f:23:52:cf:a5:a1:ef:
                    6c:e1:ef:9b:c8:e2:b4:c1:9e:a4:a4:4e:b0:ae:31:
                    c8:c5:f1:87:13:ba:4e:c8:6a:4e:71:22:a9:de:34:
                    8a:72:d6:40:81:93:ba:c6:cf:cc:1f:5a:ca:c6:ff:
                    47:aa:e7:dd:c4:a4:9c:f2:95:c0:32:3b:e8:43:e3:
                    80:c3:65:d3:1c:95:f6:aa:62:76:35:3e:34:e2:09:
                    22:a3:0e:10:8a:13:65:50:50:d1:88:d6:f9:c0:3e:
                    6c:13:58:0b:c0:94:63:86:79:ce:41:0a:a7:bc:0d:
                    e1:2c:00:e1:66:d3:a5:e2:3a:d9:fb:66:3e:a2:2a:
                    31:f3:38:52:c3:b2:e2:be:f8:c9:8a:c5:3e:ea:48:
                    d3:bb:cf:6d:4c:a9:5c:45:c1:09:d9:e9:d9:a4:05:
                    b4:a1:45:c2:2c:c5:4d:40:45:79:8e:46:92:25:b9:
                    09:fa:a0:32:ba:17:5d:4b:54:d4:c9:0f:0d:4e:65:
                    00:3d:eb:0f:fb:a0:3e:b4:4e:b7:64:9d:b2:e0:5c:
                    88:62:f9:9d:a8:e9:29:a3:72:95:5f:1a:a3:ed:65:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:45:B4:CE:0D:81:08:9E:24:79:CF:3A:F7:AB:4C:66:8A:D8:A2:BE
            X509v3 Authority Key Identifier:
                keyid:4F:99:A2:A5:58:BE:B3:59:E9:2A:C3:90:8E:90:98:C3:84:DE:72:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F99A2A558BEB359E92AC3908E9098C384DE72F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09BA4188BF43656013680C793F6A4846A561718EFC7F97B2FC105BF504A867AD/0/3137302e37382e3139322e302f32322d3234203d3e203230323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cb:51:48:b5:85:06:a8:5d:23:3f:45:1f:05:c8:47:f5:3e:6c:
         d0:ad:46:d9:a4:b0:f2:36:bd:fb:54:1a:de:96:1d:c6:4d:5b:
         3d:68:d8:90:7d:81:e5:6d:8a:f6:29:8d:93:ea:a1:ba:36:37:
         32:4a:8e:df:fe:69:8d:59:e7:74:f2:d9:79:38:dd:63:13:3d:
         94:a0:29:13:6f:77:fe:aa:80:2c:70:6f:43:7a:45:5f:a8:95:
         a3:00:7b:29:5e:0f:cf:1a:2e:c3:c1:ba:04:90:f9:9d:28:b3:
         48:56:31:f2:7e:6f:77:36:1c:4a:40:63:bc:93:42:2d:a6:27:
         6d:7b:6d:2e:08:df:90:9f:a1:84:2e:e8:98:34:f2:26:de:ae:
         5c:77:3e:fd:fd:06:c5:9d:c2:d2:9c:af:c0:8f:7f:bd:92:4a:
         f8:50:83:56:97:ec:ff:c4:78:cb:2b:6d:76:78:a2:2b:db:a6:
         42:d4:82:94:70:6e:26:b1:42:a6:d7:d3:f3:49:d0:bc:db:af:
         3c:39:ed:99:99:e4:9f:72:a7:77:4f:af:fa:9d:7c:7e:98:06:
         b4:7a:02:5b:47:27:a4:09:95:7f:42:c2:13:d5:1f:8c:4e:f9:
         08:43:8e:0d:70:eb:77:d2:81:97:b2:c1:bd:af:25:c6:0e:f4:
         3b:53:5a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:46:40 2025 by rpki-client