Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
File:                     3137302e3233392e36342e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          UAe1aqS8FqVnadjGnsF5oGpA6MacMOrEelBwAZ/A7q4=
Subject key identifier:   AC:F7:C8:A7:92:83:A6:75:9E:72:5D:57:45:7E:25:C5:C4:09:37:C3
Certificate issuer:       /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial:       034CF948C09A1E8AA8AA88F9F75D859829AB82D7
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 04 Feb 2025 18:35:43 +0000
ROA not before:           Tue 04 Feb 2025 18:30:43 +0000
ROA not after:            Tue 03 Feb 2026 18:35:43 +0000
asID:                     14259
IP address blocks:        170.239.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 16:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:4c:f9:48:c0:9a:1e:8a:a8:aa:88:f9:f7:5d:85:98:29:ab:82:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
        Validity
            Not Before: Feb  4 18:30:43 2025 GMT
            Not After : Feb  3 18:35:43 2026 GMT
        Subject: CN=ACF7C8A79283A6759E725D57457E25C5C40937C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f2:48:05:2e:5c:ee:e2:86:85:ac:c6:2e:8a:
                    7b:bb:44:c0:ea:fc:4c:25:44:60:53:43:52:c1:0d:
                    37:ed:68:cc:10:4f:eb:67:a1:7f:ca:f6:8f:26:fb:
                    a2:b3:93:b9:62:9d:f6:b4:c4:b1:ba:34:34:b7:45:
                    37:55:fe:6c:5e:23:c3:28:1d:f7:14:cd:8c:4d:bf:
                    d0:66:54:71:84:96:a9:b5:60:57:dd:61:6e:2b:14:
                    7e:8a:bc:67:5c:f6:d8:05:a8:8f:08:21:39:34:39:
                    89:db:1b:b3:30:db:e9:04:74:4e:6c:2a:c8:dc:3e:
                    37:79:02:db:f6:7b:53:17:55:19:aa:e5:ae:d7:02:
                    c1:50:89:dc:0d:7a:ae:cd:56:97:f0:d0:a0:6d:64:
                    68:00:a6:43:8e:3b:31:43:a6:10:dc:f5:6f:bb:98:
                    c8:81:1f:f5:ef:d2:9d:19:b9:a9:40:c6:dc:c8:e5:
                    44:df:23:96:fb:4d:43:5b:1c:40:35:9b:98:55:69:
                    18:48:6c:75:b4:41:6d:9e:65:f3:5b:81:6e:5e:e9:
                    19:3a:7d:b9:df:e7:b0:84:95:57:cb:a1:a5:c4:d1:
                    a6:94:1f:a3:53:fe:af:e5:70:bd:47:85:95:3c:ba:
                    16:fd:29:a5:56:d6:70:23:f3:ac:c9:86:55:c4:e5:
                    35:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:C8:A7:92:83:A6:75:9E:72:5D:57:45:7E:25:C5:C4:09:37:C3
            X509v3 Authority Key Identifier:
                keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:92:5a:98:0f:45:14:6e:73:cb:09:d6:6d:9e:a9:a1:2f:a2:
         6b:a3:6f:9d:ca:88:e9:af:fd:71:43:f2:bf:8c:c1:53:53:21:
         cc:b7:1d:62:80:36:6b:bf:de:53:e1:ed:3e:04:60:26:d2:c5:
         8a:42:b7:dc:f0:ff:1f:bc:e2:e8:55:af:61:b6:b6:2c:a4:bc:
         11:fe:c8:bb:d3:b9:bc:d4:5c:6c:7c:b4:46:ce:7d:58:0a:37:
         a4:4a:49:90:76:41:86:94:5f:da:76:cb:56:a3:a5:28:35:9d:
         2a:7d:bd:67:4f:49:35:58:3f:e9:80:c3:95:0a:e7:b2:39:39:
         1f:4e:36:3e:99:0c:81:f1:73:d6:4c:86:94:f0:8d:7e:57:ca:
         e7:5c:0c:8e:98:c3:e2:8a:b9:c8:e1:67:20:7b:78:85:e5:05:
         0a:dc:86:b7:9c:08:01:e6:89:b7:ea:9d:b1:1b:6a:08:7f:c5:
         4a:5b:c1:ff:90:92:77:3d:3e:4d:44:e7:b3:10:6a:db:e9:ef:
         47:82:6f:ba:46:a9:6a:c9:07:35:fa:56:d4:3d:b1:8e:13:7e:
         90:44:ad:ef:74:89:71:2b:2f:e0:b5:32:75:d1:4c:a8:37:a6:
         dd:6b:2a:39:bc:82:b3:4e:6d:0a:35:a6:9a:ff:ae:2f:a2:67:
         06:f8:20:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:29 2025 by rpki-client