Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          VcBLCh8ZGVuubHZyOdJcRsXxzUSW8LfiNf+TfwGIOSA=
Subject key identifier:   56:0B:E4:C6:67:F6:79:BB:35:A8:25:8D:9F:6C:BC:50:D3:7B:EB:4E
Certificate issuer:       /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial:       417AD122DA5E1877ED67955914C3DB81C84E47FB
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 04 Feb 2025 18:35:43 +0000
ROA not before:           Tue 04 Feb 2025 18:30:43 +0000
ROA not after:            Tue 03 Feb 2026 18:35:43 +0000
asID:                     272981
IP address blocks:        170.239.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 16 Apr 2025 12:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7a:d1:22:da:5e:18:77:ed:67:95:59:14:c3:db:81:c8:4e:47:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
        Validity
            Not Before: Feb  4 18:30:43 2025 GMT
            Not After : Feb  3 18:35:43 2026 GMT
        Subject: CN=560BE4C667F679BB35A8258D9F6CBC50D37BEB4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8a:54:54:41:3c:16:90:e9:1c:76:53:28:28:
                    81:e9:ca:28:29:5a:93:ca:b7:85:32:f1:e6:0a:1c:
                    dd:35:f6:4a:cc:67:d9:8f:fc:f6:d6:85:71:c9:49:
                    e8:ec:bf:33:f8:ee:75:ec:61:9d:82:10:97:f7:b0:
                    d8:f1:f2:78:50:d4:0c:4d:69:83:1f:9b:b6:f5:22:
                    9d:44:e8:3c:bd:fe:72:de:8f:2a:d2:e0:23:59:b8:
                    63:9e:68:65:c6:3d:a2:e0:54:8d:98:14:80:9c:23:
                    fa:cb:0e:8d:35:d1:f3:72:e0:d7:15:08:f7:3b:d4:
                    f7:ca:a8:16:fe:2b:0b:15:7f:22:d0:00:79:c8:4c:
                    4f:02:43:8e:83:80:34:1a:d1:ff:0b:6a:68:2d:8b:
                    32:78:c5:c8:d7:da:d3:15:f3:95:a8:af:dd:27:d7:
                    4b:53:66:23:4e:cf:fc:59:30:7b:4b:ce:2d:cd:12:
                    fb:d5:74:78:85:b4:e6:f2:97:25:68:04:63:93:70:
                    6d:7a:9d:87:64:9b:ac:ed:9b:c5:4d:8a:9b:c0:7b:
                    82:04:e2:21:d7:6c:43:94:76:c2:d7:56:5b:71:a5:
                    51:31:45:20:6a:8c:00:8d:b8:57:f8:d4:fe:6f:7c:
                    bc:08:83:f2:6f:54:ad:81:37:9e:91:a9:2b:be:ad:
                    7c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0B:E4:C6:67:F6:79:BB:35:A8:25:8D:9F:6C:BC:50:D3:7B:EB:4E
            X509v3 Authority Key Identifier:
                keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:5e:9d:ca:61:8e:12:0c:90:dc:08:e8:9a:f5:5d:8d:54:4a:
         d2:af:35:73:f2:50:b8:b9:01:09:d5:bb:2f:e5:4a:90:26:b4:
         08:af:71:ae:43:bc:02:e0:96:71:70:11:fb:ec:d6:7f:a1:f8:
         d8:c1:fb:93:56:85:c8:ff:57:87:55:20:c3:46:fd:0f:ef:98:
         3e:7e:6b:4f:d1:0e:62:37:97:22:f3:c0:80:d2:75:e8:68:8d:
         58:31:64:53:2c:a3:05:ea:bb:30:37:f2:89:a7:24:a1:ff:07:
         b2:0e:a3:c6:8e:87:f1:f7:d5:5e:d1:46:d8:25:ab:33:78:80:
         a0:1a:0e:8b:9d:65:1a:da:f3:df:63:b8:81:17:a0:21:24:07:
         b4:76:32:e6:83:fd:53:d4:d3:24:21:68:34:bc:b2:7a:00:be:
         5a:a1:94:0c:5a:59:c5:a6:cd:6a:e0:89:18:46:11:8f:e5:ea:
         a5:75:c9:5a:22:0a:ff:f1:b1:38:15:93:5b:71:16:05:40:5c:
         f2:8b:f4:76:ee:da:97:fc:43:df:d1:fe:67:af:16:7f:53:76:
         b3:e9:46:82:10:ce:27:cb:b8:6d:52:aa:0d:0a:42:61:a4:d7:
         d2:bb:52:b0:83:95:29:b6:b9:8d:93:72:7e:e3:38:79:e6:b0:
         e3:65:aa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:17:30 2025 by rpki-client