Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/3137302e3233392e3230342e302f32322d3234203d3e20323635363239.roa
File:                     3137302e3233392e3230342e302f32322d3234203d3e20323635363239.roa (raw, json)
Hash identifier:          zDArHJAQfSsWJgwPh+VNVepdKbZH4CVHHTm4+2bawT4=
Subject key identifier:   66:75:0F:74:E6:E4:F2:3A:6E:08:EE:35:00:BA:4C:BC:75:46:27:0F
Certificate issuer:       /CN=27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42
Certificate serial:       36CF536D0D23B1366063F97A1815BA4E775B10F4
Authority key identifier: 27:D4:1D:63:3A:2E:F6:7B:9D:5F:1C:7C:B9:F7:7C:4B:5E:47:4E:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/3137302e3233392e3230342e302f32322d3234203d3e20323635363239.roa
Signing time:             Tue 04 Feb 2025 18:37:57 +0000
ROA not before:           Tue 04 Feb 2025 18:32:57 +0000
ROA not after:            Tue 03 Feb 2026 18:37:57 +0000
asID:                     265629
IP address blocks:        170.239.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:cf:53:6d:0d:23:b1:36:60:63:f9:7a:18:15:ba:4e:77:5b:10:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42
        Validity
            Not Before: Feb  4 18:32:57 2025 GMT
            Not After : Feb  3 18:37:57 2026 GMT
        Subject: CN=66750F74E6E4F23A6E08EE3500BA4CBC7546270F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:e4:71:d5:eb:e3:2c:4e:d9:0f:ec:20:c3:
                    3b:02:00:5d:23:46:26:02:35:f4:b5:df:17:e8:c6:
                    99:01:2f:29:e4:c4:86:d8:22:3a:5a:58:91:96:35:
                    31:cb:35:79:d3:2b:4c:71:c7:16:1d:d8:51:ea:82:
                    67:89:43:9f:e9:66:8e:88:ab:1c:0d:b1:e2:1c:17:
                    27:e8:c0:2b:a9:3e:a3:90:5a:46:1f:a7:c2:04:8a:
                    b3:69:47:77:e4:68:ab:96:1c:2d:8e:14:0e:c4:d5:
                    a5:87:f6:d3:69:c3:89:b1:38:32:6b:df:ab:7d:6d:
                    dc:60:e9:f0:85:66:23:2e:58:d6:1f:e8:89:84:b0:
                    ec:bf:4c:fc:44:63:a7:5b:ba:fd:6e:d7:29:4d:d2:
                    ae:49:be:ad:40:3e:88:20:d3:42:96:8c:8f:9b:6b:
                    65:0d:c5:30:eb:2e:a6:a9:23:b2:c8:37:c5:b8:71:
                    25:a8:25:7c:1e:50:0a:d3:1a:a3:c6:c5:90:9c:21:
                    a7:9c:d8:07:e4:0a:39:69:1f:65:73:37:c3:f7:30:
                    aa:e3:48:f9:4e:1f:f4:ae:a3:f8:bc:8f:3c:3e:f5:
                    92:dd:5c:da:f8:5b:a7:d4:e9:c6:26:86:f5:89:9d:
                    8c:aa:a5:cb:5a:bf:01:ce:37:4c:05:af:2f:c9:a8:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:75:0F:74:E6:E4:F2:3A:6E:08:EE:35:00:BA:4C:BC:75:46:27:0F
            X509v3 Authority Key Identifier:
                keyid:27:D4:1D:63:3A:2E:F6:7B:9D:5F:1C:7C:B9:F7:7C:4B:5E:47:4E:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27D41D633A2EF67B9D5F1C7CB9F77C4B5E474E42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E1722501C0BA318A92FF90C960DD0886AF5CA29DDBE97C10FDE4B3891A4B732/0/3137302e3233392e3230342e302f32322d3234203d3e20323635363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:67:3b:bd:74:51:fb:68:c3:6d:21:d4:79:f8:5e:5f:3f:95:
         f3:8e:b9:2b:a1:ea:1d:03:14:f6:56:4d:5b:ca:c0:a8:44:66:
         84:4c:e0:25:4e:9d:eb:08:ff:54:39:d4:67:e4:6c:83:ba:5a:
         04:75:91:55:4b:0d:6d:ad:e5:f9:45:db:8c:5e:49:0e:28:33:
         3a:36:2a:5c:70:36:5e:ec:3f:90:d8:92:61:02:13:2e:f2:09:
         67:9e:6e:2c:e1:ae:24:ea:f9:2b:5b:8c:53:89:bb:8c:19:8c:
         ac:2d:cb:b7:65:12:86:35:f5:e0:78:18:d0:91:c5:20:71:07:
         3e:f5:02:d3:d2:f2:b0:c5:41:6c:b9:ef:35:f6:81:0f:db:36:
         54:08:72:ec:f2:bf:ff:f4:7b:3e:1c:8c:ed:a9:3e:fe:8a:f6:
         83:49:f0:56:1c:8e:91:45:b0:be:8c:ea:47:14:3f:aa:fd:52:
         87:55:9c:3a:5c:d5:a5:c4:e3:a9:dd:5c:92:d7:1d:a8:aa:06:
         79:34:8b:87:3a:21:3b:71:7a:6d:c6:3a:d6:ad:c7:10:50:d5:
         3a:00:a1:33:27:3a:4d:d2:e5:bf:e9:fd:ef:75:e6:77:b0:eb:
         3a:a1:62:58:f9:7c:2e:61:f7:a4:e8:16:37:0e:7c:d6:84:7a:
         5a:fe:58:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:04:38 2025 by rpki-client