Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/3137302e3233392e3138382e302f32322d3234203d3e20323634383338.roa
File:                     3137302e3233392e3138382e302f32322d3234203d3e20323634383338.roa (raw, json)
Hash identifier:          sAruuunx/BVN8/PnCNaRWihm6qaDEJWoTsN7junw1BU=
Subject key identifier:   E3:01:11:8C:1C:DC:AE:F8:D5:CC:90:16:EA:D8:06:F6:D8:5D:6A:D1
Certificate issuer:       /CN=6636DCC9897FE63452A0D96A7789AB31AEECB2FC
Certificate serial:       36BAE0393082001795A599CE69C74CD5F1F6C9B0
Authority key identifier: 66:36:DC:C9:89:7F:E6:34:52:A0:D9:6A:77:89:AB:31:AE:EC:B2:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/3137302e3233392e3138382e302f32322d3234203d3e20323634383338.roa
Signing time:             Tue 04 Feb 2025 18:28:45 +0000
ROA not before:           Tue 04 Feb 2025 18:23:45 +0000
ROA not after:            Tue 03 Feb 2026 18:28:45 +0000
asID:                     264838
IP address blocks:        170.239.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:ba:e0:39:30:82:00:17:95:a5:99:ce:69:c7:4c:d5:f1:f6:c9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6636DCC9897FE63452A0D96A7789AB31AEECB2FC
        Validity
            Not Before: Feb  4 18:23:45 2025 GMT
            Not After : Feb  3 18:28:45 2026 GMT
        Subject: CN=E301118C1CDCAEF8D5CC9016EAD806F6D85D6AD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:6b:2b:8b:2f:c2:c9:f8:38:a5:71:92:cf:a2:
                    0e:37:32:88:54:bf:6e:0e:ad:ba:37:3d:1a:93:14:
                    ab:76:b7:02:d3:5e:c6:21:68:7f:6f:9d:18:4f:a3:
                    3a:2c:8c:02:5b:35:86:4d:50:99:32:9d:fe:1e:c4:
                    80:5b:98:3a:7c:08:b9:69:d5:cc:5b:bb:f7:40:f9:
                    3c:b2:c4:5d:ca:f0:3d:a2:8d:77:ee:4e:f6:46:75:
                    06:a2:3b:38:a6:2e:96:ec:13:fa:14:26:7f:1c:e3:
                    4f:35:00:a4:53:a0:70:67:9f:a9:cc:23:1a:e7:fa:
                    19:16:ed:a8:9c:72:bc:09:68:e9:2a:92:82:6f:fd:
                    76:4e:8e:d3:de:f3:9a:09:e7:4f:3c:ae:e2:5a:f3:
                    74:0f:22:98:c7:b1:a3:c4:00:a2:fc:5c:43:0e:44:
                    08:4d:c4:9e:ac:7c:3c:13:df:2d:03:61:89:f5:27:
                    86:0c:7d:01:7e:91:4b:f6:30:97:72:23:04:f6:fc:
                    9e:3d:6e:ca:85:05:c8:33:95:98:5e:07:f9:5c:4b:
                    1b:ab:fb:c2:15:72:76:61:ce:34:a6:84:2e:09:b9:
                    c4:c2:b9:d6:4d:b8:72:73:30:de:66:f4:7a:76:ea:
                    41:9c:b3:d9:f2:b7:aa:f3:8e:76:a1:47:da:a4:8b:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:01:11:8C:1C:DC:AE:F8:D5:CC:90:16:EA:D8:06:F6:D8:5D:6A:D1
            X509v3 Authority Key Identifier:
                keyid:66:36:DC:C9:89:7F:E6:34:52:A0:D9:6A:77:89:AB:31:AE:EC:B2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6636DCC9897FE63452A0D96A7789AB31AEECB2FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/145671AB572DC81AD198E25C92A3ED28BA545389B6D8E0875056BE0836AF0C33/0/3137302e3233392e3138382e302f32322d3234203d3e20323634383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:38:da:04:92:40:e2:3e:79:62:25:0c:45:b6:57:57:47:50:
         c8:23:81:db:b1:80:04:af:21:1c:11:5d:50:d2:55:f4:ef:30:
         06:e9:d0:45:22:d5:0d:b7:dd:33:bd:37:9a:d2:e4:28:27:ed:
         5c:bb:cd:ff:7c:16:2c:4d:0f:d6:e3:c1:dd:58:ce:35:11:06:
         ba:2a:38:75:17:31:ab:bd:d9:77:5f:89:95:39:9b:d3:05:13:
         f7:f4:46:cf:2d:6a:da:56:e0:58:2b:f8:17:c6:62:d6:5f:04:
         1d:17:e7:43:17:6b:2f:79:c4:52:ee:53:25:ed:1c:b2:64:cb:
         2c:23:8e:cb:75:b0:23:c6:31:07:91:ea:08:25:ea:dc:90:17:
         49:be:98:5c:90:96:f0:5a:5f:82:10:72:3e:65:ad:ba:26:52:
         b2:a3:aa:ec:40:8b:a8:42:ce:af:f4:8b:9f:9f:02:dd:90:67:
         d4:24:cd:90:7d:b5:46:fb:70:35:87:bc:f5:fc:a8:a0:d2:19:
         d2:43:13:25:ee:cb:20:a6:62:50:03:1a:2a:90:ee:15:17:7e:
         3e:63:5d:5e:fb:1f:f9:bd:36:92:ac:a6:a4:02:98:be:71:e1:
         36:12:e0:ec:c1:69:dc:e0:d9:dd:8b:c2:28:c7:aa:be:8c:a9:
         53:7a:22:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:02:41 2025 by rpki-client