Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32322d3232203d3e203532323731.roa
File:                     3137302e3233392e34382e302f32322d3232203d3e203532323731.roa (raw, json)
Hash identifier:          DCw7XFLRxHy02pLdzrFooFLckvBrkR/bkXvlJM9/NrQ=
Subject key identifier:   A5:54:F3:24:69:66:BB:EE:24:B8:B5:48:78:FC:FA:66:38:22:7E:14
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       2AF0EC4AABEC1E947439A01FADEBB2662FEA99A8
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32322d3232203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:23 +0000
ROA not before:           Tue 04 Feb 2025 18:42:23 +0000
ROA not after:            Tue 03 Feb 2026 18:47:23 +0000
asID:                     52271
IP address blocks:        170.239.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:f0:ec:4a:ab:ec:1e:94:74:39:a0:1f:ad:eb:b2:66:2f:ea:99:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:23 2025 GMT
            Not After : Feb  3 18:47:23 2026 GMT
        Subject: CN=A554F3246966BBEE24B8B54878FCFA6638227E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:78:3f:ca:74:66:86:b4:2d:b5:28:81:17:4e:
                    de:2b:3a:66:e8:4f:3e:c4:40:17:54:35:b2:64:01:
                    20:36:c7:46:98:c3:ec:f1:b6:47:85:90:49:be:a3:
                    f7:f6:a3:4b:d6:1d:3e:bc:fd:b7:38:1d:85:69:41:
                    7c:78:88:96:a2:45:ca:27:20:2c:df:86:1b:af:a8:
                    9f:e9:f2:55:2a:b9:f2:97:63:ab:75:be:8b:9a:db:
                    3a:e0:f2:f6:cf:f6:00:29:f4:14:30:f5:2e:f6:32:
                    a7:08:b0:c6:f5:6f:49:59:c2:f8:29:0b:c6:4f:4c:
                    e4:8a:4e:8a:1c:ef:91:28:46:88:91:fb:5b:91:2f:
                    f6:da:ce:de:e8:56:14:ed:85:25:bc:d8:0b:5c:08:
                    5b:2b:9b:0c:06:e3:38:a9:28:8c:8f:b0:ab:77:25:
                    82:6b:a5:06:eb:21:9c:83:57:7a:52:5f:ee:f2:b1:
                    5c:f6:54:f8:74:f2:fb:b1:96:2b:9f:95:36:87:1b:
                    e2:50:4d:22:21:f5:9c:0d:a9:73:40:a0:b1:5a:1a:
                    e6:ce:26:44:60:39:d0:d5:ae:36:59:d1:7a:2d:03:
                    e7:22:4b:1e:0c:bb:09:5e:34:3f:6b:2c:4e:f3:01:
                    53:69:2d:ed:17:81:f1:34:dd:2a:24:c1:89:4a:98:
                    e4:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:54:F3:24:69:66:BB:EE:24:B8:B5:48:78:FC:FA:66:38:22:7E:14
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32322d3232203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:d6:fe:93:c7:10:e9:2d:a5:37:bf:4d:d2:3f:ab:09:a1:59:
         12:b4:8e:7f:57:23:4c:b7:96:3e:30:e8:03:01:5e:06:cb:8d:
         3f:11:8f:dc:56:2e:ee:89:ec:90:e8:cc:d0:d7:cd:ac:78:32:
         fc:8f:5d:26:ca:13:21:76:7a:3e:30:60:1b:33:d2:a7:9a:2b:
         17:38:35:31:cd:dc:fd:38:d1:f0:4f:9a:1e:de:f5:df:e2:c7:
         5f:50:20:d0:fc:70:c5:c6:1e:05:96:00:22:5c:5b:7c:ca:25:
         bd:47:67:49:da:e5:02:b1:5e:c5:d3:63:eb:8a:12:cc:15:1e:
         47:cb:83:de:b5:68:1a:91:45:54:38:c9:2b:61:51:af:be:3e:
         c1:a9:24:46:b8:35:72:b7:b0:6b:3a:88:4c:25:22:78:1a:85:
         e0:85:fc:bd:ea:32:da:a4:f2:5a:3b:e3:b1:14:12:1c:50:bc:
         f9:f8:26:07:90:61:59:b6:82:77:83:3b:21:f5:7d:0c:f2:99:
         a2:f3:65:5b:0b:08:c1:3c:82:10:eb:9a:5d:49:f8:fc:a2:44:
         8b:fd:20:36:d8:1d:e3:25:ba:24:05:f2:b6:81:d9:22:9c:cf:
         11:52:b6:5d:85:23:ae:90:a8:84:8c:28:fe:dc:9d:1c:cd:95:
         9f:18:b8:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:48:01 2025 by rpki-client