Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32342d3234203d3e203532323731.roa
File:                     3137302e3233392e34382e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          AMNilptHeDxVwLLusegjFrGirZIhlMwryvJBNnpZKWo=
Subject key identifier:   B9:FA:15:98:A7:C6:DF:F3:E9:40:E1:F6:62:5F:75:99:F2:3A:94:63
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       09BD997E60AE68DC901FDB9CE735E62310EF837C
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:23 +0000
ROA not before:           Tue 04 Feb 2025 18:42:23 +0000
ROA not after:            Tue 03 Feb 2026 18:47:23 +0000
asID:                     52271
IP address blocks:        170.239.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:bd:99:7e:60:ae:68:dc:90:1f:db:9c:e7:35:e6:23:10:ef:83:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:23 2025 GMT
            Not After : Feb  3 18:47:23 2026 GMT
        Subject: CN=B9FA1598A7C6DFF3E940E1F6625F7599F23A9463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:6e:bf:ed:b7:2c:f1:2b:87:84:c8:16:44:
                    fd:7a:e8:87:7b:ae:63:7e:df:c8:b4:af:f6:ed:77:
                    30:b0:1a:84:2a:d5:f1:a5:b1:23:aa:e6:d2:c3:a6:
                    2c:11:eb:5b:70:c7:31:82:98:6b:39:d5:8b:a2:c3:
                    ea:44:11:4c:fd:77:6c:85:d2:3d:2c:1f:a1:f7:c8:
                    54:5e:a8:46:f4:9c:be:51:70:48:ee:d3:2c:3a:1c:
                    74:1c:ac:d2:29:a0:a5:03:33:84:fa:04:f4:37:9d:
                    17:03:86:ce:11:04:3d:97:c0:18:6c:85:b9:8a:c9:
                    f3:df:54:2f:7f:f0:08:e0:f0:65:fd:63:33:bd:33:
                    10:87:86:5d:fe:f4:f4:2c:77:3f:ae:c9:68:62:b9:
                    11:2e:81:21:b6:df:10:55:36:e0:50:fb:89:d5:d1:
                    85:89:ba:3f:3d:09:26:52:99:63:14:22:5c:ce:86:
                    a0:80:22:2c:07:b6:39:05:b7:40:62:1d:01:1f:56:
                    c3:67:ec:97:e5:f3:0b:14:d9:49:7e:ad:6d:85:7a:
                    3e:c5:47:35:d6:ee:e3:96:71:5b:40:8c:63:e4:66:
                    63:ed:c0:c7:a5:4f:67:70:24:80:88:b4:24:d6:d1:
                    68:cc:0f:ce:6b:7f:d3:8f:d3:d3:9b:79:63:22:d7:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FA:15:98:A7:C6:DF:F3:E9:40:E1:F6:62:5F:75:99:F2:3A:94:63
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e34382e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7e:24:6e:6f:91:ba:ac:e7:6a:31:7d:3c:97:34:a3:a2:ee:
         15:15:c5:2f:c9:1b:f6:32:72:60:d3:5a:0a:08:6a:92:f9:0c:
         a6:11:df:37:16:cd:58:71:67:8a:a9:8b:dd:88:96:da:29:8f:
         42:27:49:c1:5c:63:3c:07:c7:9b:67:50:37:92:0d:19:6c:72:
         68:44:9f:d1:6f:68:62:5e:98:2c:af:fe:ae:ae:7c:2e:d8:08:
         1a:1a:3e:6b:d3:90:89:be:94:70:c1:76:bd:f7:95:ab:03:58:
         66:10:7c:ee:e5:fe:48:ba:cf:97:26:2a:91:f4:7b:a5:1e:b1:
         70:a1:ba:e7:83:e6:11:35:4c:57:71:9a:14:e6:d4:9d:e3:b9:
         d0:91:e8:41:49:cd:0b:7b:07:2a:d6:45:90:b6:bb:3e:b9:6f:
         1b:5b:e7:01:97:8d:70:e0:22:9e:77:f3:18:f0:39:23:3f:4b:
         04:0d:d2:96:56:f8:ed:ba:39:8f:d7:a7:a3:40:fa:99:45:79:
         5b:34:d6:b2:d2:65:51:e0:28:b2:79:f9:1e:d3:0c:4b:d2:ab:
         49:f2:ce:62:6c:ad:13:6c:7e:1d:8e:71:3b:63:01:53:d6:66:
         7d:a3:5d:e8:91:ff:4d:70:a5:77:73:dd:a9:eb:b0:65:1f:5d:
         d9:2e:bb:ab
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUCb2ZfmCuaNyQH9uc5zXmIxDvg3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU5MzlCMjIzNjhCNzkxQzE4ODg5QzExNDg3NjU4MkEy
OTM3MTZGNDAeFw0yNTAyMDQxODQyMjNaFw0yNjAyMDMxODQ3MjNaMDMxMTAvBgNV
BAMTKEI5RkExNTk4QTdDNkRGRjNFOTQwRTFGNjYyNUY3NTk5RjIzQTk0NjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtaW6/7bcs8SuHhMgWRP166Id7
rmN+38i0r/btdzCwGoQq1fGlsSOq5tLDpiwR61twxzGCmGs51Yuiw+pEEUz9d2yF
0j0sH6H3yFReqEb0nL5RcEju0yw6HHQcrNIpoKUDM4T6BPQ3nRcDhs4RBD2XwBhs
hbmKyfPfVC9/8Ajg8GX9YzO9MxCHhl3+9PQsdz+uyWhiuREugSG23xBVNuBQ+4nV
0YWJuj89CSZSmWMUIlzOhqCAIiwHtjkFt0BiHQEfVsNn7Jfl8wsU2Ul+rW2Fej7F
RzXW7uOWcVtAjGPkZmPtwMelT2dwJICItCTW0WjMD85rf9OP09ObeWMi16XvAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUufoVmKfG3/PpQOH2Yl91mfI6lGMwHwYDVR0j
BBgwFoAUhZObIjaLeRwYiJwRSHZYKik3FvQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xOEQ0REE2NEE5QzVCMjE5QjdFQkUxMEI4NDZGRjM5NDZB
NzdGNzQyMDQ0ODRFRDVFODVFNjA2NzAwNjM5MzYzLzAvODU5MzlCMjIzNjhCNzkx
QzE4ODg5QzExNDg3NjU4MkEyOTM3MTZGNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTkzOUIyMjM2OEI3OTFDMTg4
ODlDMTE0ODc2NTgyQTI5MzcxNkY0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMThENERBNjRBOUM1QjIxOUI3RUJFMTBCODQ2RkYzOTQ2QTc3Rjc0MjA0
NDg0RUQ1RTg1RTYwNjcwMDYzOTM2My8wLzMxMzczMDJlMzIzMzM5MmUzNDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMyMzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrvMDAN
BgkqhkiG9w0BAQsFAAOCAQEAW34kbm+RuqznajF9PJc0o6LuFRXFL8kb9jJyYNNa
CghqkvkMphHfNxbNWHFniqmL3YiW2imPQidJwVxjPAfHm2dQN5INGWxyaESf0W9o
Yl6YLK/+rq58LtgIGho+a9OQib6UcMF2vfeVqwNYZhB87uX+SLrPlyYqkfR7pR6x
cKG654PmETVMV3GaFObUneO50JHoQUnNC3sHKtZFkLa7PrlvG1vnAZeNcOAinnfz
GPA5Iz9LBA3Sllb47bo5j9eno0D6mUV5WzTWstJlUeAosnn5HtMMS9KrSfLOYmyt
E2x+HY5xO2MBU9ZmfaNd6JH/TXCld3PdqeuwZR9d2S67qw==
-----END CERTIFICATE-----
Generated at Fri Apr 18 03:50:20 2025 by rpki-client