Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa
File:                     3137302e3233392e35312e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          RM4h/pktghbA3kGgJaireVEE3CceSYNDKhhblSPfM5A=
Subject key identifier:   2B:53:88:BD:F1:61:5F:C2:09:15:46:E5:6D:87:CD:BE:30:4A:64:B6
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       4A065CD385259989315230B1994B3DE16FA25B26
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 04 Feb 2025 18:47:22 +0000
ROA not before:           Tue 04 Feb 2025 18:42:22 +0000
ROA not after:            Tue 03 Feb 2026 18:47:22 +0000
asID:                     52271
IP address blocks:        170.239.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 11:56:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:06:5c:d3:85:25:99:89:31:52:30:b1:99:4b:3d:e1:6f:a2:5b:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Feb  4 18:42:22 2025 GMT
            Not After : Feb  3 18:47:22 2026 GMT
        Subject: CN=2B5388BDF1615FC2091546E56D87CDBE304A64B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:fe:c1:32:64:7d:7c:6d:e7:af:5f:0f:15:ad:
                    eb:c3:9b:5f:93:c9:16:9e:1d:0d:96:3c:92:ff:1a:
                    81:fd:b5:0a:26:57:07:9f:76:25:17:c4:2c:e4:e0:
                    14:b0:93:f6:c7:69:47:8a:57:6f:ee:d2:39:35:e0:
                    d0:88:c2:5a:34:8e:81:09:4c:07:29:3d:d9:94:f9:
                    ff:ba:47:73:73:0e:7d:de:b5:96:ac:74:b3:97:9d:
                    83:b4:57:3f:ce:93:bf:0a:fc:22:b2:6c:67:e8:5a:
                    23:ce:03:2e:18:82:97:c0:0b:11:60:0f:61:22:f1:
                    7e:5b:80:52:5a:2e:a3:2c:87:db:67:09:24:db:a4:
                    a1:a0:b5:1b:00:ba:ef:19:68:0a:f2:b5:de:6e:23:
                    a4:85:55:61:36:71:8f:da:ba:0d:31:31:9e:27:f4:
                    6e:4e:4e:fc:a0:f0:f9:75:c0:7d:e5:dd:15:e7:30:
                    76:18:e3:61:d9:ae:24:5a:5d:04:3b:d4:ae:8d:92:
                    28:4c:97:15:62:f8:84:b7:58:71:d3:43:d7:9a:88:
                    85:90:3f:4c:d9:a3:68:6f:51:82:8a:80:1f:e5:31:
                    e0:b2:ec:2e:91:f4:20:c1:9b:0d:1e:e1:16:98:4c:
                    b4:4e:cb:4e:e7:41:7d:09:bf:d3:d2:50:80:7d:6e:
                    90:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:53:88:BD:F1:61:5F:C2:09:15:46:E5:6D:87:CD:BE:30:4A:64:B6
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:35:5f:73:c8:d5:39:2e:35:61:ff:c4:68:b3:43:53:ad:43:
         39:2c:ad:98:e5:b0:b8:4d:9a:e6:dd:7f:a2:5d:77:95:ee:0c:
         01:cd:d9:03:7d:09:44:6c:25:31:6f:ba:58:71:bf:10:a9:3b:
         ff:33:7b:b2:ad:9a:60:44:25:cd:94:8c:ae:de:e7:ca:90:56:
         00:95:99:93:6c:af:32:af:09:9a:10:be:2d:01:5a:97:fc:8b:
         42:75:2b:98:6e:6d:de:12:54:cc:34:5c:7c:75:e5:be:f8:fb:
         55:9b:33:fc:5d:0a:bd:7f:83:ff:e0:6c:67:01:43:2d:42:94:
         6c:73:34:f9:43:22:33:6b:ea:e7:0a:9f:4c:17:ab:fd:59:a4:
         55:ef:c3:d9:99:5b:60:0e:62:75:f3:98:c0:7a:9e:25:ad:ff:
         36:94:87:5f:b1:80:3e:32:66:45:36:6f:ba:81:7a:65:fc:a8:
         4f:df:61:0c:13:f6:56:82:45:4e:9f:b8:93:8a:3c:e8:14:0e:
         d4:54:55:96:3a:ea:01:f2:23:e4:79:8b:68:4d:1f:dc:6e:de:
         27:45:e3:e6:54:d7:67:8b:b4:f5:e4:b8:d0:23:1d:a9:f1:1f:
         6d:5e:63:64:d7:87:9e:d8:6d:25:3c:26:f9:8f:79:f5:fa:33:
         c1:13:08:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 03:52:38 2025 by rpki-client