Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa
File:                     3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa (raw, json)
Hash identifier:          ScU8iHJymDQMFTAbYoVy3KeHUFSzBl9LjQP4jVSkv7w=
Subject key identifier:   DC:EB:26:7E:7D:EC:64:51:DA:95:AA:1B:19:89:35:C6:C1:8E:44:98
Certificate issuer:       /CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
Certificate serial:       444FEE6FE57EFBE9903CF127F5955B7E4129C327
Authority key identifier: 40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa
Signing time:             Tue 04 Feb 2025 18:25:32 +0000
ROA not before:           Tue 04 Feb 2025 18:20:32 +0000
ROA not after:            Tue 03 Feb 2026 18:25:32 +0000
asID:                     265523
IP address blocks:        170.238.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:4f:ee:6f:e5:7e:fb:e9:90:3c:f1:27:f5:95:5b:7e:41:29:c3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F
        Validity
            Not Before: Feb  4 18:20:32 2025 GMT
            Not After : Feb  3 18:25:32 2026 GMT
        Subject: CN=DCEB267E7DEC6451DA95AA1B198935C6C18E4498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5c:d3:9f:b1:a3:4a:60:3a:f0:98:d4:59:f3:
                    90:f4:64:b6:ab:ce:ec:32:1c:29:4e:f7:38:6e:da:
                    47:fa:68:c6:f1:27:22:b6:12:1a:4e:d2:b1:34:71:
                    a7:77:f5:6f:bf:4d:b1:57:e9:ba:45:30:58:85:ec:
                    80:90:fe:c6:93:d3:07:02:8a:d6:e7:d8:f5:c6:64:
                    3d:e3:44:b8:6e:ed:16:ca:75:2b:7a:1b:ec:a8:5e:
                    19:1e:97:cf:cb:b8:95:93:5f:ed:48:62:88:ac:61:
                    79:5b:f3:e6:a0:a2:f1:05:25:22:05:9a:fa:6c:57:
                    e2:c4:c8:27:3d:57:0b:7d:f5:1b:92:42:21:e0:8b:
                    1b:ae:3d:bf:a2:f7:d5:45:f4:53:e0:ec:9f:c1:d3:
                    e3:7e:a9:10:7d:1b:0a:92:10:33:3f:00:70:0d:65:
                    db:37:d7:16:79:6d:b5:25:41:6e:a1:4d:56:b0:5c:
                    4f:b4:60:ed:1f:c4:6d:95:f4:55:51:27:eb:eb:66:
                    63:7d:be:c7:52:fa:6f:3c:c9:81:ff:5c:1f:6e:1c:
                    4f:e7:94:04:c7:99:5d:66:80:9f:3b:e4:9f:f7:43:
                    5f:06:45:9b:07:0f:14:56:87:79:72:fe:4e:af:64:
                    19:56:f4:da:07:f1:3c:5f:1f:21:59:14:8e:7f:db:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EB:26:7E:7D:EC:64:51:DA:95:AA:1B:19:89:35:C6:C1:8E:44:98
            X509v3 Authority Key Identifier:
                keyid:40:48:6D:CD:4F:F9:A7:DB:63:55:71:FB:C2:CC:D6:D2:AD:B8:62:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/40486DCD4FF9A7DB635571FBC2CCD6D2ADB8625F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/193ABEC27115818C343AFFAEB9C4ECD22C90E84C79E30FF33644881DAEE6C20E/0/3137302e3233382e3235322e302f32322d3232203d3e20323635353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:f5:d9:53:59:a7:5f:32:c5:f7:e4:46:7e:50:32:76:46:56:
         5a:ba:b7:45:e2:21:37:cd:7c:1a:da:30:a0:14:aa:41:64:b9:
         4e:28:84:08:c3:b7:ef:58:bc:01:9e:b6:5f:4d:5b:82:37:9f:
         a5:b2:38:cd:27:b5:41:0b:c4:9e:7f:70:21:eb:5a:d5:89:29:
         c7:f5:6d:aa:bf:88:5d:6e:17:1d:87:ed:5d:25:89:1f:e4:f7:
         42:39:d1:e2:fb:83:a7:2c:bb:8e:1f:bb:d3:80:bb:c4:2c:c7:
         04:6a:b2:5f:4e:36:4c:29:41:5c:ed:09:a2:e3:d0:40:be:d6:
         dd:46:92:39:b6:4d:a8:3e:6a:d6:95:34:97:d9:f0:2a:cc:34:
         b2:ed:c7:80:70:40:16:17:08:fa:a4:fd:52:ce:c7:6b:c9:ee:
         bf:89:f8:bf:b7:ad:40:c8:a8:51:9a:0a:66:7d:81:32:c4:9a:
         41:ce:b6:04:c9:bf:ae:19:13:6b:54:83:80:02:24:10:38:af:
         ff:85:96:18:df:4d:a7:18:e6:8d:63:98:08:69:20:89:a0:98:
         d6:09:a7:c0:24:c4:e8:46:c9:3e:a9:ad:ba:bd:0b:94:57:22:
         ed:09:a7:e9:0f:ac:7f:36:93:51:90:d8:26:06:f9:51:68:cc:
         b3:f4:96:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:51:39 2025 by rpki-client