Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/3139322e3233312e3132302e302f32332d3233203d3e20323633373138.roa
File:                     3139322e3233312e3132302e302f32332d3233203d3e20323633373138.roa (raw, json)
Hash identifier:          DiWlFy1/vsP65vX9LzQIGScJUWfNILyPNYxglKte4OU=
Subject key identifier:   F3:84:EC:A8:2E:B1:AA:F2:E4:15:6B:8E:EF:AA:C6:F2:B5:CF:5A:F3
Certificate issuer:       /CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
Certificate serial:       726B6FE25AEFFE43074EF9DFE5CD04C68AC3F736
Authority key identifier: 74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/3139322e3233312e3132302e302f32332d3233203d3e20323633373138.roa
Signing time:             Tue 04 Feb 2025 20:06:19 +0000
ROA not before:           Tue 04 Feb 2025 20:01:19 +0000
ROA not after:            Tue 03 Feb 2026 20:06:19 +0000
asID:                     263718
IP address blocks:        192.231.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:6b:6f:e2:5a:ef:fe:43:07:4e:f9:df:e5:cd:04:c6:8a:c3:f7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74A6C6DAF3A2921015035571DAA0FE9317086F2A
        Validity
            Not Before: Feb  4 20:01:19 2025 GMT
            Not After : Feb  3 20:06:19 2026 GMT
        Subject: CN=F384ECA82EB1AAF2E4156B8EEFAAC6F2B5CF5AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:74:05:43:35:40:bb:17:00:79:1c:d7:2b:6b:
                    07:a9:93:6a:2a:4b:4e:00:df:6d:67:96:b8:1d:2b:
                    2a:da:f0:1c:6d:97:bb:af:de:2f:b4:5e:fb:fd:e4:
                    cc:e6:2f:b0:d7:06:ce:cc:3c:76:48:10:27:a7:41:
                    2a:9d:f7:0f:1b:06:d3:3e:36:98:57:a6:f2:0f:79:
                    50:0c:22:45:95:91:16:37:bb:35:43:d0:43:d9:e2:
                    a8:3a:a6:8e:19:50:19:3e:73:78:51:1c:97:a8:2c:
                    36:c0:e6:47:45:b4:1f:ff:a4:f3:db:46:0b:69:20:
                    74:bb:51:d9:0c:84:c6:cd:d4:cd:30:e8:f3:2c:77:
                    f2:1d:ed:3c:c8:4e:fe:11:ad:94:50:6a:07:8c:9e:
                    38:24:7f:3d:18:52:69:fd:5d:f6:5e:4e:04:e0:21:
                    aa:23:28:7a:16:98:f6:1f:84:a1:8d:45:e4:ee:8c:
                    87:37:66:0f:18:b8:75:61:02:3b:9c:c6:55:7c:bf:
                    47:c1:5b:58:5b:28:31:62:4a:87:4c:05:6c:58:68:
                    ad:80:53:f3:77:a4:8f:85:00:3f:ec:a2:ed:fe:c2:
                    a6:ba:91:1b:b8:30:32:da:96:97:03:10:ce:2f:cd:
                    e1:5d:22:5c:ad:c3:43:a7:b1:50:a9:7f:bd:43:4a:
                    57:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:84:EC:A8:2E:B1:AA:F2:E4:15:6B:8E:EF:AA:C6:F2:B5:CF:5A:F3
            X509v3 Authority Key Identifier:
                keyid:74:A6:C6:DA:F3:A2:92:10:15:03:55:71:DA:A0:FE:93:17:08:6F:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/74A6C6DAF3A2921015035571DAA0FE9317086F2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/223BFAFC2FA8134604556AE745EB5778F03F66599A0A28E194300C86D8387315/0/3139322e3233312e3132302e302f32332d3233203d3e20323633373138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:73:42:24:4a:c2:dc:d5:7b:cf:b7:6c:2e:5d:c2:65:70:
         85:e9:9e:be:22:12:bc:03:f9:4f:84:f5:25:e9:64:7d:40:4e:
         83:31:bc:ad:02:40:32:7b:41:67:71:30:38:b2:fc:c2:64:a0:
         00:bd:65:19:b1:82:91:ce:ae:8a:85:39:1b:c4:3b:70:e3:20:
         92:dd:74:84:fc:a7:4e:9a:9e:98:21:fe:ff:09:6d:6d:f4:09:
         ba:12:d1:8e:2c:3a:ca:f4:01:04:e2:27:72:66:87:c2:bb:df:
         b3:0e:56:d5:e8:90:93:fb:e1:47:6e:60:e3:21:f3:d2:2b:db:
         19:7d:d6:01:a6:d4:cb:b2:fb:56:e0:ee:4d:0f:15:2d:43:93:
         57:37:fc:bd:41:f2:6d:19:6a:fe:42:4c:4b:70:a1:dd:34:ff:
         2c:90:88:f3:20:78:82:e9:f4:7b:c1:47:f5:29:15:86:05:19:
         f9:d2:bf:ea:22:f8:c9:53:3a:28:4c:fd:86:53:87:d5:a3:f8:
         6e:7f:e5:ae:c6:22:9e:2f:18:7a:3a:2f:be:eb:93:dc:56:de:
         97:bc:3c:19:96:13:d0:7f:16:67:34:4f:36:1d:4d:e0:d0:d3:
         14:b5:6d:93:5e:3d:a0:27:48:9c:20:74:04:30:1e:10:9d:ec:
         3b:fc:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:43:31 2025 by rpki-client