Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133322e302f32342d3234203d3e20323730303936.roa
File:                     3137302e3234352e3133322e302f32342d3234203d3e20323730303936.roa (raw, json)
Hash identifier:          /qDA9vSqu+/xeXz6EGZznUqfzTalMWQ/2Q+Cv7CQmkk=
Subject key identifier:   92:A1:37:36:0E:F0:D7:6C:50:D8:51:9B:9D:CC:6E:CB:5B:36:1C:BB
Certificate issuer:       /CN=7C73575E363469E69249C4583641D2A482F859B2
Certificate serial:       259A70E28A2A56F84691E90838542527376D1732
Authority key identifier: 7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133322e302f32342d3234203d3e20323730303936.roa
Signing time:             Tue 04 Feb 2025 17:59:25 +0000
ROA not before:           Tue 04 Feb 2025 17:54:25 +0000
ROA not after:            Tue 03 Feb 2026 17:59:25 +0000
asID:                     270096
IP address blocks:        170.245.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:70:e2:8a:2a:56:f8:46:91:e9:08:38:54:25:27:37:6d:17:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C73575E363469E69249C4583641D2A482F859B2
        Validity
            Not Before: Feb  4 17:54:25 2025 GMT
            Not After : Feb  3 17:59:25 2026 GMT
        Subject: CN=92A137360EF0D76C50D8519B9DCC6ECB5B361CBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a2:c2:16:4e:43:98:73:a6:59:46:17:47:e1:
                    ba:df:9b:b1:0b:4b:f9:a0:ac:72:b8:29:9f:e9:18:
                    3b:1d:9f:02:ee:fe:57:77:b6:9f:91:46:6e:04:e5:
                    01:85:05:ca:e1:4e:d6:8f:98:49:66:f8:e9:89:b2:
                    51:36:64:a1:ab:bc:5f:47:d7:47:a9:97:8b:d4:a6:
                    49:8c:01:7f:04:a7:0d:72:e9:a0:82:60:90:37:4e:
                    f0:89:b8:d7:e9:8b:77:cf:5c:b6:fa:76:52:13:64:
                    57:f3:7a:8c:63:de:4a:92:23:de:1f:11:7f:de:df:
                    43:8e:ae:84:7c:c4:38:42:97:7a:ba:ea:29:71:c7:
                    9a:9c:a9:6c:c3:21:e1:f5:20:5d:de:a2:a4:59:3b:
                    e6:69:3c:6e:4e:43:8f:ff:8c:5d:b5:40:05:d3:19:
                    be:8b:58:6a:73:2d:14:24:c6:26:ca:be:61:9a:87:
                    58:4e:53:02:1b:a7:ce:e6:cc:02:8b:dc:24:80:0b:
                    52:d6:7c:e9:af:b7:29:07:26:eb:31:a4:1d:d9:03:
                    5b:e8:30:3c:d9:48:2c:5d:1e:b1:32:61:03:20:29:
                    4f:8f:1c:67:58:f2:ed:a2:f3:25:22:07:82:31:76:
                    cd:6c:74:18:d4:56:f3:96:de:50:b4:72:c6:42:0b:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:37:36:0E:F0:D7:6C:50:D8:51:9B:9D:CC:6E:CB:5B:36:1C:BB
            X509v3 Authority Key Identifier:
                keyid:7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133322e302f32342d3234203d3e20323730303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:cd:98:30:de:79:9e:7b:1f:61:83:65:af:ef:d2:c6:98:
         73:5a:4c:51:70:9b:31:30:b9:5e:a9:7e:1d:ae:ec:85:78:b1:
         c5:ed:d3:c8:aa:53:a9:4b:2b:d5:ba:18:4b:52:42:10:d6:d7:
         48:03:1a:63:f0:a4:46:dd:c7:07:d6:e6:68:47:9c:ac:fa:c4:
         cc:e5:95:43:41:e4:31:94:c3:63:b6:0b:29:bd:4b:0f:9f:dd:
         78:50:80:e0:6b:e4:24:ee:96:6c:fa:d9:d6:04:e9:61:f6:44:
         13:60:81:61:5f:dc:ce:2c:35:70:1a:31:0b:c9:1c:e1:1f:f2:
         6a:3d:ac:64:71:7e:18:74:29:44:7c:3c:aa:62:b0:c7:a3:d9:
         b2:17:ff:63:b4:f8:fd:c2:d1:0e:c9:c1:ed:fd:a2:c4:fa:7a:
         4e:c5:0f:15:10:e7:9d:a9:0e:43:43:72:0e:eb:34:2a:57:d2:
         dd:23:8e:b9:52:cc:50:de:b7:7f:35:85:71:91:88:14:23:b2:
         6c:61:f4:5f:fc:ec:9c:50:92:51:a1:9f:b7:b8:f8:47:90:b2:
         75:15:3f:11:02:86:a8:52:a1:38:f8:14:85:5d:bc:4f:3b:ea:
         b8:64:16:03:8c:18:78:f0:03:c4:5b:87:5e:7a:32:40:7c:3b:
         7b:ed:d1:79
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJZpw4ooqVvhGkekIOFQlJzdtFzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0M3MzU3NUUzNjM0NjlFNjkyNDlDNDU4MzY0MUQyQTQ4
MkY4NTlCMjAeFw0yNTAyMDQxNzU0MjVaFw0yNjAyMDMxNzU5MjVaMDMxMTAvBgNV
BAMTKDkyQTEzNzM2MEVGMEQ3NkM1MEQ4NTE5QjlEQ0M2RUNCNUIzNjFDQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbosIWTkOYc6ZZRhdH4brfm7EL
S/mgrHK4KZ/pGDsdnwLu/ld3tp+RRm4E5QGFBcrhTtaPmElm+OmJslE2ZKGrvF9H
10epl4vUpkmMAX8Epw1y6aCCYJA3TvCJuNfpi3fPXLb6dlITZFfzeoxj3kqSI94f
EX/e30OOroR8xDhCl3q66ilxx5qcqWzDIeH1IF3eoqRZO+ZpPG5OQ4//jF21QAXT
Gb6LWGpzLRQkxibKvmGah1hOUwIbp87mzAKL3CSAC1LWfOmvtykHJusxpB3ZA1vo
MDzZSCxdHrEyYQMgKU+PHGdY8u2i8yUiB4Ixds1sdBjUVvOW3lC0csZCC08bAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUkqE3Ng7w12xQ2FGbncxuy1s2HLswHwYDVR0j
BBgwFoAUfHNXXjY0aeaSScRYNkHSpIL4WbIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yMkVCNERFQTc4RDE4NkJCMUVFMDc1RkM2NDVCMjU2NkI2
QzQzOEVFMEZFRjUzRUFGQjhDNURDRjA1QTU3RjdDLzAvN0M3MzU3NUUzNjM0NjlF
NjkyNDlDNDU4MzY0MUQyQTQ4MkY4NTlCMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83QzczNTc1RTM2MzQ2OUU2OTI0
OUM0NTgzNjQxRDJBNDgyRjg1OUIyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjJFQjRERUE3OEQxODZCQjFFRTA3NUZDNjQ1QjI1NjZCNkM0MzhFRTBG
RUY1M0VBRkI4QzVEQ0YwNUE1N0Y3Qy8wLzMxMzczMDJlMzIzNDM1MmUzMTMzMzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3MzAzMDM5MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
9YQwDQYJKoZIhvcNAQELBQADggEBAAyMzZgw3nmeex9hg2Wv79LGmHNaTFFwmzEw
uV6pfh2u7IV4scXt08iqU6lLK9W6GEtSQhDW10gDGmPwpEbdxwfW5mhHnKz6xMzl
lUNB5DGUw2O2Cym9Sw+f3XhQgOBr5CTulmz62dYE6WH2RBNggWFf3M4sNXAaMQvJ
HOEf8mo9rGRxfhh0KUR8PKpisMej2bIX/2O0+P3C0Q7Jwe39osT6ek7FDxUQ552p
DkNDcg7rNCpX0t0jjrlSzFDet381hXGRiBQjsmxh9F/87JxQklGhn7e4+EeQsnUV
PxEChqhSoTj4FIVdvE876rhkFgOMGHjwA8Rbh156MkB8O3vt0Xk=
-----END CERTIFICATE-----
Generated at Fri Apr 18 21:08:04 2025 by rpki-client