Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa
File:                     3137302e302e38352e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          lr3IwDDSeLIiWB9mPUZITEsFKuviRZ4D0vV5EPg3048=
Subject key identifier:   48:61:0D:38:87:AB:5A:06:13:B2:E9:FF:E6:80:90:F4:7F:D7:21:4A
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       71952A146977825E6E152A9DDEABAAFF3354CA91
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa
Signing time:             Tue 04 Feb 2025 18:12:35 +0000
ROA not before:           Tue 04 Feb 2025 18:07:35 +0000
ROA not after:            Tue 03 Feb 2026 18:12:35 +0000
asID:                     264702
IP address blocks:        170.0.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:59:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:95:2a:14:69:77:82:5e:6e:15:2a:9d:de:ab:aa:ff:33:54:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Feb  4 18:07:35 2025 GMT
            Not After : Feb  3 18:12:35 2026 GMT
        Subject: CN=48610D3887AB5A0613B2E9FFE68090F47FD7214A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:98:e5:08:67:02:a4:db:71:29:a5:bc:ec:da:
                    29:e1:fc:49:fc:67:74:d6:97:65:f4:a4:5a:c9:fe:
                    1b:ff:c7:cb:10:61:04:a9:3c:2b:ea:b8:72:ee:0a:
                    1d:03:dd:83:1a:2e:c4:61:57:04:d4:76:37:6a:d9:
                    68:a0:77:f5:2b:5d:c8:37:bb:93:5e:75:29:cc:b2:
                    83:b6:73:63:2f:aa:0e:f9:6f:f4:fd:4d:67:11:92:
                    32:8f:f4:f4:0d:5c:44:45:7a:f5:6e:88:21:13:c4:
                    52:98:d4:30:9d:d7:e1:5f:87:ba:4c:16:3c:ed:e3:
                    ee:be:59:66:ae:88:9b:fd:0d:35:0f:00:59:42:84:
                    f3:61:cb:f2:6a:2d:8f:ad:00:dd:8f:7b:58:7c:d8:
                    cd:2d:65:ae:34:1e:eb:52:71:b5:b0:20:f0:97:fd:
                    fc:82:14:da:57:11:81:27:71:12:5c:44:53:14:6a:
                    da:de:15:61:3b:ba:38:15:77:db:ed:e3:a0:a3:06:
                    d6:78:a6:12:dd:f6:3f:b2:a7:21:bf:6f:61:db:d4:
                    e2:2f:15:07:6b:46:6a:8a:93:a2:58:32:d6:67:c7:
                    4b:77:a4:43:c1:fb:64:b4:55:44:ed:3f:0d:2d:92:
                    aa:e2:7a:aa:c9:4c:18:ea:f2:a9:f3:61:53:b1:ca:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:61:0D:38:87:AB:5A:06:13:B2:E9:FF:E6:80:90:F4:7F:D7:21:4A
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:56:ea:01:2e:8f:44:18:51:d8:2e:77:66:4d:f9:dd:c2:ea:
         04:77:21:82:a7:c6:11:12:c5:ce:44:c6:f1:4d:8d:35:80:64:
         0e:8e:c7:4a:5d:ff:bc:4e:55:44:42:76:82:42:cc:63:26:75:
         43:b9:b7:f5:81:95:e3:b9:46:8a:b7:a1:09:ff:b3:f6:b2:1d:
         cc:80:2c:6a:da:4e:0d:18:85:92:26:8e:1b:88:f2:e7:19:1f:
         51:55:a9:d0:3a:3d:05:99:9e:59:27:22:2b:d5:d8:30:26:ba:
         54:2e:6a:38:03:71:a4:36:31:29:ac:c4:f3:28:21:58:09:44:
         ca:8a:f9:72:00:e5:36:c1:b8:fe:e0:e9:05:57:2c:d4:82:06:
         f5:d8:34:ca:4f:f1:14:d5:ca:7c:64:e6:fe:80:e4:52:a9:53:
         41:67:ea:34:02:a2:3e:1f:68:c4:4f:c6:9b:60:58:33:fa:f8:
         29:81:7a:c9:a0:99:38:d2:45:27:94:ce:12:09:00:31:fd:ed:
         88:13:7d:f4:4f:82:67:c8:26:68:b8:91:4e:dc:bb:f4:9a:aa:
         b2:3e:42:8c:13:6f:aa:e6:c8:a2:66:05:03:07:f0:0b:c9:3e:
         1d:56:b7:67:40:d4:7c:20:53:fb:17:d3:6d:6f:0a:c5:7f:71:
         16:99:86:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:30:51 2025 by rpki-client