Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3136382e3232372e3134342e302f32322d3234203d3e20323632393334.roa
File:                     3136382e3232372e3134342e302f32322d3234203d3e20323632393334.roa (raw, json)
Hash identifier:          l3vbR5Jh5ZWQGA7lOTNqrBu/R5oq0hZtf/2nEM2nQNE=
Subject key identifier:   A7:F6:74:52:D8:A4:33:5A:99:88:B9:B6:6D:A8:44:2F:D6:5D:DB:EA
Certificate issuer:       /CN=071E98A75F67AF0AC72FFE00A1889291589B7570
Certificate serial:       2F30BDCB1064D66C164A1A5416C3D7E699D2BAC9
Authority key identifier: 07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3136382e3232372e3134342e302f32322d3234203d3e20323632393334.roa
Signing time:             Tue 04 Feb 2025 19:56:45 +0000
ROA not before:           Tue 04 Feb 2025 19:51:45 +0000
ROA not after:            Tue 03 Feb 2026 19:56:45 +0000
asID:                     262934
IP address blocks:        168.227.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 00:28:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:30:bd:cb:10:64:d6:6c:16:4a:1a:54:16:c3:d7:e6:99:d2:ba:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=071E98A75F67AF0AC72FFE00A1889291589B7570
        Validity
            Not Before: Feb  4 19:51:45 2025 GMT
            Not After : Feb  3 19:56:45 2026 GMT
        Subject: CN=A7F67452D8A4335A9988B9B66DA8442FD65DDBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:21:ff:83:82:d5:1a:fa:a0:61:64:aa:70:cd:
                    57:e1:32:1b:7b:93:30:96:45:9e:b0:33:f3:89:bb:
                    bb:fa:12:bd:31:19:d7:9a:58:11:18:24:a3:67:ac:
                    66:10:3e:01:38:68:da:9e:de:2c:8f:98:1d:45:df:
                    39:98:7d:48:74:d4:75:e6:de:37:7c:b0:70:9f:1f:
                    47:42:13:a9:91:26:fe:30:4e:bc:ab:b1:96:02:54:
                    7a:6e:21:a7:dc:7f:1f:56:50:e6:70:81:72:c1:db:
                    a9:7f:92:bf:ea:51:2a:b4:cc:83:1d:77:99:c8:f6:
                    b6:f0:d0:b7:b1:6f:dd:0d:0b:65:ce:55:c6:2c:4d:
                    b1:e9:dd:5d:47:4c:e1:1d:26:80:52:ea:83:d5:95:
                    3b:d3:7c:78:21:cf:ca:5d:6c:d0:b9:da:02:42:66:
                    81:99:d1:29:3d:f3:11:0a:f4:62:32:99:c5:e1:77:
                    ed:bd:c1:51:10:bd:7d:3d:3e:5e:15:c0:3a:45:e4:
                    e7:05:f9:93:5c:ef:6d:0a:d3:ea:60:c1:98:15:7a:
                    af:06:aa:79:c5:c8:7d:ec:09:63:75:7c:01:6c:d0:
                    77:41:b5:5f:4c:c9:f8:05:a5:10:de:36:6c:60:c0:
                    a5:f2:9a:8f:61:19:fc:88:27:89:64:1f:01:0c:78:
                    86:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F6:74:52:D8:A4:33:5A:99:88:B9:B6:6D:A8:44:2F:D6:5D:DB:EA
            X509v3 Authority Key Identifier:
                keyid:07:1E:98:A7:5F:67:AF:0A:C7:2F:FE:00:A1:88:92:91:58:9B:75:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/071E98A75F67AF0AC72FFE00A1889291589B7570.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/071E98A75F67AF0AC72FFE00A1889291589B7570.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7A766FF12D0C92E188AA0B69DAD75FE237A2DF1FB8B07E502027AA4923DB20/0/3136382e3232372e3134342e302f32322d3234203d3e20323632393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:fb:01:a7:91:13:0e:49:27:00:65:4c:a6:ba:40:1b:f9:
         80:26:5e:2a:ab:8f:a1:29:33:47:26:2b:b6:06:a9:56:67:92:
         4d:f2:85:45:2c:c7:15:b3:b1:a7:d4:0e:0d:d0:3c:36:a9:c7:
         2b:5c:2d:25:53:ac:ef:90:04:e4:8a:92:8a:eb:52:58:c2:77:
         d3:5a:16:a6:14:1b:44:29:89:8d:0d:ea:70:3c:2c:74:ba:1b:
         d7:cd:96:87:d9:59:05:ef:e4:b2:f8:a9:f6:f7:50:54:4f:65:
         ff:bf:38:86:b2:ee:28:46:d6:97:6f:81:e1:70:81:8b:45:80:
         1e:ab:0f:0d:84:98:0d:46:7c:b3:cf:79:64:de:57:05:f8:ba:
         88:a1:38:88:a1:70:1b:e1:6b:92:d7:0e:4f:06:2d:c3:0b:4c:
         f3:67:c4:53:b6:9f:0e:fa:07:1b:bf:ee:e0:97:bb:23:69:db:
         98:5e:f6:26:f0:88:ba:2a:7f:17:7b:0f:25:b8:ea:e8:69:ae:
         c4:03:03:07:cb:29:cf:d1:4a:84:97:7e:6b:e1:6d:ab:fe:86:
         57:24:b0:e8:24:cb:1f:bb:c9:59:9d:cf:4f:58:99:7d:70:91:
         5a:8c:36:1f:2f:a0:44:bd:e8:88:b7:57:38:98:e2:2a:59:ac:
         83:ab:21:12
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIULzC9yxBk1mwWShpUFsPX5pnSuskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDcxRTk4QTc1RjY3QUYwQUM3MkZGRTAwQTE4ODkyOTE1
ODlCNzU3MDAeFw0yNTAyMDQxOTUxNDVaFw0yNjAyMDMxOTU2NDVaMDMxMTAvBgNV
BAMTKEE3RjY3NDUyRDhBNDMzNUE5OTg4QjlCNjZEQTg0NDJGRDY1RERCRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVIf+DgtUa+qBhZKpwzVfhMht7
kzCWRZ6wM/OJu7v6Er0xGdeaWBEYJKNnrGYQPgE4aNqe3iyPmB1F3zmYfUh01HXm
3jd8sHCfH0dCE6mRJv4wTryrsZYCVHpuIafcfx9WUOZwgXLB26l/kr/qUSq0zIMd
d5nI9rbw0Lexb90NC2XOVcYsTbHp3V1HTOEdJoBS6oPVlTvTfHghz8pdbNC52gJC
ZoGZ0Sk98xEK9GIymcXhd+29wVEQvX09Pl4VwDpF5OcF+ZNc720K0+pgwZgVeq8G
qnnFyH3sCWN1fAFs0HdBtV9MyfgFpRDeNmxgwKXymo9hGfyIJ4lkHwEMeIZhAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUp/Z0UtikM1qZiLm2bahEL9Zd2+owHwYDVR0j
BBgwFoAUBx6Yp19nrwrHL/4AoYiSkVibdXAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zQTdBNzY2RkYxMkQwQzkyRTE4OEFBMEI2OURBRDc1RkUy
MzdBMkRGMUZCOEIwN0U1MDIwMjdBQTQ5MjNEQjIwLzAvMDcxRTk4QTc1RjY3QUYw
QUM3MkZGRTAwQTE4ODkyOTE1ODlCNzU3MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzFFOThBNzVGNjdBRjBBQzcy
RkZFMDBBMTg4OTI5MTU4OUI3NTcwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvM0E3QTc2NkZGMTJEMEM5MkUxODhBQTBCNjlEQUQ3NUZFMjM3QTJERjFG
QjhCMDdFNTAyMDI3QUE0OTIzREIyMC8wLzMxMzYzODJlMzIzMjM3MmUzMTM0MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzOTMzMzQucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKo
45AwDQYJKoZIhvcNAQELBQADggEBAJjh+wGnkRMOSScAZUymukAb+YAmXiqrj6Ep
M0cmK7YGqVZnkk3yhUUsxxWzsafUDg3QPDapxytcLSVTrO+QBOSKkorrUljCd9Na
FqYUG0QpiY0N6nA8LHS6G9fNlofZWQXv5LL4qfb3UFRPZf+/OIay7ihG1pdvgeFw
gYtFgB6rDw2EmA1GfLPPeWTeVwX4uoihOIihcBvha5LXDk8GLcMLTPNnxFO2nw76
Bxu/7uCXuyNp25he9ibwiLoqfxd7DyW46uhprsQDAwfLKc/RSoSXfmvhbav+hlck
sOgkyx+7yVmdz09YmX1wkVqMNh8voES96Ii3VziY4ipZrIOrIRI=
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:47:20 2025 by rpki-client