Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203134303830.roa
File:                     3137302e3233382e36342e302f32332d3233203d3e203134303830.roa (raw, json)
Hash identifier:          NNV3IKYhVYI0X2GnMI9eGPgCJiMXockUGU/atLXXF6g=
Subject key identifier:   53:C5:83:17:C5:34:52:AD:70:7B:C6:86:03:C2:6E:2C:04:BF:BF:70
Certificate issuer:       /CN=CC121F7A2F5847D63452275EE667C5A03D867975
Certificate serial:       62D4CBB78F957FF36729DB701FB55A109CC54312
Authority key identifier: CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203134303830.roa
Signing time:             Fri 11 Jul 2025 20:20:00 +0000
ROA not before:           Fri 11 Jul 2025 20:15:00 +0000
ROA not after:            Fri 10 Jul 2026 20:20:00 +0000
asID:                     14080
IP address blocks:        170.238.64.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 24 Jul 2025 03:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d4:cb:b7:8f:95:7f:f3:67:29:db:70:1f:b5:5a:10:9c:c5:43:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CC121F7A2F5847D63452275EE667C5A03D867975
        Validity
            Not Before: Jul 11 20:15:00 2025 GMT
            Not After : Jul 10 20:20:00 2026 GMT
        Subject: CN=53C58317C53452AD707BC68603C26E2C04BFBF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:ce:9a:9f:1a:94:51:61:f7:6b:e4:d8:45:
                    b5:ed:8b:5c:75:92:e6:a0:13:2d:88:84:cf:17:b5:
                    e1:a0:cc:08:00:6c:0c:bc:2c:84:10:94:95:13:c9:
                    5c:cd:f0:2d:65:71:32:6a:9f:54:77:80:b0:03:45:
                    3a:c3:7a:10:6c:f1:0e:ac:ec:78:9b:2a:05:eb:bd:
                    62:ef:5f:2f:b1:f1:b2:74:34:92:b3:43:80:38:4c:
                    d2:8b:59:01:6e:25:a4:35:3b:85:68:e6:0d:63:ee:
                    94:a0:c8:ef:3f:1f:31:8f:c5:11:a2:bf:54:1b:aa:
                    1b:96:f1:1f:98:56:15:21:37:64:1b:4c:c8:dc:94:
                    da:0f:03:5e:cc:d5:e7:ff:59:ad:43:b2:de:14:d3:
                    b0:a0:5f:c5:55:33:b3:c2:c2:2b:5c:fc:76:9a:f3:
                    b3:b8:36:4f:a7:4c:d5:30:22:6f:f7:ac:53:35:c6:
                    8d:6c:12:d7:23:d3:62:ab:9a:7d:e5:10:6d:3a:16:
                    f0:b5:2f:9a:75:3a:af:22:a6:f8:33:d5:78:d4:8b:
                    0f:33:2c:3f:f4:10:b8:60:a9:d1:9d:ca:bc:67:6c:
                    a9:92:ef:78:08:db:8b:cb:ac:f3:d9:fb:34:c1:89:
                    26:ef:11:22:72:a3:b5:52:9e:dd:9b:58:16:8b:ae:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C5:83:17:C5:34:52:AD:70:7B:C6:86:03:C2:6E:2C:04:BF:BF:70
            X509v3 Authority Key Identifier:
                keyid:CC:12:1F:7A:2F:58:47:D6:34:52:27:5E:E6:67:C5:A0:3D:86:79:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/CC121F7A2F5847D63452275EE667C5A03D867975.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC121F7A2F5847D63452275EE667C5A03D867975.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DBFA546559EED721228136CCC045DF7B5CEF9846B4845F524250BB65E772EED/0/3137302e3233382e36342e302f32332d3233203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:bb:70:b5:4c:b7:86:29:41:29:04:a3:11:b1:2b:28:62:
         6f:d4:45:09:f8:d6:d8:b1:30:d9:2a:c3:74:31:fe:d0:4f:02:
         f7:c6:49:50:35:73:51:c4:75:bd:dd:1c:38:64:6e:8f:d0:3b:
         30:03:10:7a:02:ca:fa:76:bf:ab:82:fe:13:04:5d:24:92:5f:
         b0:51:07:a8:b9:f7:a7:53:d8:bf:f2:51:2e:1b:ed:51:fe:ce:
         94:f1:de:fd:58:70:a4:cb:c9:0e:3c:96:15:96:64:a1:74:27:
         e7:4c:aa:75:4c:04:cf:ea:06:07:9f:85:72:3b:da:be:b3:42:
         51:94:b5:36:b9:36:3f:7e:28:b8:d9:80:74:c0:7e:89:07:8e:
         2e:05:db:1d:28:48:b6:40:b9:d0:3a:cf:c7:be:7a:fc:80:9e:
         a9:aa:36:cc:87:1d:a0:a8:04:e1:f4:63:9d:16:c5:95:0a:6a:
         ae:8d:74:bb:c9:1f:37:d4:1a:96:02:22:91:2b:cb:6c:0d:ac:
         72:da:67:c4:83:04:ac:8d:99:26:47:35:a9:19:f3:70:13:86:
         05:ba:dc:d4:84:3c:3a:45:ac:50:a5:11:eb:15:6b:e8:a4:c7:
         c1:52:e6:e6:88:c4:69:f1:00:26:e6:70:86:99:eb:f2:42:34:
         96:61:b6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 23:13:24 2025 by rpki-client