Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
File:                     3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          GQwEoC9mpIyjhVuKR/Ep3uXBKnMJR0GPimt/gIwE69E=
Subject key identifier:   1F:2B:E4:2F:BD:B3:0A:F9:CA:E7:E9:EE:DD:44:96:D2:2F:4A:46:28
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       0A5B2E41704D505A402DB3C07835D52BC4ABEBFE
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 04 Feb 2025 17:58:50 +0000
ROA not before:           Tue 04 Feb 2025 17:53:50 +0000
ROA not after:            Tue 03 Feb 2026 17:58:50 +0000
asID:                     262159
IP address blocks:        170.239.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5b:2e:41:70:4d:50:5a:40:2d:b3:c0:78:35:d5:2b:c4:ab:eb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Feb  4 17:53:50 2025 GMT
            Not After : Feb  3 17:58:50 2026 GMT
        Subject: CN=1F2BE42FBDB30AF9CAE7E9EEDD4496D22F4A4628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:df:26:0f:ca:24:f4:12:8d:df:5d:25:30:4c:
                    6b:55:6f:67:fe:04:c3:70:71:7b:6d:5c:1f:65:c2:
                    c1:5b:4d:48:cb:27:7a:5e:49:24:df:7f:10:74:e4:
                    bd:6e:9a:1c:d5:11:c1:3b:6d:78:f1:d2:13:b1:d2:
                    95:27:86:7c:a1:0e:7d:44:7b:3c:05:b5:0f:a5:58:
                    cf:6a:9d:48:6d:d0:28:a1:d0:51:51:ef:a5:91:b2:
                    28:5f:4a:48:ba:e5:ce:e2:02:4a:02:b1:f3:c0:c3:
                    2e:dd:ab:ae:1d:4e:09:22:06:ab:e5:ff:9b:d5:98:
                    a6:2f:7f:f8:93:47:60:53:d6:e1:f3:b8:36:3f:8c:
                    f7:07:d2:2f:98:32:a7:2c:c8:c8:ca:9b:18:e0:c9:
                    a0:28:df:78:e0:c9:1c:5d:e4:a7:92:7e:fe:f0:9d:
                    37:12:fa:64:d7:a7:e2:23:02:0c:25:f3:3f:44:2c:
                    90:60:17:84:60:f3:7d:a6:e2:5d:cb:53:50:bd:47:
                    19:a2:b6:f3:8e:3d:b5:e3:ba:d3:44:43:8e:a2:e6:
                    3f:49:35:39:b7:49:0b:b4:dd:e6:cc:11:4c:31:36:
                    4b:0e:ec:d8:81:64:1c:2c:1e:a3:25:9f:ed:cf:a1:
                    98:4d:0d:f7:bb:dc:25:f0:5c:73:b2:23:9a:3a:94:
                    eb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2B:E4:2F:BD:B3:0A:F9:CA:E7:E9:EE:DD:44:96:D2:2F:4A:46:28
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:d2:ba:69:82:ef:f7:10:b8:5d:d3:e7:f7:f9:21:89:64:c0:
         30:a9:4b:ee:0f:c2:32:79:79:4f:a5:d2:0a:06:e3:26:d9:4e:
         b5:b9:86:26:a3:12:2e:cf:28:0c:01:60:ef:d2:d9:53:0a:8c:
         b1:7f:89:bd:72:9a:56:95:db:e6:b9:8c:5a:57:8a:f9:9b:31:
         58:66:d0:12:92:f4:cd:ac:b7:fd:9b:4a:1f:f6:92:d9:07:5d:
         46:44:e4:f8:a6:19:a7:cb:05:c8:d8:04:5c:4f:2e:52:c7:14:
         17:cb:24:77:5a:78:2f:29:55:6a:a6:a4:20:dd:36:e8:cb:fb:
         25:ef:81:79:1b:21:89:0b:10:01:29:4e:f8:67:25:77:ff:e6:
         a5:0b:0c:31:29:c6:f0:11:d6:67:fe:4e:7b:8c:9e:17:a4:e3:
         82:84:09:5e:fb:a6:e4:04:4a:c0:67:b3:59:31:06:bf:0e:10:
         9c:74:72:69:ad:a0:f6:f8:43:11:31:5c:ff:4a:19:3b:54:00:
         08:d3:66:aa:82:ec:99:e4:a0:4a:3c:b7:46:fd:95:79:2b:e8:
         e9:80:9b:52:1f:b8:6b:ca:3e:77:7a:80:b6:e7:dd:74:95:97:
         59:7a:4d:89:a5:50:bf:b9:fe:d5:59:b4:28:f2:10:14:61:2e:
         df:e7:2f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:32:49 2025 by rpki-client