Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa
File:                     3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa (raw, json)
Hash identifier:          LiTcj5ec/EV5EyncbYLba5A90FMxeigIh1oBweOG2iE=
Subject key identifier:   94:B1:FF:CA:EA:FD:AE:FF:F8:37:AC:96:98:35:AF:17:2C:6F:AC:61
Certificate issuer:       /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial:       330639B5D1BF74EEB9C9449B91AD9E828883FA9E
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa
Signing time:             Tue 04 Feb 2025 18:52:22 +0000
ROA not before:           Tue 04 Feb 2025 18:47:22 +0000
ROA not after:            Tue 03 Feb 2026 18:52:22 +0000
asID:                     265750
IP address blocks:        170.150.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:06:39:b5:d1:bf:74:ee:b9:c9:44:9b:91:ad:9e:82:88:83:fa:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
        Validity
            Not Before: Feb  4 18:47:22 2025 GMT
            Not After : Feb  3 18:52:22 2026 GMT
        Subject: CN=94B1FFCAEAFDAEFFF837AC969835AF172C6FAC61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:40:c6:16:56:34:f2:ee:1d:c8:b8:eb:1b:
                    40:5f:ea:40:0f:9c:69:fc:9d:ec:b6:39:a7:b6:82:
                    51:23:25:28:61:33:4f:36:95:6a:d9:02:e8:24:d9:
                    f5:d5:40:be:92:85:75:f9:76:d5:ec:c7:a5:b1:2f:
                    96:24:c0:7d:f0:3a:15:77:47:a8:19:e5:5f:17:a9:
                    74:ba:3f:00:14:bf:91:92:09:cf:27:9d:cf:7c:71:
                    bd:36:f5:1a:b6:bc:28:ea:5d:af:e9:5c:92:32:d8:
                    e9:3f:da:c0:e2:ee:d6:3f:d6:e8:eb:bf:73:b3:48:
                    e3:1a:33:1e:5f:c5:70:48:62:38:87:a9:c6:dd:17:
                    9e:d0:1c:7e:44:eb:c4:e5:c1:72:a5:4b:a1:e8:80:
                    ea:46:27:a2:20:ad:3a:2c:2d:69:bb:c8:d6:ed:d8:
                    19:fe:4e:9c:8c:cb:81:9e:09:2b:cc:dc:19:e9:b5:
                    2d:5b:f6:69:69:8a:f6:ed:8f:77:c4:ce:48:c9:1d:
                    ab:fe:84:a9:52:61:32:a8:2b:0c:07:37:48:1e:f0:
                    f1:2c:20:53:4a:07:8b:fa:08:3d:32:64:33:fb:72:
                    c8:8c:16:ea:12:80:1b:c8:5f:44:63:a6:49:a3:6b:
                    ac:84:4e:ef:7f:80:52:0b:10:04:61:e0:a7:8e:d4:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B1:FF:CA:EA:FD:AE:FF:F8:37:AC:96:98:35:AF:17:2C:6F:AC:61
            X509v3 Authority Key Identifier:
                keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:97:f1:08:78:8a:88:d0:57:72:71:25:61:94:80:62:09:17:
         c8:4f:81:be:b6:71:1f:96:38:bb:a5:66:b8:c9:f6:42:d2:78:
         ff:09:6e:05:6f:e1:1b:c4:ff:c0:e4:1e:d7:78:1d:48:35:ac:
         87:f5:06:75:e0:1c:39:c0:7b:3b:e7:9e:04:e9:61:c4:87:41:
         18:7e:e3:f3:38:62:f7:41:9a:68:b3:d7:dd:b5:03:1a:f1:70:
         b0:73:3f:a7:36:0e:96:08:74:7e:82:5d:6d:f5:32:cd:ab:88:
         4a:4c:f3:fb:39:b6:b9:a5:42:2e:69:22:d3:5c:02:4b:46:1f:
         99:64:34:88:27:2f:db:d1:67:29:d4:c8:0d:bd:f2:c0:57:44:
         2e:5d:c4:df:9e:1a:1b:01:c1:42:0d:6b:b5:db:ce:14:7a:6b:
         80:28:b1:5f:86:01:8e:58:a8:f0:32:2b:d0:e0:d7:89:d4:b8:
         73:b0:b7:20:d8:f5:9a:31:89:67:b7:da:e3:32:74:c4:22:34:
         44:70:b7:1f:6c:f9:c3:0a:a1:f5:db:3c:77:52:de:36:ff:9f:
         50:a1:2e:2b:68:3c:94:f4:36:bf:a4:91:16:e5:b5:b7:d3:cd:
         27:1d:d5:e9:fd:7e:c3:f1:43:c9:c4:a8:12:09:ca:9f:06:64:
         f5:cc:e2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:23:20 2025 by rpki-client