Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
File:                     3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa (raw, json)
Hash identifier:          LZY68oCAHuwSnaStdKw/sEyA2E1WtRa/Hw0iV5pA4jU=
Subject key identifier:   1B:0A:40:88:35:BF:9A:58:C9:A4:2F:AC:AC:2C:41:94:65:4D:D1:11
Certificate issuer:       /CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
Certificate serial:       10731ABC78340949FBF3FC4F7E9227FBD6C34438
Authority key identifier: 00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
Signing time:             Tue 04 Feb 2025 18:26:22 +0000
ROA not before:           Tue 04 Feb 2025 18:21:22 +0000
ROA not after:            Tue 03 Feb 2026 18:26:22 +0000
asID:                     265694
IP address blocks:        170.78.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:1a:bc:78:34:09:49:fb:f3:fc:4f:7e:92:27:fb:d6:c3:44:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
        Validity
            Not Before: Feb  4 18:21:22 2025 GMT
            Not After : Feb  3 18:26:22 2026 GMT
        Subject: CN=1B0A408835BF9A58C9A42FACAC2C4194654DD111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9c:11:ed:9d:9d:fb:23:80:76:33:1a:7d:b0:
                    aa:94:90:e0:03:a9:b8:e2:26:40:b2:fa:48:8c:c5:
                    af:c4:3b:8c:73:b5:34:77:01:24:01:ea:db:cf:a4:
                    26:ce:e5:8d:5a:d4:f0:76:55:4a:20:d4:5e:22:5c:
                    96:53:a9:08:20:5b:88:ca:16:b4:76:ea:98:35:95:
                    ae:58:18:de:20:30:28:02:fc:8f:60:32:a7:0d:73:
                    b6:97:39:8b:ff:d7:ca:0b:cf:f4:94:50:80:8b:6c:
                    ff:75:b3:a6:36:d1:5a:c9:f8:37:13:5e:1e:33:1d:
                    08:6c:3b:e9:e6:ea:6d:6c:b7:0e:e5:e2:82:f2:a0:
                    56:5e:85:c0:e8:08:2b:51:57:a0:e9:8e:48:07:f3:
                    59:d1:b0:2d:3a:b8:47:6f:22:b4:f6:24:cd:9f:75:
                    59:72:15:51:89:24:92:72:ec:ce:2b:53:3a:26:cb:
                    69:c9:f2:e3:46:c0:ea:61:d3:a1:3c:f4:3f:e2:91:
                    37:28:c3:5d:20:6a:ab:9b:c1:a2:cc:18:3b:2f:a1:
                    ff:20:fe:30:b1:28:a1:1f:a5:b5:c0:17:2b:ee:40:
                    49:4d:ea:18:f0:58:2d:40:6c:e2:b4:27:2b:ac:2c:
                    ac:f4:d4:3e:23:35:0f:92:02:85:31:58:2f:9f:19:
                    92:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0A:40:88:35:BF:9A:58:C9:A4:2F:AC:AC:2C:41:94:65:4D:D1:11
            X509v3 Authority Key Identifier:
                keyid:00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:1f:2a:a3:d1:8a:39:4a:a5:cc:f0:8c:ed:0f:3a:6c:71:70:
         5b:e6:7c:d2:7d:22:ba:2e:1a:0d:58:d8:0e:22:83:ca:7c:88:
         ad:43:6d:23:dc:17:cf:3b:05:cb:6c:93:36:eb:b6:45:b1:42:
         c8:3a:f3:79:81:de:0c:e8:91:64:ec:f1:b1:95:24:2e:6e:77:
         24:1b:4c:b5:e6:31:cd:54:92:60:22:cf:3a:ce:e8:c3:3c:c2:
         b0:7a:36:72:88:ce:1d:1a:cc:e3:9d:f5:ed:33:27:2c:1c:4d:
         6b:df:20:c4:dc:ed:69:ff:59:28:7c:1c:d6:cd:ec:f1:e5:5c:
         86:48:e6:9e:64:f2:c6:66:e8:1e:8a:8f:f4:d9:2d:5c:4f:34:
         f8:b5:9e:96:7c:26:0a:c2:45:bb:c9:a9:2d:02:57:49:24:22:
         da:9e:88:32:75:f7:42:fe:ec:c0:1f:1e:f0:e2:59:ed:15:60:
         56:19:32:bd:f1:b9:d5:71:59:76:7a:e9:7f:6c:40:2c:fe:90:
         60:ac:7d:28:6e:1c:06:e7:3d:20:19:40:c3:6c:b1:0a:f5:98:
         12:fb:f0:b2:bf:3b:1c:c8:3c:71:97:36:63:87:25:ed:76:00:
         be:1e:f1:43:72:77:90:07:c6:06:03:39:a9:e1:a6:43:fe:50:
         e7:4d:67:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:50:40 2025 by rpki-client