Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa
File:                     3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa (raw, json)
Hash identifier:          1BC5Qw2uRlp1biaX3ABPCxupf+cOyt7hUmv1XxTQ1jY=
Subject key identifier:   3B:BD:E7:A0:1E:C3:0D:3B:FF:FF:5A:05:85:88:F3:39:75:78:75:D5
Certificate issuer:       /CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
Certificate serial:       7D0F9F52C5B44C7315147573F528083DEF38ED4D
Authority key identifier: 24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa
Signing time:             Tue 04 Feb 2025 20:07:29 +0000
ROA not before:           Tue 04 Feb 2025 20:02:29 +0000
ROA not after:            Tue 03 Feb 2026 20:07:29 +0000
asID:                     263735
IP address blocks:        168.227.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:0f:9f:52:c5:b4:4c:73:15:14:75:73:f5:28:08:3d:ef:38:ed:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2457663DFAA2799A1AD03DC43FCAF8D319422BD5
        Validity
            Not Before: Feb  4 20:02:29 2025 GMT
            Not After : Feb  3 20:07:29 2026 GMT
        Subject: CN=3BBDE7A01EC30D3BFFFF5A058588F339757875D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:26:2f:99:9c:ed:1a:06:e4:e4:b5:ae:60:
                    89:87:ad:de:16:aa:d6:b6:24:c5:88:18:64:a4:78:
                    f1:bf:f2:1c:2e:6e:aa:f3:ab:be:38:df:d1:bf:2d:
                    3b:84:f0:b5:81:31:55:d1:f7:2d:55:d7:fe:e4:0e:
                    fd:95:52:88:47:5f:58:72:f0:18:48:da:17:4e:f0:
                    0d:ba:7c:8e:e5:c0:e5:3f:e6:d4:4e:35:b1:dd:dc:
                    cf:08:2b:52:3f:3f:79:87:a9:de:69:1d:2f:23:b2:
                    fa:cf:a3:5b:fc:15:f3:d6:07:ff:95:d1:08:f0:6e:
                    26:a5:27:7a:88:5d:57:0b:0c:00:c3:95:e0:ed:f1:
                    f0:16:db:8c:79:6d:c7:2d:ed:f6:d0:55:fd:59:95:
                    f6:b0:1f:74:3a:86:64:b5:0f:61:e2:d8:e9:4d:0a:
                    13:44:8c:ac:8f:9b:0a:88:d9:e3:8e:c4:00:04:e7:
                    ac:af:8b:e6:0a:77:33:08:62:80:0f:84:21:6f:6a:
                    8c:11:79:d6:e3:29:26:3d:ad:f3:f1:dc:c0:cf:eb:
                    f8:a4:e3:77:35:7e:83:bf:86:31:a1:f4:5c:3d:3d:
                    f7:b1:60:d4:3b:b5:d6:e7:6c:92:87:78:3d:dc:9e:
                    f6:13:c7:e3:65:51:72:0b:ed:85:20:89:c8:fe:68:
                    27:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BD:E7:A0:1E:C3:0D:3B:FF:FF:5A:05:85:88:F3:39:75:78:75:D5
            X509v3 Authority Key Identifier:
                keyid:24:57:66:3D:FA:A2:79:9A:1A:D0:3D:C4:3F:CA:F8:D3:19:42:2B:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2457663DFAA2799A1AD03DC43FCAF8D319422BD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5B938E0A55766E180F3875CA3B727D1C561C4F24EED17CC25FF9EB0ABD1B16F0/0/3136382e3232372e3134302e302f32322d3232203d3e20323633373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:8b:72:7a:b9:00:e6:8b:d9:df:c1:72:26:b3:6a:fe:77:9f:
         dc:ae:00:a6:13:34:48:ef:a7:44:ea:f1:10:16:be:4d:ff:71:
         12:52:44:a1:6f:be:e8:72:be:ff:38:fd:a4:78:43:53:4e:76:
         c1:06:aa:8f:50:d1:f6:6e:c3:f3:1c:70:27:8d:f6:d6:c4:d3:
         91:2b:ea:f6:08:82:c3:6e:71:07:df:18:30:b3:ad:78:77:48:
         c2:8e:27:49:67:09:54:79:e5:21:3a:af:6d:96:d4:37:f3:d5:
         02:42:1e:92:13:aa:ab:aa:8e:4b:ef:09:6b:1d:da:02:c5:99:
         19:ef:ac:54:63:c0:8a:b5:63:19:2e:92:06:0a:9a:20:a4:37:
         28:e4:ac:35:33:82:a4:c0:e0:ba:67:a2:20:3f:9b:db:ca:90:
         e1:d9:11:3e:00:f4:27:b1:88:94:37:f0:e0:6c:a7:f1:41:05:
         2e:00:10:68:1d:3f:15:b0:ed:ac:f6:59:a2:15:d0:86:3a:62:
         5f:d7:a6:b5:46:89:6a:74:3d:bb:8e:69:86:40:ae:08:79:d8:
         54:49:67:87:d0:6c:d5:bd:21:2a:c2:37:4d:c0:c0:33:36:93:
         51:13:bf:44:0f:b5:dd:c9:f3:f0:f7:61:5f:4d:34:08:ce:a9:
         8c:6a:02:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:23:45 2025 by rpki-client