Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
File:                     3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa (raw, json)
Hash identifier:          5nyDh5+zTeD81neiAZFiXeSMSzI+W7EBpFJAXivlosI=
Subject key identifier:   32:F3:0E:79:AA:79:87:56:73:A2:EF:97:C2:F3:25:60:E3:B0:43:83
Certificate issuer:       /CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
Certificate serial:       029A18CE6A75CC9A34D496C4458670C22A2C08CD
Authority key identifier: 64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
Signing time:             Tue 04 Feb 2025 20:00:31 +0000
ROA not before:           Tue 04 Feb 2025 19:55:31 +0000
ROA not after:            Tue 03 Feb 2026 20:00:31 +0000
asID:                     265633
IP address blocks:        170.244.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 12:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9a:18:ce:6a:75:cc:9a:34:d4:96:c4:45:86:70:c2:2a:2c:08:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
        Validity
            Not Before: Feb  4 19:55:31 2025 GMT
            Not After : Feb  3 20:00:31 2026 GMT
        Subject: CN=32F30E79AA79875673A2EF97C2F32560E3B04383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9c:4a:a6:65:f3:aa:2f:2e:43:d0:ed:ce:38:
                    a1:1d:49:47:7e:ba:01:b1:ab:90:5a:b5:10:86:b0:
                    07:38:94:d1:59:f7:ba:c4:2c:2e:1e:98:a0:eb:07:
                    e0:4f:07:7b:bb:84:3c:8d:b4:9b:0f:2b:24:f2:f8:
                    35:56:e3:3b:16:c4:f0:a3:c5:e3:d7:a4:8d:e6:46:
                    66:a5:80:ba:f4:77:10:03:8a:e8:42:80:c5:f0:05:
                    21:0e:28:70:62:c7:24:ab:f0:9e:b1:6c:5b:cd:03:
                    87:f2:1c:6b:81:fe:e8:6d:f6:36:ba:43:f3:b8:4f:
                    2e:90:d1:65:d6:d4:88:6e:ac:85:f5:ca:7e:04:d0:
                    55:79:78:ac:74:4e:3e:c9:82:10:68:b0:32:54:f0:
                    e6:61:c7:48:8f:6a:ee:d2:1d:b6:6b:4d:9c:f2:52:
                    db:7f:0d:c5:24:d1:ea:74:b4:1d:6a:bd:cd:9d:de:
                    8e:59:1e:40:0d:1f:20:e7:d5:09:84:9d:27:e3:6f:
                    38:e3:04:38:f9:f3:b0:da:54:02:08:98:e7:74:21:
                    11:5b:b6:f2:e0:58:0a:bd:70:f8:40:18:e8:50:30:
                    b8:39:ff:9c:51:f9:de:36:0c:4c:04:9c:2e:fa:f5:
                    56:4b:e8:fa:9a:12:7b:6e:46:21:26:80:d2:4d:28:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F3:0E:79:AA:79:87:56:73:A2:EF:97:C2:F3:25:60:E3:B0:43:83
            X509v3 Authority Key Identifier:
                keyid:64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:d0:11:3e:87:65:60:8b:e9:30:bc:6a:63:ac:ae:ae:e4:48:
         11:be:7d:9d:16:35:ec:7a:5a:40:24:94:6a:2b:8a:37:d2:64:
         95:f5:b1:8f:99:60:a3:d6:a2:55:8f:cd:bc:16:b0:44:8b:18:
         37:63:c7:ad:2e:d4:49:e6:36:40:00:ea:a0:58:b6:c5:2a:e8:
         68:c9:bd:e8:b7:56:6e:ea:0c:18:cf:a4:7f:24:74:87:28:3c:
         43:e4:b7:9e:f8:90:72:b5:d8:57:ee:d3:2b:49:98:63:69:89:
         bc:49:1f:6f:ed:b2:a9:4c:03:7e:2a:aa:0f:84:06:11:02:93:
         34:75:e1:38:8c:bb:d0:a1:55:57:85:c8:0b:f7:ce:fe:a2:c9:
         45:f0:72:3b:db:cf:33:d5:00:72:46:e5:41:b0:43:87:a4:96:
         bd:76:60:4e:ea:49:b4:2d:98:23:a5:d3:b9:91:7c:ea:9e:5f:
         67:09:93:4f:15:f6:dc:a0:be:c7:6b:16:e4:ce:6e:b7:fa:e6:
         38:8e:da:32:a5:1c:43:01:01:48:8d:ce:5a:17:03:54:8f:3b:
         d3:7d:9a:3e:3c:e8:3a:f8:cc:57:d9:3f:a6:5c:fc:5c:e0:b8:
         ee:27:69:a8:a8:aa:cf:43:cc:b9:b2:c9:04:ff:f1:b9:b5:08:
         17:10:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:15 2025 by rpki-client