Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/3137372e35332e3132302e302f32322d3234203d3e20323639393934.roa
File:                     3137372e35332e3132302e302f32322d3234203d3e20323639393934.roa (raw, json)
Hash identifier:          Tpd7Yj/MoIaT31dxKIPm6ooentAF+5onluTmkYMtpDU=
Subject key identifier:   4A:B7:E5:A3:50:C4:6F:07:59:E0:D2:B2:21:69:D9:14:24:61:59:0A
Certificate issuer:       /CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
Certificate serial:       45797DD606D31F4A98A7C20A8F9C895BED987929
Authority key identifier: 65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/3137372e35332e3132302e302f32322d3234203d3e20323639393934.roa
Signing time:             Tue 04 Feb 2025 20:04:00 +0000
ROA not before:           Tue 04 Feb 2025 19:59:00 +0000
ROA not after:            Tue 03 Feb 2026 20:04:00 +0000
asID:                     269994
IP address blocks:        177.53.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 18:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:79:7d:d6:06:d3:1f:4a:98:a7:c2:0a:8f:9c:89:5b:ed:98:79:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65FF24D1AA8C1A14AB3F092654C6028160015B97
        Validity
            Not Before: Feb  4 19:59:00 2025 GMT
            Not After : Feb  3 20:04:00 2026 GMT
        Subject: CN=4AB7E5A350C46F0759E0D2B22169D9142461590A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:2a:cd:c1:f7:21:ba:fe:3d:bd:9c:e8:d2:
                    6e:17:93:41:b1:00:b4:53:0f:02:16:e4:ca:d9:ca:
                    5d:1f:23:81:0a:70:44:30:7e:72:19:7f:55:f6:da:
                    61:3f:55:4b:04:87:76:0b:ea:99:d8:5e:0b:6b:b9:
                    3a:ed:67:4f:4e:18:3b:e9:5d:01:28:e6:23:40:b2:
                    d2:d8:9e:2a:70:11:e9:f5:ab:1e:d9:ad:a8:97:52:
                    60:71:72:12:52:9e:90:d4:73:ab:b2:b5:91:63:a6:
                    4b:66:a9:66:89:79:06:8e:f9:cc:64:5c:70:cd:47:
                    d5:b1:ae:fc:c5:d8:49:ab:80:18:34:90:09:89:c5:
                    da:b7:c8:54:e1:9e:dd:78:0b:7e:8c:ad:14:5a:a3:
                    c9:17:6f:23:25:73:ac:e0:d5:6d:04:87:15:66:66:
                    6f:31:4b:f0:7b:e5:87:13:ca:9d:de:0e:d7:7e:fa:
                    74:1b:b0:79:ad:fd:57:a4:cf:89:25:e7:90:db:72:
                    64:40:e3:dc:28:92:14:c0:12:e4:ac:92:f7:43:07:
                    e9:fe:77:5c:0b:f3:c5:38:32:8e:47:ed:1c:cf:bd:
                    59:cd:56:91:ac:f7:cb:d0:85:50:7e:b7:d3:37:52:
                    49:aa:25:16:c1:f8:38:04:cb:b4:bb:0f:40:2c:93:
                    8c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B7:E5:A3:50:C4:6F:07:59:E0:D2:B2:21:69:D9:14:24:61:59:0A
            X509v3 Authority Key Identifier:
                keyid:65:FF:24:D1:AA:8C:1A:14:AB:3F:09:26:54:C6:02:81:60:01:5B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65FF24D1AA8C1A14AB3F092654C6028160015B97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63FB05488E65B64DD77B4299EC8FF041037DE882C46BA5A1F7037B5CB26A75FF/0/3137372e35332e3132302e302f32322d3234203d3e20323639393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:98:1f:4d:97:05:b7:c2:e1:ab:e6:87:ab:e0:93:b2:0e:46:
         78:b4:23:ef:40:60:9b:c8:64:84:56:82:61:ea:b0:0e:b8:82:
         12:ba:42:ad:d6:35:31:45:57:a1:d9:ca:80:e6:22:ce:a9:25:
         cc:34:0f:f4:67:89:f2:77:82:21:9d:d0:04:40:cf:07:d2:74:
         e1:e0:6e:0b:89:ee:39:f8:45:b0:c1:85:61:db:0c:05:a6:db:
         72:57:f3:e8:74:42:5b:df:82:19:76:ef:c7:94:da:67:64:9a:
         35:6d:c7:7f:74:43:70:b5:75:84:39:ff:34:80:dc:34:8e:ba:
         a0:f5:30:dc:31:19:a2:d3:b7:24:ab:55:c5:4e:c6:8e:fc:11:
         eb:62:51:e0:18:1c:39:de:d4:de:b2:bf:5a:53:73:85:47:eb:
         9a:59:29:2e:9b:70:6c:da:11:c3:17:02:97:ec:64:41:89:f5:
         ef:11:d4:5b:4a:a1:f0:5e:d8:3b:95:d4:3d:a5:69:a3:17:e0:
         5e:97:6d:aa:cc:e3:6d:3d:fb:a7:64:86:7a:b4:a0:69:d2:d0:
         3b:47:91:0a:e9:11:82:2e:1b:e5:29:98:1e:9b:fa:c0:64:f5:
         71:3a:3e:e0:69:39:08:09:4e:03:15:b4:c6:4f:65:c3:73:7d:
         13:24:13:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:29:09 2025 by rpki-client