Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa
File:                     3136382e39302e38342e302f32322d3234203d3e203237393834.roa (raw, json)
Hash identifier:          M6BcEFMRglqcOhKGhFzAFwFmtfBnG6UUTfaUKWTmrOQ=
Subject key identifier:   D9:9D:39:09:E2:53:C0:61:48:97:53:D8:C2:4C:C6:80:46:F2:58:DB
Certificate issuer:       /CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
Certificate serial:       141BC80E29EA7BCE5878768BE82BDBD057EB9C3A
Authority key identifier: 62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa
Signing time:             Tue 04 Feb 2025 18:04:56 +0000
ROA not before:           Tue 04 Feb 2025 17:59:56 +0000
ROA not after:            Tue 03 Feb 2026 18:04:56 +0000
asID:                     27984
IP address blocks:        168.90.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:1b:c8:0e:29:ea:7b:ce:58:78:76:8b:e8:2b:db:d0:57:eb:9c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62C9B2701C4466FB48976AE4EEBB9C1FA017AD95
        Validity
            Not Before: Feb  4 17:59:56 2025 GMT
            Not After : Feb  3 18:04:56 2026 GMT
        Subject: CN=D99D3909E253C061489753D8C24CC68046F258DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e6:8a:90:27:3e:0c:75:2c:38:9e:b0:2e:80:
                    35:e7:ac:5e:95:90:45:e2:8a:57:bc:0d:bc:8e:63:
                    5c:60:48:5c:61:c1:af:e2:bb:a2:f5:f5:b6:18:36:
                    e4:c3:54:4c:d8:77:92:ac:d8:e8:80:30:2e:2d:9d:
                    95:a5:61:41:41:5c:ab:fd:63:6a:56:d9:f3:ca:8c:
                    9d:b2:b3:b1:bb:cf:7d:44:49:9e:a2:67:b1:0f:a2:
                    a5:5e:2b:ce:52:c6:3d:59:a3:c1:47:93:af:3e:8d:
                    8e:c7:14:59:f5:7e:92:65:36:c1:7d:75:60:43:c8:
                    7a:32:45:af:39:d0:f6:2a:01:a1:91:e1:7e:01:87:
                    6a:5f:92:45:23:92:fa:7e:65:8d:0e:6e:75:23:ce:
                    61:ad:8e:28:d5:8e:0f:97:ca:15:cc:d7:95:a7:a8:
                    30:20:75:a4:63:e5:e1:e2:34:83:64:9e:80:c1:72:
                    a8:a4:a2:2d:8c:53:1c:86:a4:73:15:9b:85:51:72:
                    9f:18:f6:a7:09:28:14:c1:30:45:ee:b1:c5:2f:06:
                    cf:7e:84:47:f3:b6:db:ce:d1:6a:a8:6d:1a:e5:55:
                    c6:9b:28:48:a3:d7:3f:27:70:6d:ec:5b:8b:6e:7b:
                    37:f1:51:52:82:ff:8e:f0:ad:72:76:8a:86:4d:02:
                    5a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9D:39:09:E2:53:C0:61:48:97:53:D8:C2:4C:C6:80:46:F2:58:DB
            X509v3 Authority Key Identifier:
                keyid:62:C9:B2:70:1C:44:66:FB:48:97:6A:E4:EE:BB:9C:1F:A0:17:AD:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/62C9B2701C4466FB48976AE4EEBB9C1FA017AD95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7297D1B8724AAD0F2069E41F46F17F5FFAAE8C28862149A67AABFE3C01C62615/0/3136382e39302e38342e302f32322d3234203d3e203237393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:79:b2:0d:7b:eb:41:12:ae:9f:de:66:f4:03:2d:48:78:72:
         bd:17:a2:46:15:95:7e:af:40:7c:8b:7a:0c:7d:58:43:08:0a:
         1a:d6:95:dc:61:9c:34:74:93:62:45:dc:2f:f3:b7:80:08:a4:
         e2:b5:e1:32:2d:ee:57:cc:4e:70:46:8e:00:de:b4:c3:d1:2a:
         fd:d9:b9:bf:23:94:1a:63:53:f9:18:98:c3:81:c0:09:89:8b:
         c3:ce:2b:ff:98:7d:ef:0a:72:4c:f0:87:1d:b8:be:dc:d4:6a:
         49:23:fe:96:fc:e4:0f:be:df:c6:03:65:20:70:8c:58:84:67:
         e3:2b:e9:8e:c6:d3:f8:ab:d1:83:d9:10:c9:ac:38:bf:c0:56:
         77:d7:95:3d:65:4d:7e:85:fa:85:59:1f:84:e5:54:21:5f:80:
         0c:d8:2f:19:e4:d0:e0:18:11:da:87:6c:cc:05:f9:23:29:f3:
         36:2a:96:b9:3f:54:45:a3:ba:9c:47:97:ed:07:c6:d1:d8:a8:
         0a:29:b1:f4:af:6e:49:cd:6d:d3:49:7a:36:14:8b:44:ba:02:
         b7:69:ee:e8:ac:69:c4:c5:ee:33:4e:d3:d4:1c:5a:f7:e1:19:
         f8:d2:59:d0:77:76:5f:20:60:dc:6d:32:4e:5b:2f:36:34:b0:
         71:e2:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:56:10 2025 by rpki-client