Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137302e3234342e34302e302f32322d3234203d3e203532343731.roa
File:                     3137302e3234342e34302e302f32322d3234203d3e203532343731.roa (raw, json)
Hash identifier:          UDAyeKjjTovBZ+uqjAqQyHyAef9YpVXHrVlHbfefoYk=
Subject key identifier:   41:50:37:44:00:B0:11:70:6B:DD:29:59:5E:CE:52:11:0E:E2:01:AB
Certificate issuer:       /CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
Certificate serial:       3E2C527CFB78D3CAC92C5774DA707C88057C5CF2
Authority key identifier: 5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137302e3234342e34302e302f32322d3234203d3e203532343731.roa
Signing time:             Tue 04 Feb 2025 18:17:08 +0000
ROA not before:           Tue 04 Feb 2025 18:12:08 +0000
ROA not after:            Tue 03 Feb 2026 18:17:08 +0000
asID:                     52471
IP address blocks:        170.244.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2c:52:7c:fb:78:d3:ca:c9:2c:57:74:da:70:7c:88:05:7c:5c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B9D96661EC85627A1F4994E893F26FFC408AFAC
        Validity
            Not Before: Feb  4 18:12:08 2025 GMT
            Not After : Feb  3 18:17:08 2026 GMT
        Subject: CN=4150374400B011706BDD29595ECE52110EE201AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e4:18:85:8b:81:36:10:18:ee:63:54:75:28:
                    c1:e8:e5:ba:d4:08:73:7e:52:e6:dd:dc:07:90:da:
                    b0:35:4e:d5:cf:34:34:eb:7d:0c:4d:f2:55:99:6b:
                    90:80:6c:cc:08:87:56:de:8f:dd:87:c0:18:81:08:
                    2d:c0:6d:aa:f4:1a:ca:98:73:19:e4:2c:59:c7:e6:
                    ab:1e:ed:92:45:ee:8c:ed:65:a4:94:08:58:16:24:
                    d4:da:b1:92:65:36:a4:59:ac:83:24:9f:84:47:f1:
                    81:67:c1:b9:33:a8:64:9a:70:21:48:6c:46:13:58:
                    2a:88:cc:9c:8f:55:fd:c4:e9:26:53:d4:48:7d:01:
                    74:48:87:fa:91:57:8a:6b:45:2a:69:8b:60:b7:0d:
                    6a:27:e8:39:25:8f:8c:e6:59:db:aa:38:89:d6:df:
                    b9:f5:70:16:c3:b3:f4:fa:fd:c6:6e:ee:11:db:e7:
                    54:d8:f6:14:a1:8e:02:6e:ed:08:e7:d2:e6:e6:6c:
                    23:56:21:a9:75:9b:b5:6e:95:d7:e1:8a:9c:25:e2:
                    88:8f:d7:34:36:08:6a:58:bc:5b:48:0f:d0:92:11:
                    d2:20:76:83:0b:85:05:cd:8d:97:2e:62:d0:e0:2b:
                    95:73:79:0f:43:b4:fd:66:d7:75:fa:3b:00:ca:7c:
                    a9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:50:37:44:00:B0:11:70:6B:DD:29:59:5E:CE:52:11:0E:E2:01:AB
            X509v3 Authority Key Identifier:
                keyid:5B:9D:96:66:1E:C8:56:27:A1:F4:99:4E:89:3F:26:FF:C4:08:AF:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B9D96661EC85627A1F4994E893F26FFC408AFAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75031FAC76914352C9528030F983F07816964B22F6D6496B30CBB4E63690F869/0/3137302e3234342e34302e302f32322d3234203d3e203532343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:37:6a:d2:3c:45:31:88:a0:d6:05:95:cb:db:dd:58:ee:86:
         9b:d0:bb:ab:fe:ad:65:6d:8a:bf:cc:a9:07:f5:f9:7e:ba:9d:
         ca:70:1b:60:6e:b1:67:f1:b7:f2:33:b5:b3:15:f8:bb:6f:33:
         4a:8b:5a:06:5c:7d:aa:39:0e:6e:16:a1:40:58:99:09:14:87:
         c1:87:96:85:a5:f6:2a:cd:d2:e0:6e:7a:ac:1e:30:1d:b2:f6:
         a6:4f:ba:3d:35:e0:ff:a0:46:18:48:01:91:7e:9e:87:23:b3:
         cc:c6:9f:5d:77:3a:e5:5f:23:29:6d:90:c2:3f:00:c1:f2:ca:
         d7:eb:17:e8:28:94:ac:0a:ed:5c:01:8c:4d:ca:d3:9e:02:c6:
         20:9e:94:21:10:85:39:a6:66:36:cf:27:d0:94:a5:81:1e:99:
         a0:e3:55:49:53:93:44:ee:39:2e:ac:96:9f:0e:88:71:31:a4:
         b5:92:1d:35:c6:48:8d:2f:48:44:cf:01:66:86:62:b8:91:af:
         5a:32:46:53:ed:77:51:68:ca:df:1a:fb:de:f2:51:05:9e:52:
         e2:26:84:ea:8d:2f:f6:df:5b:b8:c9:5c:4e:33:b1:dc:00:38:
         4b:62:72:ab:34:88:42:60:4f:73:64:92:2f:b6:8d:46:58:14:
         39:4c:78:80
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPixSfPt408rJLFd02nB8iAV8XPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUI5RDk2NjYxRUM4NTYyN0ExRjQ5OTRFODkzRjI2RkZD
NDA4QUZBQzAeFw0yNTAyMDQxODEyMDhaFw0yNjAyMDMxODE3MDhaMDMxMTAvBgNV
BAMTKDQxNTAzNzQ0MDBCMDExNzA2QkREMjk1OTVFQ0U1MjExMEVFMjAxQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+5BiFi4E2EBjuY1R1KMHo5brU
CHN+Uubd3AeQ2rA1TtXPNDTrfQxN8lWZa5CAbMwIh1bej92HwBiBCC3Abar0GsqY
cxnkLFnH5qse7ZJF7oztZaSUCFgWJNTasZJlNqRZrIMkn4RH8YFnwbkzqGSacCFI
bEYTWCqIzJyPVf3E6SZT1Eh9AXRIh/qRV4prRSppi2C3DWon6Dklj4zmWduqOInW
37n1cBbDs/T6/cZu7hHb51TY9hShjgJu7Qjn0ubmbCNWIal1m7Vuldfhipwl4oiP
1zQ2CGpYvFtID9CSEdIgdoMLhQXNjZcuYtDgK5VzeQ9DtP1m13X6OwDKfKkrAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQVA3RACwEXBr3SlZXs5SEQ7iAaswHwYDVR0j
BBgwFoAUW52WZh7IVieh9JlOiT8m/8QIr6wwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NTAzMUZBQzc2OTE0MzUyQzk1MjgwMzBGOTgzRjA3ODE2
OTY0QjIyRjZENjQ5NkIzMENCQjRFNjM2OTBGODY5LzAvNUI5RDk2NjYxRUM4NTYy
N0ExRjQ5OTRFODkzRjI2RkZDNDA4QUZBQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QjlEOTY2NjFFQzg1NjI3QTFG
NDk5NEU4OTNGMjZGRkM0MDhBRkFDLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzUwMzFGQUM3NjkxNDM1MkM5NTI4MDMwRjk4M0YwNzgxNjk2NEIyMkY2
RDY0OTZCMzBDQkI0RTYzNjkwRjg2OS8wLzMxMzczMDJlMzIzNDM0MmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMjM0MzczMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqr0KDAN
BgkqhkiG9w0BAQsFAAOCAQEAXDdq0jxFMYig1gWVy9vdWO6Gm9C7q/6tZW2Kv8yp
B/X5frqdynAbYG6xZ/G38jO1sxX4u28zSotaBlx9qjkObhahQFiZCRSHwYeWhaX2
Ks3S4G56rB4wHbL2pk+6PTXg/6BGGEgBkX6ehyOzzMafXXc65V8jKW2Qwj8AwfLK
1+sX6CiUrArtXAGMTcrTngLGIJ6UIRCFOaZmNs8n0JSlgR6ZoONVSVOTRO45LqyW
nw6IcTGktZIdNcZIjS9IRM8BZoZiuJGvWjJGU+13UWjK3xr73vJRBZ5S4iaE6o0v
9t9buMlcTjOx3AA4S2JyqzSIQmBPc2SSL7aNRlgUOUx4gA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:03 2025 by rpki-client