Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e20323635363839.roa
File:                     3136302e3233382e3230342e302f32322d3234203d3e20323635363839.roa (raw, json)
Hash identifier:          Hp5RwIxGIZtptud5C8v8hTCxIfxP5sehlfUm4n2+PwY=
Subject key identifier:   15:F7:81:37:46:5C:F4:EC:01:E8:A2:A8:B1:EF:B4:65:72:9C:9D:68
Certificate issuer:       /CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
Certificate serial:       0E1E98AA1E251BB502EEE5DFF21778DD8BCC0CD2
Authority key identifier: 66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e20323635363839.roa
Signing time:             Tue 04 Feb 2025 18:10:37 +0000
ROA not before:           Tue 04 Feb 2025 18:05:37 +0000
ROA not after:            Tue 03 Feb 2026 18:10:37 +0000
asID:                     265689
IP address blocks:        160.238.204.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:55:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:1e:98:aa:1e:25:1b:b5:02:ee:e5:df:f2:17:78:dd:8b:cc:0c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66D7CB6044C192E36153B39F7AF75BC83FF1DCB6
        Validity
            Not Before: Feb  4 18:05:37 2025 GMT
            Not After : Feb  3 18:10:37 2026 GMT
        Subject: CN=15F78137465CF4EC01E8A2A8B1EFB465729C9D68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a8:e8:20:8d:8b:4a:be:6c:6b:f3:58:e4:5f:
                    4d:f1:4b:94:95:b5:f6:03:71:69:f3:ff:44:9c:c5:
                    62:10:24:e8:83:50:f9:45:39:f9:5b:70:0b:3e:45:
                    61:e1:65:27:45:f8:dc:bb:92:cc:16:81:6c:b7:ae:
                    98:b2:f9:39:07:9c:8f:bb:c2:36:54:09:49:aa:9d:
                    40:ca:34:07:61:40:a7:1e:5c:3c:1f:f7:29:34:8d:
                    80:01:36:52:4d:eb:be:0b:1e:ba:b3:17:5d:92:b1:
                    c8:f2:3e:b6:0e:09:fe:59:a6:d3:8c:9b:35:ce:be:
                    fa:0b:6b:aa:d2:cc:79:6d:bc:e1:1b:73:e7:8a:e3:
                    e4:3a:b1:e8:50:68:5b:68:96:e5:da:2f:c8:c8:77:
                    51:ea:a1:63:19:b4:66:0c:53:7f:81:3a:f7:f6:84:
                    da:3d:ff:32:09:a1:45:77:af:d0:4d:89:53:27:83:
                    35:8c:62:e7:24:d8:9a:46:4a:9d:2c:a3:ef:1a:4e:
                    65:d8:0c:81:35:d8:a2:6e:ee:59:1d:ca:60:67:cb:
                    2a:fd:0b:7c:c3:1c:8a:60:ee:6e:e4:57:fa:06:f5:
                    42:3e:92:12:a5:54:61:ad:80:30:59:c5:0a:98:ba:
                    f1:5f:e3:fb:4f:83:55:94:97:d6:f2:f6:54:bb:60:
                    ea:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F7:81:37:46:5C:F4:EC:01:E8:A2:A8:B1:EF:B4:65:72:9C:9D:68
            X509v3 Authority Key Identifier:
                keyid:66:D7:CB:60:44:C1:92:E3:61:53:B3:9F:7A:F7:5B:C8:3F:F1:DC:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/66D7CB6044C192E36153B39F7AF75BC83FF1DCB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7974DF2B4FA6EB74EEC85173F0BA46BD3C1FFD6F1C6F593B41350EA7A5565E78/0/3136302e3233382e3230342e302f32322d3234203d3e20323635363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:9a:a5:16:66:bd:a1:0d:fe:37:60:03:51:10:63:d2:68:ce:
         ae:a3:37:e6:75:23:6c:36:93:78:ca:69:db:78:ec:95:9e:85:
         4d:ae:ad:ed:fc:d0:41:d6:dc:2b:74:d9:aa:3a:48:c0:4c:91:
         8f:b8:c7:3e:65:47:8f:de:4c:2b:ce:a9:0c:cd:43:c8:78:49:
         fe:d9:89:09:e6:b4:e1:42:64:b4:35:3f:b7:48:f4:87:4d:94:
         fc:d7:9a:6a:c3:04:ca:01:a3:d1:77:47:58:17:f1:a2:eb:78:
         ac:8c:6c:71:d0:df:1c:7f:da:e4:8e:be:a4:09:48:5c:16:c3:
         f4:71:8a:16:4b:78:d0:3d:1e:9a:4f:67:60:d4:8e:32:66:15:
         1e:9f:4e:2c:ed:30:36:59:86:d2:d8:48:9b:a9:d4:78:a3:da:
         63:df:ae:95:bd:98:f1:82:a0:a8:c1:36:02:14:94:2a:97:a5:
         36:4b:43:1d:28:ba:cc:ca:22:83:5e:54:67:a0:f2:47:1b:b3:
         b9:ed:07:95:98:21:82:ed:a7:86:c9:41:8e:41:bf:c1:fb:1a:
         e3:2b:3b:35:15:28:78:56:ea:82:de:b4:64:a1:af:a6:59:46:
         c8:b3:a0:24:7f:12:6e:eb:f2:88:22:b7:38:c3:4b:43:f0:02:
         7e:23:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:29 2025 by rpki-client