Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa
File:                     3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          nnmiLoLd7bkCU1RUw5Od28HoP+sxRHWZc3jttiVT4pA=
Subject key identifier:   12:FD:0D:AD:DC:59:61:30:33:EC:1B:54:78:A7:54:C2:D7:E2:45:70
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       507429D942B80E73F024B9CCB4DA762B35CDBDFA
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 04 Feb 2025 18:32:16 +0000
ROA not before:           Tue 04 Feb 2025 18:27:16 +0000
ROA not after:            Tue 03 Feb 2026 18:32:16 +0000
asID:                     264668
IP address blocks:        170.244.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:74:29:d9:42:b8:0e:73:f0:24:b9:cc:b4:da:76:2b:35:cd:bd:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Feb  4 18:27:16 2025 GMT
            Not After : Feb  3 18:32:16 2026 GMT
        Subject: CN=12FD0DADDC59613033EC1B5478A754C2D7E24570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:29:7c:0d:c9:8b:b0:9f:1a:94:d0:7e:7e:
                    bc:5b:94:32:15:88:b8:50:75:bb:2e:86:50:93:02:
                    53:93:1f:c3:b8:0c:ed:15:2c:86:f1:c3:6c:dc:05:
                    1c:5b:05:9c:24:0e:ca:83:74:44:72:5f:8c:53:b9:
                    1d:44:1a:1d:d7:47:40:4b:5c:74:b6:f8:ec:b2:0a:
                    bf:0b:3f:08:f1:9b:c2:9f:c5:64:fb:f4:bc:cd:5d:
                    93:bf:3f:b9:3a:bb:73:72:c4:2b:4c:0d:a0:24:c7:
                    a2:6b:15:78:12:ac:59:6c:6e:27:bb:00:f0:6e:30:
                    b2:f8:e2:df:a8:53:5c:d3:23:df:5c:31:7a:5a:e5:
                    63:e4:88:f8:cf:d2:b9:61:93:aa:a4:d8:2b:5e:bc:
                    dc:17:3e:d4:c8:56:e0:d8:46:5e:6d:0f:8e:b0:9f:
                    9f:b0:73:90:cc:8a:4b:d3:16:d9:6e:50:a8:1f:36:
                    ac:c8:5d:87:7c:e0:02:25:50:53:fd:54:8c:d6:59:
                    6b:83:86:d3:a0:90:71:da:a8:ad:4c:52:2c:35:5c:
                    b4:be:00:28:42:9f:d0:9f:29:69:07:c3:45:5a:11:
                    64:73:d6:12:5e:58:7e:5d:f5:2d:72:fe:50:8e:4d:
                    a0:1b:4f:b8:7b:00:4b:d1:2d:89:83:fe:fb:b8:bc:
                    88:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FD:0D:AD:DC:59:61:30:33:EC:1B:54:78:A7:54:C2:D7:E2:45:70
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:93:c8:7c:d0:86:35:d9:41:67:16:1a:ae:a9:55:e6:0e:ca:
         c1:40:16:52:5b:db:eb:58:3d:58:e0:b5:53:12:a2:76:c7:ff:
         95:0e:b2:74:5b:bc:06:af:0b:3b:18:cd:58:ac:c0:8d:e6:64:
         ef:ec:97:95:ce:a2:39:b0:b1:12:6a:04:79:0a:4d:f8:3d:8f:
         9b:66:cc:e4:2a:68:35:c3:53:e4:92:32:d3:4f:fb:2a:46:c9:
         73:c6:5f:85:83:82:66:6c:03:e9:ec:be:ed:69:0d:12:cd:8e:
         a7:5b:21:12:78:65:68:1a:26:81:60:1f:fe:b5:e2:05:da:39:
         67:d2:a9:9c:91:80:5a:f4:a8:2c:c1:6d:aa:95:91:be:96:58:
         15:d9:e2:08:c6:6c:b7:b3:96:10:2c:49:cb:16:bf:8d:3d:30:
         7b:67:78:09:70:fe:ad:a8:4d:07:9d:10:93:6f:97:65:8d:9d:
         88:20:90:a1:32:18:28:7b:24:bb:5f:b1:a5:04:4b:73:f4:8d:
         37:17:f2:c2:c8:53:c3:3b:91:d6:b3:3c:e3:b6:0b:32:3a:d4:
         b2:fb:86:fc:be:5d:3f:b0:86:10:71:69:aa:f5:34:d0:df:3e:
         a4:3a:47:60:a9:60:24:c3:ef:f0:bd:a2:75:4f:50:6e:d7:d4:
         da:54:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:00:17 2025 by rpki-client