Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
File:                     3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          vJuqMo3FOvAjQjUwkJLglGJUvssmWIzn1UeqJnPQlog=
Subject key identifier:   D5:B2:4F:8B:16:8B:EA:76:80:57:D5:40:5C:FD:85:F2:18:82:C6:BC
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       3D748BD7E9AFC2055DCE41F3F54867142C09A43C
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:32:15 +0000
ROA not before:           Tue 04 Feb 2025 18:27:15 +0000
ROA not after:            Tue 03 Feb 2026 18:32:15 +0000
asID:                     52468
IP address blocks:        170.244.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:74:8b:d7:e9:af:c2:05:5d:ce:41:f3:f5:48:67:14:2c:09:a4:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Feb  4 18:27:15 2025 GMT
            Not After : Feb  3 18:32:15 2026 GMT
        Subject: CN=D5B24F8B168BEA768057D5405CFD85F21882C6BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:44:63:0b:9a:15:9d:d1:39:8d:19:75:4d:
                    cd:f0:d0:57:19:33:d5:bf:b8:41:57:b6:15:f9:cb:
                    5e:ff:b7:90:9c:63:d9:ff:8d:96:70:99:86:d0:fe:
                    1c:78:3a:17:79:5a:6e:5e:c8:0c:02:49:a8:91:50:
                    2d:6d:ee:f1:52:53:d9:bd:61:c0:b1:90:96:20:49:
                    e5:bd:7c:5e:30:3b:66:bc:61:eb:18:89:43:e6:9e:
                    f7:5d:c2:ed:7a:09:92:2c:81:9f:cd:c0:1f:66:0a:
                    b8:83:50:e5:f8:39:89:e7:1c:db:f6:cc:53:61:51:
                    ae:a1:04:00:c3:18:d6:7a:02:91:60:69:65:19:70:
                    ec:5e:e5:41:b3:f0:b4:a6:d2:2b:08:46:f0:9f:10:
                    80:06:83:b2:79:0f:62:ec:4b:68:60:ac:93:57:8b:
                    35:90:78:8c:84:84:91:3f:71:71:74:5d:e4:8c:17:
                    d3:19:c9:9f:8f:f9:ee:2d:37:b8:4e:25:4c:a1:37:
                    8d:63:ba:ce:41:f7:ea:bd:f7:cd:98:31:63:0c:55:
                    e8:66:77:ed:b4:e4:dd:7f:d3:f8:a3:9f:13:f5:0e:
                    de:7e:88:73:54:79:07:49:77:07:ef:c5:cf:4c:69:
                    c9:9b:e8:03:c2:b3:e2:09:f3:20:17:cc:bb:66:5c:
                    80:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:4F:8B:16:8B:EA:76:80:57:D5:40:5C:FD:85:F2:18:82:C6:BC
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:10:ed:f2:81:aa:66:c0:bd:72:d8:b3:49:06:c2:e5:07:cf:
         90:e5:94:59:ce:3d:f7:0e:26:d6:d2:9e:95:93:da:f0:43:50:
         34:82:4c:ce:93:51:c7:4d:91:46:36:6e:f8:6d:29:76:e8:93:
         95:20:6b:7c:f6:df:14:e9:fe:5c:88:4d:b3:36:c2:a1:a1:a5:
         3a:cd:cd:00:da:d4:2a:8b:4c:ab:ce:e0:c6:b5:31:34:28:c2:
         fe:66:d3:d5:e7:f3:ee:ef:02:fd:0a:9c:b5:82:e8:9e:31:c4:
         2e:af:1f:4a:b3:ce:2e:4a:eb:58:11:21:1c:56:6d:43:2f:94:
         53:e7:54:63:dc:fc:2c:5e:c1:3d:32:43:4f:1f:09:1f:e8:94:
         7c:17:cf:60:29:7b:60:85:c7:49:54:60:c9:ad:97:10:a4:12:
         31:56:47:90:4d:4f:d4:53:d1:b2:a3:26:ac:1b:1d:c9:59:d9:
         04:69:93:84:ef:a2:1d:76:b8:5d:9c:dd:e6:5e:0f:46:b8:4a:
         de:7a:83:9c:8a:15:f4:92:e7:5c:29:24:80:e6:9a:9b:b6:c3:
         84:f6:ad:21:5d:17:e3:43:50:47:c9:db:e3:54:db:25:f4:be:
         c9:fb:4c:46:c5:9c:c2:75:26:c1:6c:b4:7b:42:92:83:98:2e:
         64:42:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:37:01 2025 by rpki-client