Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa
File:                     3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa (raw, json)
Hash identifier:          9nOTLn46sjpDAR48MKagvl/ZyN6L83EJfcCvLIjfam0=
Subject key identifier:   29:4D:82:FC:3D:0C:8E:86:A3:E3:32:63:11:DE:E6:FB:D5:65:FA:5F
Certificate issuer:       /CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
Certificate serial:       77612B7457907C22A9612A6CF1314074E0C84E8A
Authority key identifier: 3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa
Signing time:             Tue 04 Feb 2025 18:32:34 +0000
ROA not before:           Tue 04 Feb 2025 18:27:34 +0000
ROA not after:            Tue 03 Feb 2026 18:32:34 +0000
asID:                     265654
IP address blocks:        170.246.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:61:2b:74:57:90:7c:22:a9:61:2a:6c:f1:31:40:74:e0:c8:4e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA
        Validity
            Not Before: Feb  4 18:27:34 2025 GMT
            Not After : Feb  3 18:32:34 2026 GMT
        Subject: CN=294D82FC3D0C8E86A3E3326311DEE6FBD565FA5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:2c:f1:08:6b:8e:85:2e:ec:5a:90:57:b0:
                    02:5a:3b:26:4d:e6:c5:93:5d:55:96:b4:e5:da:49:
                    07:06:dd:da:6e:79:47:06:33:03:09:6c:11:e4:03:
                    a6:f6:97:09:dc:2f:0a:50:de:10:9b:cd:f9:fc:6a:
                    af:00:74:d0:e6:7b:28:e3:4a:48:24:68:4f:31:27:
                    83:2f:e6:0d:d0:29:9d:91:fb:09:17:f2:78:e4:9d:
                    02:a5:65:46:c5:a2:9f:b2:62:9f:a8:a2:eb:2a:55:
                    0b:66:0a:87:aa:44:e0:82:8e:b9:bb:56:8e:ea:97:
                    2a:cc:b0:e4:4f:87:5c:5e:e9:7b:48:e8:24:16:c9:
                    32:02:17:5f:65:8c:82:55:59:ff:38:9a:47:ad:26:
                    70:22:bf:a7:a9:15:5d:1a:80:94:aa:e0:13:66:91:
                    f8:91:ec:a0:bf:bb:ff:48:f4:e1:fa:50:73:a1:32:
                    3d:3d:56:92:5d:c8:12:16:48:b2:d5:92:4e:db:a8:
                    77:e0:10:50:03:3f:0d:df:d8:c3:a8:8c:13:f1:9f:
                    91:e1:ab:7e:08:c0:9a:b3:6b:bf:e2:c9:da:f8:3a:
                    e8:d1:ce:bd:28:33:05:e2:a6:2b:d1:84:92:2e:f7:
                    c2:80:7e:c9:f3:da:91:90:bc:ac:be:b9:3b:71:11:
                    33:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4D:82:FC:3D:0C:8E:86:A3:E3:32:63:11:DE:E6:FB:D5:65:FA:5F
            X509v3 Authority Key Identifier:
                keyid:3C:AA:AB:B9:9F:5C:F7:9C:A7:C2:5F:02:2F:85:F8:5E:0D:CB:2C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CAAABB99F5CF79CA7C25F022F85F85E0DCB2CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/965872978B42FE99970EE04D8B2060771083E30741A509BAEB00DB63CECB23D3/0/3137302e3234362e3232302e302f32322d3234203d3e20323635363534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:d5:19:9e:33:ab:0b:89:74:0f:1a:6d:7b:b4:79:62:60:48:
         9e:d8:91:a1:ba:7f:67:25:6c:81:41:76:8e:9f:ee:e0:2d:d6:
         3d:8c:89:c7:bb:9f:8c:a8:8b:d7:2b:7e:4a:93:85:a5:ec:37:
         0c:88:d9:4f:41:70:39:b6:69:95:41:49:db:3b:4b:4d:75:e3:
         bc:88:af:d1:b0:31:c9:31:e4:d2:9b:bb:a5:39:b7:2b:72:e5:
         56:9c:3a:2d:9b:1a:1a:82:a0:d6:6c:3c:b7:ee:0e:fc:b7:0a:
         2d:d7:e3:e5:4c:70:5c:70:c9:68:a6:72:c0:b5:df:c9:28:e1:
         c0:c0:0a:91:43:5f:89:c1:bc:bf:a5:af:80:e7:41:31:a7:55:
         75:25:21:ed:ac:2c:61:a5:e1:95:c7:79:d3:1e:bf:01:30:fe:
         ad:fa:fe:56:44:1c:92:4f:ab:f7:91:ab:c2:00:55:07:52:04:
         d2:18:3e:42:eb:89:14:51:53:5f:f6:6d:41:95:2a:f8:20:12:
         e6:34:04:a5:1d:ca:70:54:18:49:c2:35:32:c3:16:56:16:6d:
         d0:50:ac:70:90:fe:d1:47:f6:e2:ab:cd:a8:23:19:af:7b:8e:
         f4:13:71:19:66:23:ae:d1:e6:73:43:92:92:36:89:9a:c2:1d:
         10:ef:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:18 2025 by rpki-client