Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa
File:                     3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa (raw, json)
Hash identifier:          YwOO+tw0Q6HUe3z6BfUaf9akQH3vNc2DZuF/9QlmxS8=
Subject key identifier:   D9:95:4A:D8:C8:AB:61:D0:EC:3C:9C:F1:84:25:12:78:8E:09:54:E9
Certificate issuer:       /CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
Certificate serial:       5A681F6399A8B8B41DEF128FFE2AE7B2FD7F4597
Authority key identifier: 30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa
Signing time:             Tue 04 Feb 2025 18:49:27 +0000
ROA not before:           Tue 04 Feb 2025 18:44:27 +0000
ROA not after:            Tue 03 Feb 2026 18:49:27 +0000
asID:                     263740
IP address blocks:        143.137.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:68:1f:63:99:a8:b8:b4:1d:ef:12:8f:fe:2a:e7:b2:fd:7f:45:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=305370A1998C6AEF9B94283517F4B1E6BB5AD0BC
        Validity
            Not Before: Feb  4 18:44:27 2025 GMT
            Not After : Feb  3 18:49:27 2026 GMT
        Subject: CN=D9954AD8C8AB61D0EC3C9CF1842512788E0954E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:94:a2:da:21:5c:5d:06:2c:ef:9f:5f:c2:34:
                    74:44:f9:69:18:98:de:16:cd:16:dd:69:e0:a2:92:
                    17:ac:c9:1f:65:d6:d8:6a:25:be:60:0d:eb:dd:f4:
                    f0:d6:11:36:0d:06:7c:7c:ba:77:92:fb:ea:bb:5b:
                    e1:79:d3:bd:a5:dc:d7:25:41:f6:1f:f9:b5:14:23:
                    01:99:e8:2f:24:41:f4:ee:be:c6:5d:c2:ea:33:fd:
                    21:50:03:21:69:81:3a:a5:b7:2e:3e:71:e9:97:59:
                    8c:cf:ba:94:6e:19:80:16:49:89:82:4f:49:2f:88:
                    94:81:75:34:bb:a0:ff:e1:d9:86:ea:a1:ec:28:e3:
                    d3:aa:14:cd:31:38:66:53:b0:4f:3f:d6:8e:f5:1d:
                    26:f4:8f:d9:ea:99:87:12:a7:4a:dc:87:5f:aa:eb:
                    76:17:59:50:46:84:a6:46:b5:6f:61:ca:d0:a3:72:
                    90:c8:a1:e9:c5:04:74:6b:e5:59:62:ae:6b:aa:65:
                    a6:03:af:82:a4:7b:69:5a:a6:7a:73:c3:9a:d4:d5:
                    ca:da:51:a0:58:ff:7b:71:54:8e:d3:83:15:6c:8f:
                    6b:46:7a:b0:44:12:4e:29:c6:e5:c8:d7:df:54:50:
                    b6:79:d2:30:6f:eb:02:6c:0e:8b:79:4c:6e:a3:1f:
                    74:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:95:4A:D8:C8:AB:61:D0:EC:3C:9C:F1:84:25:12:78:8E:09:54:E9
            X509v3 Authority Key Identifier:
                keyid:30:53:70:A1:99:8C:6A:EF:9B:94:28:35:17:F4:B1:E6:BB:5A:D0:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/305370A1998C6AEF9B94283517F4B1E6BB5AD0BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9701C431A529EA20E951CCF098725BEC7F05D8173A405C1A9DEB640BA97BEE5A/0/3134332e3133372e3136342e302f32322d3232203d3e20323633373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:1d:61:33:e6:0e:a5:06:a1:6f:65:ab:7a:4c:6d:fe:58:2e:
         05:08:d0:db:da:4d:ff:fe:71:81:05:e4:98:2f:86:20:00:cd:
         ef:23:f7:80:32:74:2f:7d:03:e1:6e:a9:78:15:56:c1:59:41:
         44:d1:73:85:e1:51:d2:1a:6c:bd:d9:78:36:fe:35:b7:eb:e1:
         7b:45:22:ba:71:42:0f:f0:e5:1b:68:66:1a:f0:a4:56:c8:c0:
         d3:29:27:f0:5c:d1:75:46:ca:91:d4:cb:ed:e1:8f:10:f1:c1:
         da:9f:0a:f7:83:9c:f5:09:d5:27:38:c5:2b:6b:b5:b8:38:68:
         3f:3e:ab:37:cf:31:77:fa:fb:8d:70:db:84:33:09:da:97:41:
         2b:67:29:4c:7d:1d:3f:db:15:1e:da:7a:9d:c9:5b:83:3e:2a:
         ac:9a:0c:1b:f2:10:3b:d1:f0:08:8c:7d:06:80:8c:46:a8:53:
         c4:c5:ef:4f:5d:37:cd:c9:cc:00:48:c2:8d:75:7b:e9:d4:d3:
         bd:e7:c7:43:6a:c5:d2:3e:54:dc:c7:26:c3:7d:a1:fc:94:da:
         bc:5f:fb:2b:66:e2:65:ec:2a:3e:68:02:d5:60:e1:31:f0:c7:
         a6:d4:17:16:29:2a:85:25:a0:89:c6:7f:6b:0e:59:0b:7c:13:
         9a:0f:90:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:56:35 2025 by rpki-client