Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa
File:                     3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa (raw, json)
Hash identifier:          92WlxSoWNBdKXq1VaYttIAWiwFy1JXCRa04lVjUIcdw=
Subject key identifier:   82:3D:A8:87:B9:46:2A:E4:C6:82:8F:5F:30:47:22:2B:E8:CE:52:A4
Certificate issuer:       /CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
Certificate serial:       256BCA12499BC9EB6EDE640377653ABE365CF1AE
Authority key identifier: A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa
Signing time:             Tue 04 Feb 2025 20:00:04 +0000
ROA not before:           Tue 04 Feb 2025 19:55:04 +0000
ROA not after:            Tue 03 Feb 2026 20:00:04 +0000
asID:                     269993
IP address blocks:        168.90.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:6b:ca:12:49:9b:c9:eb:6e:de:64:03:77:65:3a:be:36:5c:f1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A
        Validity
            Not Before: Feb  4 19:55:04 2025 GMT
            Not After : Feb  3 20:00:04 2026 GMT
        Subject: CN=823DA887B9462AE4C6828F5F3047222BE8CE52A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:05:38:bc:6a:0c:13:17:c6:05:c5:ae:45:6b:
                    37:bf:d8:ef:40:02:65:f6:11:13:2e:31:b4:17:2c:
                    7b:66:57:4f:ba:60:39:7d:f9:17:55:45:ce:8e:32:
                    0b:ef:6a:32:a7:21:0e:b9:08:d7:52:b4:7b:64:73:
                    6f:e9:28:87:6a:6f:54:c6:fe:fd:a2:dd:a8:77:65:
                    97:3b:1d:6b:50:6e:c3:4e:91:3f:6d:05:4b:e6:58:
                    38:a1:a3:fb:1d:d8:74:7f:c3:06:0f:d5:18:cd:4c:
                    4c:dc:dc:da:2d:8b:99:0f:1c:06:e2:7f:81:31:ac:
                    e2:1c:cb:c5:eb:69:51:5e:81:89:aa:31:ed:33:cd:
                    fe:d7:29:b9:f4:65:9b:83:7a:0f:1d:a5:b3:06:3b:
                    6d:50:76:66:96:5f:10:57:43:54:8c:6d:79:1d:9b:
                    f9:d9:5a:b4:12:67:a4:31:98:ad:72:41:43:d1:e0:
                    c1:70:df:de:73:ea:c6:36:fd:56:dd:cb:86:b3:08:
                    ce:9b:1a:49:3c:96:4d:46:74:57:b8:c6:56:1c:28:
                    67:7f:f7:11:c6:f5:22:47:24:b6:56:07:96:a7:42:
                    0c:fe:ca:b9:6f:62:2a:ed:8e:8c:a1:76:cb:ab:3f:
                    2b:d4:4a:8b:6e:d7:91:fb:36:8a:51:8a:e0:48:b2:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:3D:A8:87:B9:46:2A:E4:C6:82:8F:5F:30:47:22:2B:E8:CE:52:A4
            X509v3 Authority Key Identifier:
                keyid:A1:2F:D7:F3:F9:F4:70:03:0B:9F:CC:2C:F4:E7:EE:20:F8:2F:89:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A12FD7F3F9F470030B9FCC2CF4E7EE20F82F894A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B12F8A8F8A7520384EB4FE0F6AC8D6A63CF385341AE87BEEF7EDCD17D5CB05B/0/3136382e39302e3232302e302f32322d3234203d3e20323639393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:19:d8:c9:3d:91:fe:6d:13:ff:50:0a:c8:72:05:31:b2:75:
         7e:18:ce:c4:e1:b0:07:dc:8f:ee:8e:e5:8d:6d:36:c6:0b:30:
         6c:17:bf:35:32:68:02:e7:c0:2a:8a:51:d5:7e:0e:95:79:af:
         53:ca:c3:8c:98:0c:5f:2f:15:aa:5b:46:bd:d9:f6:5a:1c:eb:
         80:69:ea:7a:88:15:d8:73:be:08:f6:26:f3:09:35:ac:09:c5:
         5b:76:0b:38:dd:d4:a4:7c:e4:71:f5:01:cc:70:ef:32:fe:91:
         0b:16:74:b6:81:1e:70:16:90:6b:8f:a8:ac:eb:42:8b:35:c8:
         fc:cc:e6:2a:3a:4c:75:8f:a1:7e:00:5f:32:6f:65:f9:d9:74:
         8d:38:6a:73:55:2c:78:fc:e3:3d:32:77:01:52:92:42:2b:b6:
         69:6e:b1:c9:c8:94:59:a4:ca:51:d0:e4:f8:ec:51:1b:8d:02:
         a0:48:b2:0e:0c:75:5d:df:f9:d1:a3:cf:f6:66:77:ce:25:dd:
         21:49:91:9d:fc:7a:16:24:11:55:b5:98:a1:03:1b:6e:6e:2c:
         9b:e2:40:4f:78:53:bc:67:63:13:25:d7:fc:83:ed:f2:d0:04:
         8b:81:6c:02:3f:53:18:c5:ae:19:46:12:43:cb:96:a3:5b:02:
         d7:16:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:07 2025 by rpki-client