Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa
File:                     3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa (raw, json)
Hash identifier:          X7dh5qacmnx5sGJYxG7KpMbCqdYSSlrbgmvC/A+KcwY=
Subject key identifier:   2A:A5:FC:EC:76:A0:C8:3A:0A:93:7D:81:49:C0:28:E1:D8:13:34:63
Certificate issuer:       /CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
Certificate serial:       3D31F739CA63B2C27DF38D848134339D76A70C6A
Authority key identifier: B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa
Signing time:             Wed 04 Jun 2025 02:20:57 +0000
ROA not before:           Wed 04 Jun 2025 02:15:57 +0000
ROA not after:            Wed 03 Jun 2026 02:20:57 +0000
asID:                     270160
IP address blocks:        177.93.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Jun 2025 23:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:31:f7:39:ca:63:b2:c2:7d:f3:8d:84:81:34:33:9d:76:a7:0c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4E0934934FFEC12162EAFD5716D0AF920DC63AD
        Validity
            Not Before: Jun  4 02:15:57 2025 GMT
            Not After : Jun  3 02:20:57 2026 GMT
        Subject: CN=2AA5FCEC76A0C83A0A937D8149C028E1D8133463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c3:4c:ca:0a:69:17:6d:11:ce:23:7e:11:7b:
                    cb:b6:cd:42:2b:12:da:dd:86:3e:cf:75:ba:98:7d:
                    55:d5:ea:60:4a:ec:e9:52:7c:7c:30:49:a0:1f:ee:
                    4f:3a:18:a0:d0:d5:4c:f7:61:70:f0:03:19:0e:44:
                    f6:30:4c:c7:07:6d:0c:49:11:09:d1:86:bd:4a:73:
                    74:e5:56:f6:f1:fd:17:c5:29:a7:af:cb:03:4a:66:
                    09:92:1c:bb:5b:fd:fc:7b:f8:c0:b5:41:ef:bd:03:
                    21:63:39:78:21:fd:ae:a7:c8:9d:69:c7:99:cb:53:
                    79:fb:b7:2d:3a:1c:32:d5:1d:6f:67:d8:86:b8:10:
                    f8:d4:95:ff:6c:8a:e6:48:d0:07:68:10:41:43:df:
                    a7:3d:fd:47:c4:94:01:30:ac:e6:1d:27:e0:3b:77:
                    57:49:fc:bd:7c:b6:3e:38:2d:7e:4e:d6:a6:e4:58:
                    6c:71:cd:be:74:84:b1:b1:88:76:f4:22:08:20:c3:
                    03:fc:f3:7e:d8:3b:91:fa:41:63:ab:ec:70:e5:9b:
                    2e:28:c1:ee:d2:b7:d8:50:15:2b:f3:eb:8d:18:97:
                    ee:44:54:8c:2c:f4:7d:c2:a6:3b:e2:9b:25:f3:26:
                    b2:3c:3f:29:b7:5d:48:aa:58:ae:23:d3:0b:76:48:
                    73:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:FC:EC:76:A0:C8:3A:0A:93:7D:81:49:C0:28:E1:D8:13:34:63
            X509v3 Authority Key Identifier:
                keyid:B4:E0:93:49:34:FF:EC:12:16:2E:AF:D5:71:6D:0A:F9:20:DC:63:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B4E0934934FFEC12162EAFD5716D0AF920DC63AD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9FA6A3AE16FAD49EE0052D88B28E20E2034E40E4491CF429488BB336D6571A60/0/3137372e39332e3134322e302f32342d3234203d3e20323730313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:38:1b:d0:d1:17:65:9a:4e:85:f5:3f:dd:58:f3:c5:6d:c6:
         fa:2b:28:c8:97:8a:f2:59:ba:06:a7:32:9e:1e:c1:3c:8c:45:
         c4:b9:e7:22:91:b2:4c:58:73:35:0d:32:5f:50:00:00:a4:0e:
         c3:4f:6f:9c:c9:d8:7f:01:04:96:d9:ec:2c:b3:d1:de:a9:a9:
         88:f1:66:e3:34:d8:38:c7:72:04:e2:13:84:a7:5a:e3:12:88:
         cb:a0:71:4b:b5:48:24:de:db:94:3d:36:76:5b:bf:f7:79:ea:
         d0:3c:36:03:d8:3a:24:cb:fd:21:8a:0e:24:cd:8a:54:c8:ae:
         24:21:71:87:2d:33:b5:42:32:43:bd:e3:ba:79:44:4c:58:82:
         78:d4:5b:53:4f:d4:6a:53:fa:1e:7c:16:07:32:ff:5e:6f:f7:
         77:3d:ea:36:e0:09:07:a9:29:49:2c:f7:8b:2a:17:47:b4:aa:
         6a:c3:95:e9:75:3a:58:7f:d1:35:3d:94:3c:4e:cb:77:12:a3:
         01:19:be:d6:ce:be:bd:e9:04:8a:71:cd:5f:be:f3:4f:ab:91:
         a8:5b:6b:ad:a4:d5:51:90:b3:b1:55:21:19:6d:06:7c:19:f5:
         55:22:ac:95:a7:a9:ed:5a:28:54:96:23:6e:0e:33:e3:d6:38:
         15:a9:5f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 21:47:38 2025 by rpki-client