Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa
File:                     3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa (raw, json)
Hash identifier:          Ul+s81y9aWIAZy8V8WEQ1YUYbQhxKtdADUiGvxe/PXU=
Subject key identifier:   1E:C6:08:0E:6B:72:C0:85:65:97:8E:ED:F0:91:19:C9:FA:63:14:29
Certificate issuer:       /CN=1301C582EF8FE64D6EF596812F19C74F76D7367D
Certificate serial:       1632B4AC4675B1EAA0BCEA3F1D29ED8B544C5A39
Authority key identifier: 13:01:C5:82:EF:8F:E6:4D:6E:F5:96:81:2F:19:C7:4F:76:D7:36:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa
Signing time:             Tue 04 Feb 2025 18:11:47 +0000
ROA not before:           Tue 04 Feb 2025 18:06:47 +0000
ROA not after:            Tue 03 Feb 2026 18:11:47 +0000
asID:                     270056
IP address blocks:        187.103.20.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:32:b4:ac:46:75:b1:ea:a0:bc:ea:3f:1d:29:ed:8b:54:4c:5a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1301C582EF8FE64D6EF596812F19C74F76D7367D
        Validity
            Not Before: Feb  4 18:06:47 2025 GMT
            Not After : Feb  3 18:11:47 2026 GMT
        Subject: CN=1EC6080E6B72C08565978EEDF09119C9FA631429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:a7:be:8a:37:51:55:f3:c4:b1:36:86:f3:
                    39:15:fb:a7:c5:f7:f6:e6:c5:4b:83:3f:03:cf:c8:
                    73:43:ae:ff:64:b4:53:ff:49:33:53:dd:63:72:54:
                    70:86:3f:69:1e:2b:31:f9:3d:c4:b4:8b:b4:6b:6f:
                    59:2c:80:46:7f:ae:8f:81:3c:e9:99:fb:4f:2c:91:
                    9b:64:bc:30:d3:f7:a6:a6:7f:b7:13:ae:99:25:7d:
                    9b:07:83:f1:6a:9a:3c:64:18:ee:b4:6c:54:82:4f:
                    3e:3e:99:be:51:d1:12:e4:53:73:4c:bb:e2:4a:94:
                    e2:54:93:66:03:d4:dc:ce:2d:f9:ae:30:c4:c8:93:
                    b5:b5:80:ea:7b:4c:91:9d:fb:50:0f:32:69:ff:4a:
                    46:dd:86:10:d8:9b:05:b9:fa:d8:4a:91:87:3f:c9:
                    04:b6:a1:3b:b2:41:0e:5e:37:14:93:6f:00:e3:c2:
                    62:3d:ff:42:02:5c:cb:53:3c:bc:49:41:64:67:89:
                    86:bf:f3:1c:93:e5:91:1e:4a:8b:03:92:e9:3b:6e:
                    8d:78:4c:03:38:e1:98:aa:d1:17:82:6f:89:67:22:
                    96:3d:f4:64:1a:6b:fe:f0:c2:06:11:bc:d1:f9:91:
                    5c:4d:87:41:14:46:83:12:29:ac:c1:28:c0:2a:f8:
                    4d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C6:08:0E:6B:72:C0:85:65:97:8E:ED:F0:91:19:C9:FA:63:14:29
            X509v3 Authority Key Identifier:
                keyid:13:01:C5:82:EF:8F:E6:4D:6E:F5:96:81:2F:19:C7:4F:76:D7:36:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1301C582EF8FE64D6EF596812F19C74F76D7367D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A372CFE78FB0EFCB488F414BB739533287F8C49F3DBDCFE41B1F9F4DE5BFF0A4/0/3138372e3130332e32302e302f32322d3234203d3e20323730303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:40:84:75:7e:d4:35:1f:cd:ff:d9:0f:fe:f0:07:fe:bc:0a:
         3a:e4:50:24:f8:1f:49:e0:53:84:fe:c3:b1:53:50:b2:d2:dc:
         db:15:6a:15:dc:cd:0d:42:7d:bb:89:b0:e4:7b:64:8d:02:9e:
         b5:28:fd:97:34:3b:4c:c2:89:36:c6:2d:e6:7b:76:47:47:62:
         26:c2:9a:86:6f:a2:6a:68:dc:e7:ff:c8:30:5e:e7:c6:ba:4e:
         b9:c8:25:ad:fd:8d:0a:08:5b:08:c4:17:c1:ff:3f:e2:5b:5f:
         1c:bd:4b:2c:7e:da:d8:13:29:f3:c1:0e:85:76:ee:97:c3:33:
         43:95:62:a6:82:99:c4:2b:32:14:66:99:2c:02:7b:13:5e:5e:
         00:5f:98:8d:13:cb:a8:d6:52:d2:90:71:d5:d1:e8:88:2f:f1:
         ce:83:3b:17:da:82:99:86:5b:ce:63:7d:06:6d:08:a5:ff:11:
         f7:a6:b5:79:49:3e:2a:5a:83:85:30:df:7b:f3:d3:a0:6b:87:
         9a:a9:17:87:6c:ea:67:be:61:11:0c:da:1f:f8:69:17:da:69:
         c6:d0:8a:bb:90:29:c9:12:6f:de:93:91:0d:fa:37:f4:b7:03:
         f3:d4:61:7f:99:87:d4:32:6f:2a:1a:21:33:d6:df:c3:ca:f2:
         3e:25:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:21:41 2025 by rpki-client