Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3136382e3232372e302e302f32322d3234203d3e203130323939.roa
File:                     3136382e3232372e302e302f32322d3234203d3e203130323939.roa (raw, json)
Hash identifier:          eBmHMA7A1R99YfYd7+irF3Ioq40qzYlOQof2FdDuRJ8=
Subject key identifier:   83:04:34:80:CC:49:F9:EC:15:73:C8:BE:08:07:7D:14:D1:62:72:6B
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       62F00D4D0077D2FEF3A4AFA20C67F347378209CE
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3136382e3232372e302e302f32322d3234203d3e203130323939.roa
Signing time:             Tue 04 Feb 2025 18:03:16 +0000
ROA not before:           Tue 04 Feb 2025 17:58:16 +0000
ROA not after:            Tue 03 Feb 2026 18:03:16 +0000
asID:                     10299
IP address blocks:        168.227.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f0:0d:4d:00:77:d2:fe:f3:a4:af:a2:0c:67:f3:47:37:82:09:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Feb  4 17:58:16 2025 GMT
            Not After : Feb  3 18:03:16 2026 GMT
        Subject: CN=83043480CC49F9EC1573C8BE08077D14D162726B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:4d:db:a0:1b:cc:01:6a:38:13:22:57:69:
                    bc:32:ca:11:4d:2f:d3:70:3e:e3:fe:c9:43:67:2f:
                    f5:dd:79:f4:8c:c3:09:69:85:00:da:4c:d7:80:be:
                    bb:c9:c4:40:e8:ff:8e:cf:e9:85:6f:f8:8a:7b:7e:
                    ba:f5:7f:87:4d:47:22:de:72:c8:66:29:1d:f0:64:
                    22:8f:cc:ed:4c:36:04:68:6d:83:c5:46:d5:58:04:
                    ef:89:6b:cf:8e:07:99:cb:cb:fa:42:b1:16:d4:09:
                    b6:34:21:f3:f3:08:89:c7:50:ff:04:c6:1b:55:da:
                    98:37:94:60:ff:f0:80:3b:37:50:66:71:6e:16:62:
                    6f:68:11:ae:4a:a3:1c:03:5c:1e:ed:52:eb:38:7a:
                    8a:97:da:5c:ea:04:ba:0b:f1:bc:9f:f2:b5:15:14:
                    ce:13:42:1e:e1:43:90:63:79:47:aa:4c:3a:bb:71:
                    4f:61:36:31:d5:f4:fa:6a:4f:f4:58:fe:61:7f:0b:
                    c5:13:0e:25:fb:fd:b1:13:43:b7:d0:c5:46:2e:1c:
                    ad:bd:9a:a5:0c:32:ed:5f:3e:cd:d8:a6:21:ad:8f:
                    e7:52:01:3f:ec:18:19:c9:f2:50:9c:11:75:f7:f5:
                    5c:dc:ec:6d:a3:10:42:28:88:17:28:38:61:23:08:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:04:34:80:CC:49:F9:EC:15:73:C8:BE:08:07:7D:14:D1:62:72:6B
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3136382e3232372e302e302f32322d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:c5:78:10:11:b8:62:da:f1:8d:8f:e6:5e:a6:76:cd:e3:db:
         8c:f9:46:a1:28:59:04:4f:a0:6c:1b:fa:c2:83:05:cc:f5:b9:
         9a:00:58:9c:41:d4:3a:e2:52:e6:f7:fa:44:b5:c8:46:91:1a:
         ad:7d:ef:52:82:16:a6:b3:f2:7c:87:7b:8f:92:93:29:a3:c9:
         c2:35:c2:d9:67:bc:0e:b0:01:db:e3:1f:d0:92:52:d1:d4:d5:
         aa:8f:a8:cc:07:d9:47:8c:dd:a7:c0:ce:de:03:97:09:54:2e:
         c3:58:13:57:60:27:f0:e3:81:9d:44:28:7a:4b:ef:a1:b7:7c:
         34:95:c1:48:46:d0:4e:02:7d:b9:d1:b6:04:cb:87:d2:7b:d8:
         c7:04:c6:16:19:bb:8b:87:33:e7:2e:0b:9f:26:ad:4a:22:24:
         f3:ba:ab:74:f3:1f:f2:c7:e8:b4:55:f8:27:c5:96:bb:84:67:
         49:70:46:d6:ef:c9:a0:21:bd:4c:1b:7c:82:00:f2:bf:ff:0b:
         db:78:a7:f6:0f:85:89:8a:ec:62:50:a5:37:56:b0:c6:cc:6e:
         47:56:8d:ef:53:69:21:fd:25:5c:60:99:79:9f:94:3b:a3:18:
         c6:e6:d9:55:23:9f:63:cb:ea:98:50:e1:a2:aa:d0:f1:3a:b1:
         9d:cb:8d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:05:01 2025 by rpki-client