Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e203532343638.roa
File:                     3136302e32302e3136342e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          FsbZzC6dzpzW3WJRq0HDdkMO1grQJE4XS+fgio1mktE=
Subject key identifier:   80:CB:B7:51:0A:20:D1:35:D5:4B:11:BA:C3:0C:FA:32:A8:41:FB:47
Certificate issuer:       /CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
Certificate serial:       5614E4BAF4B354EBB04B2F2491004FB61BA062CC
Authority key identifier: 75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 04 Feb 2025 18:50:10 +0000
ROA not before:           Tue 04 Feb 2025 18:45:10 +0000
ROA not after:            Tue 03 Feb 2026 18:50:10 +0000
asID:                     52468
IP address blocks:        160.20.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:14:e4:ba:f4:b3:54:eb:b0:4b:2f:24:91:00:4f:b6:1b:a0:62:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=754E4BD73AEBBA082CF44FF7380173AEE9E5BF86
        Validity
            Not Before: Feb  4 18:45:10 2025 GMT
            Not After : Feb  3 18:50:10 2026 GMT
        Subject: CN=80CBB7510A20D135D54B11BAC30CFA32A841FB47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:24:2c:c1:23:f5:f5:00:f5:2b:a4:42:5c:
                    eb:b0:05:c3:03:4a:45:7a:96:c5:a1:6d:f4:b9:e8:
                    6f:ac:e0:a1:a2:30:ed:aa:b3:1a:4e:1d:80:86:a0:
                    c1:bb:43:81:75:10:e2:5a:d0:60:16:2e:84:cf:77:
                    70:84:93:4e:56:d2:cc:67:94:f9:bc:16:ef:0b:24:
                    54:b4:ae:23:2c:db:38:18:62:47:e7:9e:1a:9a:62:
                    06:d4:d0:8f:58:5b:5e:e6:17:09:88:b7:fa:f6:60:
                    82:3c:72:7c:82:03:60:9e:d8:df:53:fd:c4:cb:64:
                    9e:d4:cf:84:7d:47:15:c8:4d:a1:23:69:75:15:32:
                    9f:9b:71:23:e8:e6:64:06:57:14:f6:2e:b3:8c:04:
                    f0:1a:77:0c:85:35:36:5e:72:b4:23:f5:b8:f1:06:
                    1c:1b:d5:5b:74:6d:c2:7c:8d:ec:bd:6c:67:6d:79:
                    65:ea:8b:fc:c0:03:84:5e:d2:df:92:5d:ec:c2:d9:
                    52:7a:de:7c:d8:a7:4e:03:43:ba:0a:0d:0c:fb:1d:
                    2e:2a:c6:0f:a3:87:33:44:f7:77:61:47:20:4d:63:
                    75:ec:e9:20:92:78:59:59:cb:7c:33:39:3d:1a:08:
                    ba:07:e9:19:58:5d:28:05:8a:8c:a0:60:07:e2:fe:
                    71:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CB:B7:51:0A:20:D1:35:D5:4B:11:BA:C3:0C:FA:32:A8:41:FB:47
            X509v3 Authority Key Identifier:
                keyid:75:4E:4B:D7:3A:EB:BA:08:2C:F4:4F:F7:38:01:73:AE:E9:E5:BF:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/754E4BD73AEBBA082CF44FF7380173AEE9E5BF86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C38AF35C5E8EB73BE9024D79F51B5609D1F24098C8E322DA5382FE17B69155A1/0/3136302e32302e3136342e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:50:1e:b1:69:e0:ef:76:8a:1f:29:e3:fa:65:74:a9:85:
         9f:03:d5:22:fd:27:ba:10:56:f8:1a:77:e0:cf:1d:fe:cb:83:
         6c:ec:c0:78:df:b6:98:89:70:d5:19:2d:65:e9:15:67:c6:f1:
         cf:aa:07:f0:b1:99:00:88:a1:e4:c7:d4:61:d3:8b:0d:1e:2d:
         b1:2f:00:f2:ce:07:e4:9e:19:5e:a2:c4:17:97:2d:a7:45:bd:
         20:33:22:3d:be:a4:98:3c:96:32:ff:40:12:76:ee:f6:d8:fd:
         11:ee:8d:a4:10:ab:63:83:e1:59:de:13:67:27:21:41:5c:27:
         fd:66:fd:f2:8c:19:60:96:72:1e:23:59:49:a2:60:85:78:ef:
         02:80:48:cc:fa:34:25:09:d6:fb:d6:1e:ad:d0:3a:d6:25:2e:
         f7:82:30:31:cd:b4:da:67:87:fb:60:4e:46:70:c5:cd:02:76:
         44:ff:9d:fd:5b:c7:74:e1:35:a9:6f:70:13:cf:45:01:77:f8:
         96:69:c0:73:09:d8:5e:b0:1c:bb:d2:48:fb:64:35:6e:3b:bf:
         ea:a2:91:5a:cd:ba:2b:26:38:08:08:b2:39:a3:b0:1c:8d:b1:
         8f:66:f2:f4:0c:3f:c5:63:92:1c:97:4e:23:8f:ff:22:bf:60:
         86:0b:44:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:46:54 2025 by rpki-client