Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa
File:                     3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          OA687dj+ecF+bdf9ydL80M/GPK/s2e88tuxPY7gaXms=
Subject key identifier:   9E:78:48:97:74:DA:00:F5:FC:A3:45:84:D2:B2:9E:F9:19:B1:D3:5B
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       6995429847E51518D7AB21957FA18860181E2ACB
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 05 Feb 2025 07:09:03 +0000
ROA not before:           Wed 05 Feb 2025 07:04:03 +0000
ROA not after:            Wed 04 Feb 2026 07:09:03 +0000
asID:                     265524
IP address blocks:        177.152.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:95:42:98:47:e5:15:18:d7:ab:21:95:7f:a1:88:60:18:1e:2a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb  5 07:04:03 2025 GMT
            Not After : Feb  4 07:09:03 2026 GMT
        Subject: CN=9E78489774DA00F5FCA34584D2B29EF919B1D35B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:99:7b:68:32:f7:87:3d:d3:66:1f:b3:ec:16:
                    13:06:9a:ca:59:6e:13:a8:45:e8:8f:42:f9:56:50:
                    91:18:30:fb:5c:e0:5c:a5:c9:d7:f1:03:50:b8:e7:
                    0e:64:57:fa:5c:2d:7c:81:fa:38:ea:2a:6a:a9:75:
                    bf:c5:50:d2:46:4e:ae:fe:03:91:8c:76:b2:35:27:
                    c5:6d:a2:44:14:3c:29:6a:8f:69:e4:44:d4:94:4a:
                    17:b8:0a:72:50:91:11:b5:ed:00:6a:6d:4a:d0:f0:
                    8c:d0:07:48:d0:00:27:2a:28:46:d5:6a:79:c7:7c:
                    a8:a9:5b:e3:af:99:e0:c6:fd:0c:3c:dd:56:cf:45:
                    f6:24:47:a1:f7:c4:a0:53:14:c2:dc:83:18:1e:ba:
                    7c:2a:58:8e:1e:ed:aa:b1:1f:0d:d2:65:5b:fb:77:
                    b6:1e:9d:d1:88:6a:35:09:03:c2:93:7e:34:53:03:
                    1d:b7:a8:10:2c:49:91:ec:35:04:f5:a0:e6:17:0a:
                    ad:c4:eb:84:53:e2:cd:2f:dc:2d:6a:db:fa:48:a8:
                    92:a9:99:70:f9:e9:af:cb:58:5c:e8:14:67:6e:6e:
                    5a:52:5d:86:6c:7c:43:cb:9e:84:98:d0:a9:11:24:
                    f2:57:8d:2b:fc:28:be:a4:61:a4:8c:72:73:7a:15:
                    c6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:78:48:97:74:DA:00:F5:FC:A3:45:84:D2:B2:9E:F9:19:B1:D3:5B
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137372e3135322e34382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:1e:92:8f:b6:05:05:ff:43:f6:e6:d9:b7:1b:0b:42:ac:36:
         91:5c:2d:c8:23:af:89:88:8b:76:c1:6c:71:49:37:de:8b:b3:
         12:c4:7b:b7:fd:b3:6e:35:e4:9b:74:b5:7d:49:93:52:08:47:
         e2:16:a2:86:c5:0b:f0:f4:56:37:09:22:eb:81:ef:a5:a1:54:
         4a:d6:65:c6:54:39:31:aa:7a:c3:22:6b:af:c3:a7:e0:5b:c6:
         26:6f:8e:63:b5:e5:32:db:8b:3c:71:fe:a6:95:1e:ad:6b:3f:
         de:83:95:b5:5e:65:95:b7:58:1c:1f:25:0e:e7:94:8b:2f:20:
         1b:c1:73:49:fe:dd:cf:36:cf:cf:8d:17:56:ee:59:b5:52:8b:
         c2:87:ce:4a:b2:99:4f:ba:3a:56:04:36:50:8b:ed:a6:69:56:
         e7:f6:97:d5:33:f9:92:f1:f7:6c:ab:a8:91:ff:1c:83:62:d8:
         ca:c2:9e:16:ad:cf:ca:63:42:07:e7:6d:10:f1:e2:ed:ab:44:
         76:f7:3d:71:19:f2:15:7c:b7:26:32:b7:fc:19:49:6b:b1:0e:
         b9:4d:0e:ef:85:78:75:29:df:d7:d4:9e:b9:2a:a6:43:0a:51:
         c3:9b:06:8e:ad:3b:bd:8f:5b:e4:78:cb:16:18:1c:ce:45:f6:
         9d:bd:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:23 2025 by rpki-client