Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/3138372e36332e3135362e302f32322d3234203d3e20323732303537.roa
File:                     3138372e36332e3135362e302f32322d3234203d3e20323732303537.roa (raw, json)
Hash identifier:          cV+hh9t6lRecjlgtORe3F7caS4PW4mTYoEhURQobOHc=
Subject key identifier:   3C:98:6A:03:45:B2:FF:B4:B0:A5:9F:1E:5E:82:54:70:5A:E2:C1:F7
Certificate issuer:       /CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54
Certificate serial:       668BC60706ABC05AEB7EAF2577CA9FA246D40A9F
Authority key identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/3138372e36332e3135362e302f32322d3234203d3e20323732303537.roa
Signing time:             Tue 04 Feb 2025 18:45:32 +0000
ROA not before:           Tue 04 Feb 2025 18:40:32 +0000
ROA not after:            Tue 03 Feb 2026 18:45:32 +0000
asID:                     272057
IP address blocks:        187.63.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:8b:c6:07:06:ab:c0:5a:eb:7e:af:25:77:ca:9f:a2:46:d4:0a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54
        Validity
            Not Before: Feb  4 18:40:32 2025 GMT
            Not After : Feb  3 18:45:32 2026 GMT
        Subject: CN=3C986A0345B2FFB4B0A59F1E5E8254705AE2C1F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:77:e4:a1:1c:d5:3b:19:75:f6:22:75:69:6e:
                    49:5f:90:5a:92:b5:d2:af:ee:b2:fd:2a:89:06:e6:
                    93:9e:09:7f:68:11:30:66:2e:92:ea:7f:da:88:ed:
                    8b:d3:63:c1:6d:37:8a:1c:74:51:10:a2:a0:4f:51:
                    ca:ca:96:02:88:7c:99:83:64:e8:83:dd:46:54:b8:
                    21:38:a3:c1:b8:13:f5:94:ae:93:ee:68:19:88:f9:
                    c8:71:a0:60:e9:1a:0a:73:06:cf:89:c5:f4:be:94:
                    c5:81:bc:e9:a4:94:94:5d:77:8a:3a:94:95:a1:ad:
                    07:dc:c5:fd:84:e7:2b:56:a6:2a:31:91:79:a6:2a:
                    9e:06:aa:c4:0c:0d:4c:e1:a5:62:fb:23:80:3e:47:
                    7f:65:39:fe:49:1e:46:47:6f:a5:5a:17:a4:8a:b1:
                    d9:df:87:88:d1:e2:73:73:fe:ea:87:49:1f:12:f1:
                    b1:86:d0:d2:f0:5d:59:5b:d3:bb:4c:8f:31:b3:21:
                    02:fc:0f:64:73:ed:9a:80:af:76:70:d2:d2:d1:e4:
                    62:1d:3f:c8:33:8c:eb:e3:dc:f1:7e:93:76:db:d8:
                    e0:3a:30:ef:42:31:77:0c:f8:15:fd:d8:90:fc:02:
                    e4:7f:1b:3d:0e:3b:51:b1:aa:cb:d7:ca:dc:e4:2e:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:6A:03:45:B2:FF:B4:B0:A5:9F:1E:5E:82:54:70:5A:E2:C1:F7
            X509v3 Authority Key Identifier:
                keyid:92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/3138372e36332e3135362e302f32322d3234203d3e20323732303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:37:61:8f:1e:70:e4:f7:29:6e:51:91:1a:cc:94:e4:11:58:
         bc:a9:3f:90:8c:6b:f3:83:7b:e3:81:41:8b:8b:82:51:2a:3a:
         47:4c:30:b6:64:3b:eb:06:ae:db:a1:23:cf:10:b2:f3:e9:d8:
         7c:41:b7:bf:5b:26:e6:91:a1:e0:0d:40:b0:b1:93:ef:da:70:
         b9:20:7f:69:fb:58:1c:9f:c3:20:d2:fd:a1:5c:9e:e8:6b:12:
         88:9c:08:a6:97:0e:82:bc:7d:03:62:5a:7f:61:9b:a0:fd:40:
         0c:3a:1d:2f:59:22:7f:ff:74:12:ea:0a:04:13:77:17:eb:08:
         aa:df:62:b7:6a:67:3b:fb:80:97:02:40:87:2d:c5:ff:eb:06:
         dd:1c:eb:b7:ee:db:5a:99:e4:d9:43:98:fe:06:6d:82:69:4a:
         e7:c2:6c:a6:0f:42:34:c6:13:7d:a4:25:17:b7:57:9d:43:fa:
         82:54:60:a7:99:83:df:93:e2:c8:ba:69:fb:aa:7a:03:0c:f5:
         2c:9c:99:70:f0:d3:3b:8b:74:50:02:f2:cb:9f:fc:d4:d1:9b:
         a5:13:16:95:02:a3:0b:72:17:83:d4:a6:64:22:9f:67:df:3f:
         19:79:86:2d:21:0d:94:a8:cf:dd:ef:eb:85:02:89:a3:b1:29:
         92:a6:41:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:57:33 2025 by rpki-client