Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
File:                     32342e3135322e34302e302f32322d3234203d3e20323639393736.roa (raw, json)
Hash identifier:          nugiQ0IcwQKTZxJTccpQeNrv7gIfXVcuO1fqP7AbTCw=
Subject key identifier:   61:E5:29:A9:99:AD:76:58:77:58:0A:EE:C1:E7:27:8D:71:B4:64:46
Certificate issuer:       /CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
Certificate serial:       50E31C7C706CA15A441977B30575F6D9A25A7BBC
Authority key identifier: 8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa
Signing time:             Tue 04 Feb 2025 18:40:48 +0000
ROA not before:           Tue 04 Feb 2025 18:35:48 +0000
ROA not after:            Tue 03 Feb 2026 18:40:48 +0000
asID:                     269976
IP address blocks:        24.152.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:1c:7c:70:6c:a1:5a:44:19:77:b3:05:75:f6:d9:a2:5a:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C70DCCF275B14717F6A12414F1EE13DAFCE4E72
        Validity
            Not Before: Feb  4 18:35:48 2025 GMT
            Not After : Feb  3 18:40:48 2026 GMT
        Subject: CN=61E529A999AD765877580AEEC1E7278D71B46446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:c7:85:9b:cf:d6:2b:aa:cc:41:a9:9b:71:51:
                    5a:5d:1e:92:4b:ab:9d:99:4b:ef:4d:63:be:4b:cf:
                    87:36:7a:2a:b8:18:a5:02:66:5e:22:c6:ca:79:32:
                    dc:3d:18:24:53:80:4f:f8:25:aa:bf:ff:8c:26:b1:
                    48:40:d4:a4:be:67:28:67:ce:20:7a:bd:39:d8:e7:
                    56:14:64:23:d1:33:6a:9f:4a:a0:54:ed:d0:70:df:
                    36:7e:d1:4a:ff:43:a3:f2:2f:6d:1b:29:94:2c:ef:
                    cb:ee:0b:26:52:73:03:d9:3a:d2:c8:8d:aa:4e:13:
                    f7:30:cc:3d:9f:b2:ab:f5:44:bb:ed:c4:b0:33:de:
                    8e:d6:82:20:dc:3b:a7:19:d9:38:a9:4b:fe:a9:f8:
                    3e:83:5a:ff:4e:6a:83:98:ce:85:bf:be:be:ab:58:
                    c3:f9:09:cd:16:ef:2a:be:20:b2:84:90:6c:38:29:
                    2d:6e:2f:24:aa:53:05:87:29:33:e9:b7:c7:df:cd:
                    fe:50:f9:c6:d4:88:e9:a6:c1:99:81:af:54:14:76:
                    ae:22:7d:80:67:72:90:12:a9:65:a9:bd:c5:a8:59:
                    57:29:ee:b5:d6:0b:df:62:38:f5:46:46:e7:07:bd:
                    5c:ec:e9:51:b4:8f:e9:1d:f2:79:7a:8b:60:4d:ce:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:29:A9:99:AD:76:58:77:58:0A:EE:C1:E7:27:8D:71:B4:64:46
            X509v3 Authority Key Identifier:
                keyid:8C:70:DC:CF:27:5B:14:71:7F:6A:12:41:4F:1E:E1:3D:AF:CE:4E:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C70DCCF275B14717F6A12414F1EE13DAFCE4E72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC0D240BAF1D9BBAA6E24132647E538E0107F8F14360AD112738FE79C0900110/0/32342e3135322e34302e302f32322d3234203d3e20323639393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:95:28:97:e9:7e:2e:47:5a:bb:a6:e1:6b:b2:45:e7:8a:36:
         f8:85:15:59:fc:df:bc:d4:e5:d1:db:d2:57:58:cd:10:82:cd:
         f1:f0:d1:7a:5e:c1:9b:2c:1e:8c:51:87:ec:61:61:7f:fb:c5:
         2b:d9:f3:c4:53:d4:bf:54:69:bd:76:60:f7:4d:14:aa:b6:c9:
         ae:1c:9f:36:12:9f:fd:46:fe:96:d3:22:3d:85:40:98:ae:cc:
         38:c9:af:8b:34:6d:d7:d9:94:f5:68:d4:40:fd:6b:46:e2:01:
         a8:62:fa:98:f2:d1:dc:f4:21:6b:8d:49:f0:46:fe:7a:e9:78:
         25:c4:8f:5a:d1:d2:fc:ac:81:ab:0a:aa:d7:00:da:56:5f:fe:
         49:ed:c6:88:6e:cd:ea:77:96:3f:a0:03:50:2d:08:15:2c:f1:
         b0:cf:0d:32:8f:51:c9:61:f8:78:02:c5:e4:9a:f2:7e:9a:1e:
         00:7f:1e:50:f2:5a:01:38:2f:7a:12:c8:01:14:6b:c7:40:ae:
         ab:e2:26:d5:8a:af:a1:20:e3:56:40:4d:26:cf:f3:89:ae:1c:
         43:6f:56:25:26:30:e0:65:39:da:6f:ae:bb:ce:7c:53:3f:67:
         05:63:2a:98:85:bd:1e:b1:c7:9f:6f:a7:00:f1:67:63:bc:85:
         7c:0f:be:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:14:05 2025 by rpki-client