Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa
File:                     3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa (raw, json)
Hash identifier:          xcCvSvgTZ6jp16eQTXdqtZml4bNI86b33I8zl76rGbY=
Subject key identifier:   5B:F9:D2:5C:C1:28:73:A4:81:51:D8:6B:23:28:C3:E1:FF:90:FD:56
Certificate issuer:       /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial:       4A5D15012FD6048111481101068E5FE7566C3E46
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa
Signing time:             Tue 04 Feb 2025 18:50:14 +0000
ROA not before:           Tue 04 Feb 2025 18:45:14 +0000
ROA not after:            Tue 03 Feb 2026 18:50:14 +0000
asID:                     265540
IP address blocks:        192.141.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:15:01:2f:d6:04:81:11:48:11:01:06:8e:5f:e7:56:6c:3e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
        Validity
            Not Before: Feb  4 18:45:14 2025 GMT
            Not After : Feb  3 18:50:14 2026 GMT
        Subject: CN=5BF9D25CC12873A48151D86B2328C3E1FF90FD56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:55:fd:5e:8b:0e:bf:5d:a7:dd:31:32:d0:
                    f7:fe:e5:ec:4b:4f:46:e0:d0:bf:18:cb:ef:cc:80:
                    be:e2:e8:46:59:c4:8f:86:14:6e:b2:c1:0f:f4:4c:
                    fc:e9:af:7c:f1:0c:6e:85:79:16:89:ff:96:0c:04:
                    d6:19:bb:0b:c4:64:16:dd:cc:ea:7a:ad:a9:01:10:
                    b8:5e:e3:91:42:22:28:1b:20:13:ed:9e:e2:9d:5a:
                    4e:74:cd:47:b9:cc:70:77:ee:97:b7:01:ce:74:46:
                    82:ad:ee:43:16:fe:43:13:38:0e:5c:5a:23:77:04:
                    7c:56:1f:e0:fe:51:2b:cb:40:41:b0:3b:11:02:c2:
                    16:71:23:b4:42:20:0d:bc:03:99:0b:0c:59:b3:ad:
                    4c:44:16:67:8b:86:a0:4d:01:78:1e:c4:84:eb:3b:
                    05:db:ab:f3:06:03:07:08:4b:5b:e9:47:bd:eb:bf:
                    79:e5:98:d4:e1:84:49:e7:ab:9f:70:82:b8:31:41:
                    d4:ae:e6:23:a7:17:a0:74:28:58:c8:21:d6:97:18:
                    43:45:88:c7:76:e6:c9:04:a8:47:e6:a8:ea:0f:44:
                    c9:c6:bf:67:c2:5a:c0:1c:7c:38:f5:0f:46:66:02:
                    74:f6:65:14:43:17:fe:53:2d:e6:41:03:40:4f:2e:
                    3d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F9:D2:5C:C1:28:73:A4:81:51:D8:6B:23:28:C3:E1:FF:90:FD:56
            X509v3 Authority Key Identifier:
                keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3139322e3134312e3234342e302f32322d3234203d3e20323635353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:58:9e:56:ec:1d:3f:15:c0:f3:7a:4f:80:7b:aa:42:91:e1:
         88:03:6a:66:cc:0d:1d:fb:22:bd:73:b3:3b:10:b3:24:04:dc:
         0b:50:56:8a:50:26:f2:a2:f6:7e:72:f1:12:a7:68:98:39:c1:
         09:cb:32:3a:18:48:ef:37:70:5e:77:4a:31:21:dd:40:a8:9b:
         fc:41:e9:d3:84:8a:23:c4:9b:a7:02:55:42:6a:e8:51:0c:b6:
         f0:2d:29:95:91:38:ff:4a:cb:39:57:6c:26:a9:85:6f:16:ce:
         fb:a9:f8:93:d4:ca:49:35:46:ef:4a:98:ac:63:cf:44:15:35:
         9f:43:f5:a8:ef:f2:77:64:22:51:96:22:71:b9:00:c1:55:ef:
         f2:28:91:7c:47:17:34:03:b0:19:fd:63:f4:68:15:e2:5d:3d:
         91:e8:d3:71:19:ff:b0:34:10:5e:68:12:6b:10:dd:f6:48:5d:
         ad:67:cd:96:ed:b4:95:86:dd:93:5a:da:d1:20:23:9d:fc:6a:
         4a:ae:ae:7e:d4:f2:a9:3b:9f:da:08:33:70:b9:f4:03:cc:e7:
         fa:bd:23:a7:8b:8d:e0:d4:98:5d:af:26:47:97:49:7b:f2:73:
         85:b4:be:de:a6:b3:0d:22:9e:dc:84:b0:d9:2e:10:8b:57:9d:
         dd:34:fb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:28:30 2025 by rpki-client