Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa
File:                     3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          hKMK0YJGuIhpHpueac8Yn3juIHG16FB46oEkXDmAZ28=
Subject key identifier:   10:4B:DD:9B:7C:D6:E5:CB:CD:48:B9:05:4C:A9:26:6E:3B:15:08:6F
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       74D8B7FD0D7159EF0354826A373289BD9722C736
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:42 +0000
ROA not before:           Tue 04 Feb 2025 18:26:42 +0000
ROA not after:            Tue 03 Feb 2026 18:31:42 +0000
asID:                     52510
IP address blocks:        170.233.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d8:b7:fd:0d:71:59:ef:03:54:82:6a:37:32:89:bd:97:22:c7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:42 2025 GMT
            Not After : Feb  3 18:31:42 2026 GMT
        Subject: CN=104BDD9B7CD6E5CBCD48B9054CA9266E3B15086F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3e:ec:43:37:84:f0:72:8b:64:41:96:da:e2:
                    dc:bb:2b:18:78:7e:82:8b:50:92:15:16:b0:5d:fc:
                    42:74:32:1d:f3:d8:6f:64:2d:71:b3:51:dc:aa:fd:
                    68:6a:d3:5b:b8:74:5b:7b:5e:c3:fd:b8:a2:70:9e:
                    07:5d:0e:71:9c:df:fd:af:4f:6c:af:96:df:07:af:
                    83:cd:eb:e5:e0:00:7f:21:9f:b8:14:c7:39:85:11:
                    9b:97:72:18:3a:a5:b5:e8:ea:19:08:8a:d7:ce:51:
                    46:2d:18:59:28:15:5e:99:bf:ce:04:6e:dd:ef:31:
                    f7:68:72:86:32:40:5f:03:3d:8c:01:c3:53:6d:00:
                    e3:19:93:86:b4:3f:58:f2:48:d5:1e:f6:0a:c2:23:
                    2e:41:12:16:62:ec:33:5c:ab:fa:a3:42:f7:da:d4:
                    38:92:6e:16:4f:c2:95:18:6d:26:7b:8e:7a:0c:9a:
                    66:c0:5a:89:20:e5:01:b7:e3:7e:3e:65:b2:c1:ef:
                    24:d2:36:53:7a:25:f1:ad:28:40:6e:3f:9c:6a:7a:
                    33:5b:f5:ba:09:fa:28:28:47:19:5d:8c:1a:c8:26:
                    07:f1:50:ec:a7:7e:a4:31:63:bb:ec:80:a1:22:04:
                    b6:6e:79:ea:d3:a6:c9:81:fd:df:df:c2:64:52:a6:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4B:DD:9B:7C:D6:E5:CB:CD:48:B9:05:4C:A9:26:6E:3B:15:08:6F
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:35:cf:e9:6b:2b:66:96:ad:2c:54:b9:6d:e9:b7:28:8e:35:
         99:17:10:17:14:d0:54:1a:c9:2a:ed:84:3f:5e:ef:14:2f:4b:
         8e:ca:a9:73:f5:e9:39:56:a8:22:48:5c:cb:d2:99:ab:ec:b0:
         41:82:11:47:58:75:a3:1d:2a:5c:c3:78:f5:8b:8e:32:d1:26:
         05:b5:f9:8e:c1:b4:ba:9b:69:c3:20:aa:30:51:00:b4:a8:f8:
         36:27:f6:95:ec:1c:47:0f:74:1d:66:11:7c:92:79:c2:0e:f5:
         37:b3:9e:e1:43:b8:c0:2d:28:16:2c:cf:65:30:01:99:62:2b:
         79:11:d2:c9:65:cd:9d:73:90:e0:55:24:8a:1f:27:74:d6:7b:
         bf:7e:27:85:cd:26:ec:46:af:48:35:62:8d:4b:d6:d5:a3:0c:
         a1:ff:7a:47:88:5d:8f:bd:3f:5e:2b:d3:11:73:88:a2:c8:14:
         0c:4b:39:0d:86:4e:7b:b6:5d:94:02:eb:8d:3a:17:b9:9b:86:
         c2:b0:56:e7:36:a3:23:7a:30:6d:99:c9:5d:7c:12:72:06:37:
         7e:e0:4a:91:fc:37:2a:77:36:98:11:3c:da:f9:bc:83:e1:ef:
         65:b7:18:23:d0:e3:a8:45:32:b2:68:bd:28:51:7c:ee:d8:a7:
         88:e5:01:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:56:54 2025 by rpki-client