Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
File:                     3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa (raw, json)
Hash identifier:          u6icCacAvU2eAR3nY02JRuCz7LfSgWtSOEDSgnYiR1U=
Subject key identifier:   4D:6E:6D:02:5C:AA:AD:23:35:52:E9:80:52:13:2B:09:B1:9E:58:1E
Certificate issuer:       /CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
Certificate serial:       3F204EBBDD6B9F8F8938A4A703DBF0A5C6ABA9EF
Authority key identifier: B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
Signing time:             Tue 04 Feb 2025 18:22:09 +0000
ROA not before:           Tue 04 Feb 2025 18:17:09 +0000
ROA not after:            Tue 03 Feb 2026 18:22:09 +0000
asID:                     265638
IP address blocks:        170.246.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 26 Apr 2025 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:20:4e:bb:dd:6b:9f:8f:89:38:a4:a7:03:db:f0:a5:c6:ab:a9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
        Validity
            Not Before: Feb  4 18:17:09 2025 GMT
            Not After : Feb  3 18:22:09 2026 GMT
        Subject: CN=4D6E6D025CAAAD233552E98052132B09B19E581E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:03:ab:a1:02:a6:16:2f:f4:d8:6e:79:84:
                    0b:a6:58:0e:c5:cf:a6:2f:ad:4d:9c:99:61:bb:87:
                    02:5c:4b:36:55:ba:ff:72:b4:7c:77:31:49:ab:8c:
                    d2:ff:18:ad:ed:74:dc:02:4c:40:b9:58:70:a4:75:
                    2a:74:1c:46:33:4c:fa:30:1b:14:ef:7c:62:59:eb:
                    3a:d3:2e:12:3c:b2:6a:67:d5:5f:7b:66:b1:9d:fc:
                    3e:47:3b:e9:c8:77:cd:0b:96:da:4b:37:f9:1c:68:
                    7f:40:46:55:c2:a9:17:08:0f:3e:b3:7e:88:88:32:
                    d4:a8:7b:72:68:fa:83:41:3f:49:0b:bc:57:86:f0:
                    6e:09:a5:47:fd:84:98:ca:ad:eb:9d:3c:41:7f:cb:
                    ad:33:d6:9f:63:aa:29:e7:bc:a9:b6:2f:86:32:6d:
                    dd:dd:e1:4c:cf:a1:6e:6f:27:cd:ca:d2:19:cf:0d:
                    a7:23:ce:63:8d:22:a0:39:52:56:d2:60:7f:7b:3d:
                    12:11:b1:e8:aa:f0:8b:3d:70:1e:70:fc:86:2b:4a:
                    a2:23:1d:14:87:8b:a0:31:d6:41:30:cf:53:25:84:
                    2a:6a:cd:52:08:4e:69:a8:ff:18:48:96:48:e4:a6:
                    75:bd:8b:3d:4d:0c:66:a4:c9:63:7e:78:a8:b8:3c:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6E:6D:02:5C:AA:AD:23:35:52:E9:80:52:13:2B:09:B1:9E:58:1E
            X509v3 Authority Key Identifier:
                keyid:B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:89:c9:3c:a6:5e:57:a7:17:f4:ab:b0:92:c3:d1:51:b4:
         64:22:fe:69:09:2d:ee:dc:30:e6:25:a5:fa:3a:33:4b:e4:bb:
         69:87:b0:ef:5a:23:fd:e0:7f:7f:d1:e3:3c:ae:e5:ec:89:93:
         da:e6:6b:bc:86:a6:b8:9f:67:5d:7e:a0:31:3a:bd:13:5a:6a:
         1c:b4:a4:b2:9a:73:66:59:e8:fe:b6:1b:f2:b2:c0:6d:d1:71:
         e8:14:86:8d:97:3f:c2:7c:79:99:6b:b2:df:ad:63:01:c1:da:
         8c:e7:84:45:b5:0e:fb:07:04:28:e4:eb:92:44:c1:f2:80:c5:
         b4:78:4c:f8:f5:3d:b8:b3:97:2a:af:d8:59:c6:e3:3e:19:ff:
         9e:17:5b:72:66:da:ce:de:9e:c2:1b:49:7d:f1:2b:69:e2:79:
         93:5d:eb:5b:dd:54:db:f9:d3:44:62:bc:53:ea:d8:f7:b3:c9:
         84:2d:4d:75:c9:f9:05:5e:5b:de:c7:2f:d6:0c:df:a4:1e:e6:
         57:35:8a:a0:35:bf:3f:33:1c:44:fb:e9:44:5d:c5:1e:f5:29:
         23:ce:30:98:66:cc:5d:5e:d0:26:a4:ac:87:0e:12:e8:80:7f:
         95:eb:67:a8:9c:57:38:46:8a:69:30:82:e5:e4:ec:95:e1:3d:
         ee:d9:5c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 11:09:20 2025 by rpki-client