Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa
File:                     3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa (raw, json)
Hash identifier:          TQnvYhDAZYFiLp+yK3ipM9mMZiGwQz10Jo9mY0c0E08=
Subject key identifier:   E6:85:67:C5:A7:8B:CA:90:3D:6D:52:88:49:45:76:41:CC:CA:40:2F
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       470BFDD3EC66D668CE7FA066FA0E0FFA5005AA66
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa
Signing time:             Sun 11 May 2025 02:30:00 +0000
ROA not before:           Sun 11 May 2025 02:25:00 +0000
ROA not after:            Sun 10 May 2026 02:30:00 +0000
asID:                     264859
IP address blocks:        160.238.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:0b:fd:d3:ec:66:d6:68:ce:7f:a0:66:fa:0e:0f:fa:50:05:aa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: May 11 02:25:00 2025 GMT
            Not After : May 10 02:30:00 2026 GMT
        Subject: CN=E68567C5A78BCA903D6D528849457641CCCA402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:d6:aa:91:7f:22:69:ee:29:c1:41:00:25:
                    75:3e:f8:43:c6:0a:f5:93:60:6e:20:e9:12:73:53:
                    4f:0c:5e:0c:0e:ed:81:5b:a6:f9:ce:f7:6c:70:16:
                    f9:54:8b:ce:06:24:c4:45:0b:37:23:ce:b0:c3:1d:
                    44:da:f1:c0:0f:21:37:34:fa:9c:a8:cb:29:c7:87:
                    28:ec:55:54:48:57:9f:a8:ea:4d:6d:9e:a8:e3:ad:
                    9c:72:66:f2:61:a7:23:18:e2:71:3b:08:62:ef:c0:
                    46:63:6b:9d:58:29:c5:24:f5:f7:37:ee:cf:a8:0d:
                    a9:5c:db:3a:5d:70:88:c0:d6:ab:89:25:de:0e:c9:
                    5d:1c:b6:1d:97:77:ce:7b:1c:80:a5:f1:dd:e0:7b:
                    eb:05:9e:2d:f6:70:b9:71:a4:b0:ab:1b:17:ff:2d:
                    32:d0:e0:1d:49:84:0e:e7:09:e6:58:1d:a8:f3:11:
                    e2:62:21:a2:71:5e:1b:e3:e8:2e:49:59:f2:e5:77:
                    43:7f:f7:c3:6d:ef:a9:8d:16:18:29:2e:3d:02:01:
                    59:c9:20:0b:85:52:b7:33:98:35:1f:6b:34:b0:a7:
                    79:d1:b0:f4:ed:d2:12:9c:7e:0a:39:c1:84:54:b4:
                    a7:9d:1d:1f:41:f7:b3:af:a0:d2:aa:ac:c5:6e:d3:
                    d0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:67:C5:A7:8B:CA:90:3D:6D:52:88:49:45:76:41:CC:CA:40:2F
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235322e302f32332d3233203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:ed:5f:16:03:6f:6e:5b:ec:3b:c2:fa:30:5b:98:2f:d9:c1:
         d2:67:f0:10:f3:11:b4:cc:b1:23:3e:58:20:29:6b:53:5f:0a:
         0b:31:03:1b:4f:08:98:3c:4c:78:32:4e:8d:89:c8:df:38:9e:
         a7:af:7f:46:6e:24:6d:6a:ee:36:16:d7:2f:55:0c:41:01:fb:
         2c:f5:10:96:04:97:26:02:e7:17:5f:a7:6d:0d:29:f6:61:75:
         87:2e:1d:db:f4:02:02:6c:9e:c2:9e:3d:3f:9b:3d:52:86:6d:
         27:bb:85:43:6c:2f:62:73:16:97:d4:03:01:8e:8f:1b:ff:1a:
         dc:c0:af:7a:99:20:b0:30:dc:72:c7:b6:90:b6:b4:d0:b5:0a:
         71:31:73:77:2c:c4:ef:dc:68:77:8b:44:cc:be:46:4b:d3:b4:
         b8:78:4a:99:6b:fb:84:dd:60:7c:a1:14:ff:9d:f2:0f:ab:aa:
         44:9e:96:76:db:64:39:2f:79:5e:19:60:8c:f1:2f:82:c9:84:
         32:60:25:a5:79:1e:fa:3b:1b:12:39:87:fa:5f:5b:94:b5:89:
         64:eb:9a:a4:c7:06:77:3c:28:ae:71:62:74:d2:73:4c:37:d1:
         6b:49:f0:ca:30:72:2a:c7:ba:1e:5c:8a:67:e5:d3:1c:40:28:
         4b:e2:86:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:48:13 2025 by rpki-client