Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa
File:                     3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa (raw, json)
Hash identifier:          pMYJuKExamad0wC9U4YdYdqiMVp2IfYyHXuDHUIo324=
Subject key identifier:   DB:04:9A:89:86:0D:B5:D2:22:54:6C:68:F9:F7:F9:7D:B5:82:DD:D8
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       3C907324AD1F1FF8929F947008EC69113C96EA54
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa
Signing time:             Sun 11 May 2025 02:30:00 +0000
ROA not before:           Sun 11 May 2025 02:25:00 +0000
ROA not after:            Sun 10 May 2026 02:30:00 +0000
asID:                     264859
IP address blocks:        160.238.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:90:73:24:ad:1f:1f:f8:92:9f:94:70:08:ec:69:11:3c:96:ea:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: May 11 02:25:00 2025 GMT
            Not After : May 10 02:30:00 2026 GMT
        Subject: CN=DB049A89860DB5D222546C68F9F7F97DB582DDD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:89:6c:aa:44:31:c5:65:55:79:e8:93:07:
                    96:13:1c:d7:31:11:c3:c3:94:3c:9a:12:26:b4:bc:
                    02:58:0f:24:cc:20:4f:8c:3c:26:49:6c:b6:a5:84:
                    43:50:9b:ce:98:bb:53:1d:aa:16:d7:14:af:36:93:
                    38:b8:57:f8:1d:e3:1f:b9:09:1a:a6:de:bd:15:4f:
                    4d:8c:ba:13:a9:51:9c:8b:35:c3:1d:0a:95:85:e8:
                    da:db:92:e3:42:bf:b2:dc:e2:28:4c:47:d9:67:52:
                    8e:2b:bb:4c:ef:0c:2f:ab:61:51:84:15:af:45:35:
                    8f:49:98:17:7f:cb:1b:46:01:7d:86:06:89:fd:9d:
                    db:ab:67:87:e3:b3:42:80:b5:1a:58:e2:2d:20:02:
                    ab:af:f8:a3:f4:3a:08:d2:88:0b:b2:79:9b:41:82:
                    16:9e:3f:2d:5d:57:80:25:46:fe:12:cd:64:5b:e9:
                    a0:79:d0:25:b5:7d:f3:96:f3:c0:ff:d3:d1:96:61:
                    31:c5:b9:a9:1f:f0:15:6e:98:10:e3:b6:b1:73:59:
                    c3:cc:4d:9a:76:46:68:80:42:4d:3b:70:fb:af:e5:
                    fd:45:39:ba:13:c7:e2:5a:45:dd:36:74:e2:23:a7:
                    df:80:61:47:b0:7d:34:a3:76:5a:a6:aa:8b:a4:31:
                    c0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:04:9A:89:86:0D:B5:D2:22:54:6C:68:F9:F7:F9:7D:B5:82:DD:D8
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3233203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:63:14:ab:1e:e1:a2:b4:ce:0f:bf:73:3e:df:da:12:b1:a8:
         0b:4d:09:a1:ef:c9:b9:5b:37:08:cf:8e:05:3e:d6:63:18:e6:
         33:f1:84:94:50:35:a0:f8:3b:c7:98:4e:2a:9b:ca:0b:98:eb:
         be:68:d9:24:c2:f2:28:bc:92:19:2d:4d:71:de:76:4b:a3:3c:
         7a:0a:85:e1:1f:85:60:ad:b7:41:96:f7:39:b5:ff:1d:a6:e5:
         b8:34:82:6a:d4:a7:66:25:e2:b9:70:80:7b:f2:33:7f:14:37:
         52:9e:d3:4b:73:13:73:c8:c3:eb:9e:5e:55:00:87:5d:60:59:
         b3:eb:ab:32:74:38:ac:b7:85:0a:b2:2e:ff:71:51:23:18:11:
         77:53:a5:b5:f7:61:3c:75:dc:0c:34:de:92:6a:df:69:83:19:
         f9:2e:53:b6:58:89:17:a4:9b:61:bc:3b:5e:d5:a4:b9:95:50:
         b1:ff:99:a0:c2:8d:8d:b6:d8:61:c0:ff:8b:92:17:b3:93:25:
         63:78:68:ea:f9:93:7f:b1:4c:6a:fb:70:f5:1c:10:6d:ae:e7:
         fb:19:37:9b:f0:d0:fe:55:b9:a3:d4:56:e4:d1:57:79:ca:6b:
         50:21:44:34:c3:7d:72:ba:48:d0:e6:38:79:7d:55:56:db:ae:
         92:8a:01:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:52:56 2025 by rpki-client