Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa
File:                     3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa (raw, json)
Hash identifier:          KO1SSpavTbyg7HFRtvqMyJWEB+ZnlB3T7roiVm6a7Z8=
Subject key identifier:   1D:D6:53:03:BB:53:CC:5E:AD:ED:DA:3E:A0:34:0D:DF:44:28:74:6F
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       72A0A91761B87AC9BC6E7659117B5D2ED25059F2
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa
Signing time:             Sun 11 May 2025 02:30:01 +0000
ROA not before:           Sun 11 May 2025 02:25:01 +0000
ROA not after:            Sun 10 May 2026 02:30:01 +0000
asID:                     264859
IP address blocks:        160.238.254.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 21 May 2025 23:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a0:a9:17:61:b8:7a:c9:bc:6e:76:59:11:7b:5d:2e:d2:50:59:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: May 11 02:25:01 2025 GMT
            Not After : May 10 02:30:01 2026 GMT
        Subject: CN=1DD65303BB53CC5EADEDDA3EA0340DDF4428746F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:43:29:9f:e5:c2:61:71:04:86:c7:a9:06:36:
                    7e:09:9d:79:fb:d5:6e:65:7e:da:21:7f:bc:5b:70:
                    e6:62:27:62:10:fd:19:ce:47:c8:e2:c7:2f:a6:4b:
                    86:3e:7c:a3:0b:90:8a:b4:eb:c6:c8:ac:52:d3:46:
                    9b:a5:14:63:fa:19:f8:78:c0:50:7a:a9:5b:87:39:
                    da:a1:de:92:7e:09:b1:48:48:45:fa:c8:b9:12:49:
                    7e:81:4f:44:7e:1b:87:e3:7e:55:ec:a7:44:b9:31:
                    f8:9e:a4:c1:7c:06:49:1f:da:3f:92:ef:92:70:cd:
                    fa:04:f0:9d:8c:3d:1a:81:e0:6e:18:4c:9b:7f:37:
                    a9:48:69:51:a2:e5:98:21:dc:d5:77:4a:19:55:e7:
                    9d:46:26:25:c6:60:4b:0a:b3:01:c3:09:e8:ec:39:
                    e6:be:65:67:c8:83:9b:13:1f:48:2a:f0:92:a4:da:
                    ac:bc:c0:d8:d4:c6:f8:2c:2a:fc:6f:cb:d8:d6:39:
                    6a:f6:fe:ac:11:f3:2d:ca:c9:2f:da:5f:18:98:9e:
                    9a:ff:a3:11:26:8a:89:dc:86:0d:56:0a:8a:dd:46:
                    cb:f9:9a:e6:0d:28:d3:ee:42:a3:c8:f3:82:01:1e:
                    dc:a2:cd:1e:c5:e0:d3:23:d6:4c:b7:ac:df:b4:f1:
                    03:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D6:53:03:BB:53:CC:5E:AD:ED:DA:3E:A0:34:0D:DF:44:28:74:6F
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3136302e3233382e3235342e302f32332d3234203d3e20323634383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:d7:2d:2a:8c:e4:89:d8:28:48:a6:e3:23:1e:58:19:dd:79:
         fd:e7:a2:55:a7:3f:04:44:c9:c2:0d:ed:1e:af:10:1a:02:0e:
         d4:7c:34:1e:bf:2c:91:be:87:fe:58:25:61:b9:aa:24:82:58:
         ee:93:25:6a:94:a7:10:c4:55:01:9e:d5:a9:51:c3:02:a6:93:
         07:d0:9f:70:bb:79:39:6a:0a:d1:d4:3d:c2:37:4b:e1:aa:eb:
         c1:ed:a7:af:30:81:88:11:18:8b:96:6d:b3:ff:4a:70:7f:f0:
         56:39:7e:48:c1:ab:ed:b8:75:dc:61:b3:52:bc:f8:53:73:17:
         32:d0:ef:56:9c:d5:7d:e7:e7:9f:87:c7:65:95:75:da:4a:22:
         0c:53:53:00:1e:d8:19:4e:56:c5:b7:7f:1f:00:55:fa:12:b9:
         a7:0d:23:da:f9:ef:40:55:68:4a:44:94:32:3c:a1:1b:d3:2b:
         05:cf:dc:5e:03:42:a9:67:94:b7:bb:9e:2e:30:50:f8:87:09:
         d6:45:63:5e:0b:51:e9:64:2f:33:e6:a0:fd:14:fd:d5:0e:0a:
         15:7b:3a:a9:ca:68:aa:4e:4d:74:f4:52:21:5d:f0:3e:e1:6c:
         65:ea:79:e9:3a:ca:c8:e6:f1:d8:b9:0a:61:f5:77:04:4b:27:
         1f:b2:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 10:50:48 2025 by rpki-client