Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32322d3232203d3e203238343038.roa
File:                     3137302e3234342e3130382e302f32322d3232203d3e203238343038.roa (raw, json)
Hash identifier:          Q0KxeATq9kxvtkH/HTN2jRYKbxWHd9o6so5P6qqtt88=
Subject key identifier:   E1:F8:79:4A:17:03:F8:C5:CF:87:5F:68:9C:0F:73:2A:36:1D:B7:E5
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       4A00866497CE117F28D194B2CFA91DC18BAD1FDC
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32322d3232203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:54 +0000
ROA not before:           Tue 04 Feb 2025 18:28:54 +0000
ROA not after:            Tue 03 Feb 2026 18:33:54 +0000
asID:                     28408
IP address blocks:        170.244.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:00:86:64:97:ce:11:7f:28:d1:94:b2:cf:a9:1d:c1:8b:ad:1f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:54 2025 GMT
            Not After : Feb  3 18:33:54 2026 GMT
        Subject: CN=E1F8794A1703F8C5CF875F689C0F732A361DB7E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:46:ca:77:c3:4b:d8:e5:8e:2f:a1:f6:03:
                    d5:2e:d5:86:1d:cb:82:dc:b1:ac:63:b9:b2:32:da:
                    31:51:06:8f:98:ad:44:21:81:16:84:8e:38:b2:31:
                    48:af:b7:14:7a:7f:f6:e4:dc:4a:81:f2:24:1d:83:
                    37:8e:db:90:6d:31:05:6d:c9:42:f7:1d:64:31:67:
                    0e:96:1a:5d:c5:ca:26:2e:a5:4d:99:d4:e2:1f:13:
                    a3:ea:ab:5f:e1:fa:30:84:ab:b5:43:d0:83:c5:fe:
                    4e:34:7f:44:69:83:b0:26:c9:55:ad:09:0a:a4:08:
                    5a:03:30:e1:ba:0c:03:e5:aa:04:21:61:6b:db:3e:
                    b1:9d:50:db:cc:4a:04:20:03:67:83:84:cc:52:2e:
                    59:8a:e1:6f:7e:ee:76:2f:b4:b3:42:e0:a5:65:fc:
                    03:35:22:70:27:a4:f3:b3:82:40:c4:13:20:9d:0a:
                    0a:7c:9e:5f:f8:82:88:6a:5d:e2:ec:9d:78:c1:f8:
                    48:b8:28:39:23:5e:f7:15:9e:87:0e:c0:f4:d4:66:
                    fc:f7:93:5d:b9:61:dd:88:11:09:c7:4c:28:6f:06:
                    a8:37:d2:80:62:c5:2e:32:86:98:46:01:50:85:8a:
                    4c:94:d9:3e:23:46:5d:fa:ca:c9:7c:80:a7:cc:e8:
                    ef:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F8:79:4A:17:03:F8:C5:CF:87:5F:68:9C:0F:73:2A:36:1D:B7:E5
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130382e302f32322d3232203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:50:91:3b:32:c5:2e:8e:52:23:d8:9b:8f:b2:66:8f:85:27:
         71:03:0f:30:cc:ec:40:d5:f4:aa:45:5f:e0:c7:83:04:f2:25:
         db:f7:fe:64:4c:50:dd:ad:6c:bc:d0:42:1d:67:20:4c:38:9f:
         0b:e9:d8:8e:8a:75:ba:a9:dd:7a:79:36:c0:3a:1b:fc:24:1e:
         70:2e:6c:c8:f2:99:10:71:79:b1:f1:85:e8:23:0b:a0:d5:d4:
         bd:64:20:d3:86:a8:6e:9d:b3:3e:b3:b0:77:8a:dd:d1:6e:36:
         d9:01:36:77:59:3c:61:82:65:b6:e0:43:72:c3:d1:fb:28:9f:
         e6:c9:31:e2:5d:e8:7a:73:f7:d4:d3:b6:76:1d:eb:27:9a:e9:
         45:ca:8b:60:33:b6:f6:f4:b8:fd:fb:6d:b4:d1:f0:ae:e7:3c:
         2f:53:0d:cc:3a:a5:e6:32:cd:f0:bf:dd:b8:99:95:d4:c2:64:
         a9:dd:04:c0:e6:3c:c6:95:cb:54:7b:a8:d7:e2:11:b9:47:bc:
         72:10:3e:bb:a3:39:80:31:f7:dc:b3:6e:29:88:0c:e4:5c:ed:
         fc:73:84:25:c1:a5:f4:d2:84:00:30:10:d3:99:a3:4c:ca:12:
         40:d3:c1:d9:0b:eb:e7:48:8f:18:f3:b6:ca:96:46:c9:18:59:
         e3:65:c4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:34 2025 by rpki-client