Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131312e302f32342d3234203d3e203238343038.roa
File:                     3137302e3234342e3131312e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          TSviLVCtoLq6m3oEA/cHlZ448hiJKlv2/D0r6d7S+OM=
Subject key identifier:   D1:68:47:E7:23:86:B0:16:40:66:08:25:C9:BC:55:60:07:EA:E2:DD
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       4D2E61BD8F393B4574615C889B9DE26706FF5780
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131312e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 04 Feb 2025 18:33:52 +0000
ROA not before:           Tue 04 Feb 2025 18:28:52 +0000
ROA not after:            Tue 03 Feb 2026 18:33:52 +0000
asID:                     28408
IP address blocks:        170.244.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 19 Apr 2025 23:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:2e:61:bd:8f:39:3b:45:74:61:5c:88:9b:9d:e2:67:06:ff:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Feb  4 18:28:52 2025 GMT
            Not After : Feb  3 18:33:52 2026 GMT
        Subject: CN=D16847E72386B01640660825C9BC556007EAE2DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:92:e6:8e:d3:a2:5c:29:c8:54:fa:2c:65:0f:
                    5c:ef:8e:30:6c:ee:8b:63:4a:86:65:8e:b9:08:8f:
                    b2:7c:1a:bb:bc:60:76:fe:0b:8e:5c:e1:61:f4:6b:
                    f1:26:12:82:d2:32:a6:fa:94:4e:39:e3:1b:ea:e3:
                    69:de:0f:71:b1:33:f2:12:c0:90:66:84:54:e3:80:
                    79:be:67:5a:45:58:3a:b3:6f:2b:aa:fa:96:38:6a:
                    4a:08:89:a2:cf:58:03:ba:fa:2e:02:0c:73:14:5b:
                    07:73:20:3d:ce:0f:15:53:64:67:6d:4f:5d:06:5a:
                    e3:ae:dc:48:58:25:0d:af:5e:32:47:97:00:77:33:
                    27:5f:fd:7e:c9:fd:31:6d:0f:e0:a9:16:0b:bd:c6:
                    e8:60:2c:82:6c:77:12:11:c7:95:a7:2e:7c:02:98:
                    bc:62:20:0b:58:69:06:db:c5:43:f3:38:13:4b:cc:
                    76:be:c0:5d:2c:8a:3a:63:53:9c:a1:60:9b:34:2b:
                    c1:65:af:bf:d9:20:c1:5b:7d:f0:4d:a8:d0:c2:ad:
                    78:5f:e2:b4:36:b9:92:b3:f1:c9:c3:05:9c:a4:ed:
                    24:99:72:d6:58:35:2d:34:18:f1:1f:bb:cd:af:80:
                    aa:51:d4:2c:d5:87:11:24:7f:6b:16:a2:aa:55:da:
                    ae:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:68:47:E7:23:86:B0:16:40:66:08:25:C9:BC:55:60:07:EA:E2:DD
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131312e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:a3:a8:48:91:2b:f6:e1:fd:64:a5:01:51:5b:6b:fa:7e:
         67:86:38:ab:70:42:1f:be:73:f5:bd:e0:b2:38:57:f8:9b:1d:
         29:0c:a7:d3:d9:bf:68:0d:8d:bd:c1:2c:6a:76:2f:e7:93:a0:
         9f:b4:ba:a3:06:24:06:81:06:dc:e4:03:11:0d:88:2b:01:c7:
         f5:38:2c:93:5f:3d:b1:ba:f5:38:9d:0e:9e:d7:b8:0c:ad:2e:
         6b:e0:7d:54:dd:31:32:51:36:2f:79:72:11:e4:28:18:24:a5:
         14:72:99:20:01:e6:c5:2b:53:4c:23:3f:fe:08:4e:8b:5f:b4:
         67:0f:62:1d:1d:55:ad:07:54:b4:64:86:c8:be:88:45:c5:c5:
         f8:a4:c2:ed:6c:46:3f:3e:92:be:0e:2d:3c:a0:64:75:67:df:
         1a:a4:a8:44:70:5a:9e:f8:ff:f7:50:4d:81:cb:bf:c0:60:ed:
         fa:2e:b8:92:41:52:df:9e:0b:7f:e1:89:84:c8:ab:a2:c2:91:
         cb:c5:3f:af:73:81:a1:26:1d:be:b7:f6:15:06:c2:0c:7f:6a:
         a8:45:c3:78:1f:5d:ab:e1:79:3b:21:b9:9a:70:80:28:70:38:
         ad:b6:db:ae:4f:e5:36:b2:7e:23:77:fb:13:bf:a7:69:14:57:
         66:5a:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:39:33 2025 by rpki-client