Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/3137302e38302e38382e302f32322d3234203d3e20323634383230.roa
File:                     3137302e38302e38382e302f32322d3234203d3e20323634383230.roa (raw, json)
Hash identifier:          ZBJrrMZQyYmQs5fpASwviOeEG6Gg6r+NUh0d7WocEMM=
Subject key identifier:   28:B3:64:D5:9C:06:9D:97:BB:E8:8F:C8:0E:7E:DD:98:E1:BE:54:A6
Certificate issuer:       /CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
Certificate serial:       3108C43D7AFDCFEA71786F0EDFB9E5B3534805C9
Authority key identifier: 65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/3137302e38302e38382e302f32322d3234203d3e20323634383230.roa
Signing time:             Tue 04 Feb 2025 18:12:02 +0000
ROA not before:           Tue 04 Feb 2025 18:07:02 +0000
ROA not after:            Tue 03 Feb 2026 18:12:02 +0000
asID:                     264820
IP address blocks:        170.80.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.crl
                          rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:08:c4:3d:7a:fd:cf:ea:71:78:6f:0e:df:b9:e5:b3:53:48:05:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65B9BA148971D9B804D3A8ED2091FAC0E0BC8863
        Validity
            Not Before: Feb  4 18:07:02 2025 GMT
            Not After : Feb  3 18:12:02 2026 GMT
        Subject: CN=28B364D59C069D97BBE88FC80E7EDD98E1BE54A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:37:21:51:e1:bc:fc:43:b7:50:a5:54:2e:8f:
                    15:9b:b5:22:f8:95:2f:0e:bc:7c:aa:7c:d3:12:10:
                    df:32:b6:48:2a:18:69:14:70:c5:96:f3:1a:20:b0:
                    5c:c6:47:ab:d8:9b:77:ef:7b:4b:52:64:f7:9a:cc:
                    d8:c8:21:40:61:aa:c0:93:f0:eb:17:e2:9d:0e:df:
                    0e:8e:f5:bf:cb:6b:b0:46:0f:f9:2b:60:3a:5c:1e:
                    e5:83:96:0c:1e:00:9a:09:ab:f3:37:10:3c:31:cd:
                    01:cb:85:e1:24:44:ac:2f:ba:c3:f2:e2:f5:c8:d8:
                    7d:fe:d7:19:2f:6d:91:cf:0f:80:95:6c:ed:ef:6e:
                    8b:cb:f0:04:e3:90:87:67:ea:b1:2b:08:6b:a8:ce:
                    80:79:93:14:22:4e:72:9b:c2:76:19:50:d0:bf:7b:
                    bc:c7:09:93:a7:bd:8b:5b:88:9b:31:b1:bd:d0:bc:
                    d9:f7:4b:63:08:62:02:12:9e:35:d4:1b:5e:45:5d:
                    e0:c2:53:49:e4:98:84:b3:13:90:b3:42:5d:6c:ed:
                    11:d6:58:40:66:7b:be:20:8b:e8:61:e8:56:08:7d:
                    90:b7:8c:de:e7:6d:e2:31:11:b8:bf:4b:ee:8d:ce:
                    0e:24:b9:4a:d6:ce:0d:70:42:72:8d:d6:74:13:cd:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B3:64:D5:9C:06:9D:97:BB:E8:8F:C8:0E:7E:DD:98:E1:BE:54:A6
            X509v3 Authority Key Identifier:
                keyid:65:B9:BA:14:89:71:D9:B8:04:D3:A8:ED:20:91:FA:C0:E0:BC:88:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65B9BA148971D9B804D3A8ED2091FAC0E0BC8863.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/093328FFCCB7BF132411EB69B33CDCCEDEF4A83A6AB19F1045C37DCF5720FF35/0/3137302e38302e38382e302f32322d3234203d3e20323634383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b4:54:b5:29:f1:f3:2e:0b:0a:19:28:4e:ec:e7:63:3f:6a:bc:
         3f:bd:ba:6d:16:c0:10:81:6e:13:d9:20:5a:0d:14:79:64:6b:
         52:91:4f:f2:53:73:7e:0c:41:4c:08:9a:32:db:d8:b7:49:7d:
         df:59:a3:35:f8:0b:cd:64:84:86:4b:10:ff:57:55:65:be:04:
         a9:07:93:a8:81:ac:b6:35:38:b2:1a:ce:79:22:21:7e:85:17:
         6a:10:5e:e1:ec:a4:8a:5a:28:06:47:fb:1a:eb:a7:40:96:97:
         a7:89:42:04:cf:c0:10:d3:ae:73:0f:a7:02:a9:2f:a0:1f:ca:
         51:f1:41:e3:3e:11:bc:fc:11:cd:fc:c0:16:2c:a5:3a:84:63:
         1e:17:2a:76:84:79:9f:7f:1e:2f:59:b9:86:1b:11:37:fc:cb:
         48:9a:1e:1b:0a:de:89:a2:8d:40:0f:1e:66:62:42:2e:aa:6d:
         9e:13:49:d6:52:52:e4:ee:e0:c3:ec:97:1c:d8:2b:ad:d3:bb:
         94:39:79:80:7a:cb:33:1c:57:dc:89:f8:84:f3:78:19:36:ec:
         60:71:47:f5:b8:31:3e:14:b8:a7:88:ab:9a:21:f1:1b:3d:23:
         16:41:46:fa:b5:bb:21:45:38:85:9a:9d:ef:17:06:87:23:30:
         db:4a:ab:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:55:07 2025 by rpki-client