Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
File:                     3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          bcIde12/eTtm2/qKvmS79VbVOm5c6k0mu+jNlmh3d4w=
Subject key identifier:   3F:4C:07:E7:F6:0E:BC:95:70:72:1E:6C:37:F8:3C:1F:FE:C3:38:DD
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       0385F3E4E0349B25547EA46EC01830078D51F56D
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 04 Feb 2025 20:06:36 +0000
ROA not before:           Tue 04 Feb 2025 20:01:36 +0000
ROA not after:            Tue 03 Feb 2026 20:06:36 +0000
asID:                     271970
IP address blocks:        170.83.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:f3:e4:e0:34:9b:25:54:7e:a4:6e:c0:18:30:07:8d:51:f5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Feb  4 20:01:36 2025 GMT
            Not After : Feb  3 20:06:36 2026 GMT
        Subject: CN=3F4C07E7F60EBC9570721E6C37F83C1FFEC338DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e9:de:10:15:cf:45:69:c4:3c:5a:a1:97:4e:
                    89:a8:b8:3f:19:27:a6:e6:f8:69:a4:67:a5:24:43:
                    48:c2:f1:4c:d6:08:0b:3e:51:87:a8:78:48:e0:ec:
                    a3:45:aa:54:05:64:46:05:17:2a:09:98:20:08:fd:
                    d4:18:88:2c:e7:d7:3b:46:c0:b2:f7:4c:b4:a7:e2:
                    e1:7f:d5:82:0e:6f:e5:f8:ca:4c:ab:49:d7:d5:01:
                    e2:51:4e:e6:cd:aa:6b:db:5f:60:57:93:8d:af:2d:
                    d9:81:f4:ac:a9:73:f7:f5:72:fc:a6:dd:63:87:86:
                    5f:ba:6b:a0:27:9e:74:a1:e0:ee:90:32:0a:63:00:
                    13:ec:86:e6:76:a9:62:91:a4:fa:6e:ab:e6:f7:2d:
                    fa:33:0d:f9:c8:ae:f9:9c:77:ab:08:4c:59:77:f0:
                    67:4b:78:31:ff:87:95:7f:26:d4:c5:37:ef:90:76:
                    c5:12:e9:dd:cf:1e:b9:5f:8f:b9:d6:4d:02:23:65:
                    3b:98:82:e5:cc:1e:d1:b0:16:f3:7b:d6:c5:5c:1e:
                    e9:8d:5f:e6:6c:da:24:fa:21:15:45:21:dc:0e:29:
                    11:8a:cd:29:50:c1:2f:0d:3a:21:31:4e:20:83:70:
                    a5:a6:d3:82:0a:c7:5d:68:25:99:dd:67:12:5a:34:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4C:07:E7:F6:0E:BC:95:70:72:1E:6C:37:F8:3C:1F:FE:C3:38:DD
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:e3:fb:54:d5:be:6d:56:d1:54:c0:d5:d5:cb:8e:ce:1c:d6:
         5b:67:fb:a1:ff:30:9b:d2:ef:0f:67:97:bb:3d:97:32:6d:01:
         4d:56:9e:a5:85:b8:8e:36:62:14:d5:c1:12:cf:a3:0a:a7:29:
         2b:bd:46:b7:8e:fc:19:39:c9:83:5a:b9:f2:f4:c7:48:72:25:
         4b:c2:e5:00:85:09:b8:30:a4:f3:95:91:df:b3:83:f5:9c:4a:
         9d:c6:f0:b8:06:76:a3:d6:44:c8:7a:dd:76:cf:3d:41:19:52:
         26:8b:af:67:20:82:9a:39:19:e0:e6:a3:be:41:14:ae:5d:b3:
         e7:ce:e7:71:32:1f:2a:dc:ac:8b:27:f1:be:6f:5d:36:a4:bd:
         ab:f4:0c:94:39:ef:5b:4f:17:f9:a8:36:a9:18:31:d7:ba:d3:
         a8:26:78:55:10:d4:7a:b1:4c:49:92:34:66:75:bc:16:47:65:
         2f:c2:ed:ca:44:36:da:64:41:ee:36:0b:0f:9a:0e:25:5a:c4:
         d6:a2:b1:0b:92:71:ad:ce:e3:53:52:59:f0:8a:76:7c:e9:02:
         8a:f6:1a:42:7b:25:1c:26:2d:95:57:9c:97:bb:c0:9c:ca:e3:
         af:2f:f1:ee:b7:36:ba:1d:b7:a5:fd:3a:53:ac:f6:16:cd:2c:
         42:75:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:08:07 2025 by rpki-client