Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32322d3234203d3e20323634383135.roa
File:                     3137302e3233392e3136382e302f32322d3234203d3e20323634383135.roa (raw, json)
Hash identifier:          JSyFnoaReSz6SziQcxDC7Kmv+danXzPRXNNKVLNUhHI=
Subject key identifier:   B0:0C:C4:BD:1D:6F:99:1D:E7:6C:D0:6C:60:1D:4A:D6:F9:EB:73:5C
Certificate issuer:       /CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
Certificate serial:       2BBDA4E6F5D821B3153A18FB7200433CAD1D0616
Authority key identifier: 1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32322d3234203d3e20323634383135.roa
Signing time:             Tue 04 Feb 2025 18:14:58 +0000
ROA not before:           Tue 04 Feb 2025 18:09:58 +0000
ROA not after:            Tue 03 Feb 2026 18:14:58 +0000
asID:                     264815
IP address blocks:        170.239.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 14 Apr 2025 23:33:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bd:a4:e6:f5:d8:21:b3:15:3a:18:fb:72:00:43:3c:ad:1d:06:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BB7D32AA11FED0DB213B2A7234D401D55B02FDE
        Validity
            Not Before: Feb  4 18:09:58 2025 GMT
            Not After : Feb  3 18:14:58 2026 GMT
        Subject: CN=B00CC4BD1D6F991DE76CD06C601D4AD6F9EB735C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:2c:4a:e0:04:66:16:5c:8e:7f:62:dd:39:
                    7c:a8:bb:84:83:09:db:44:ff:d5:1b:44:29:4f:e1:
                    55:95:66:01:52:85:f3:78:4e:04:b7:22:e9:a8:67:
                    e9:b1:3d:62:90:37:9f:6a:6a:64:a5:b4:8c:47:50:
                    c7:d5:0d:9b:ef:78:9e:64:04:02:c9:dd:08:51:c2:
                    39:c5:fc:71:72:ef:95:c5:c2:ca:fb:a9:94:ba:60:
                    0d:4f:c7:05:22:d2:dc:20:52:3d:7c:43:78:ff:78:
                    2d:ce:82:1f:64:a5:ab:90:be:bb:53:e1:87:64:1b:
                    8a:81:8a:7a:b7:4b:50:56:57:22:99:23:60:6d:e9:
                    b1:67:df:88:c1:6a:df:c0:26:06:85:bb:ae:02:62:
                    3e:14:f0:b2:f6:04:5f:af:d7:ce:16:a8:76:ba:1d:
                    fd:8f:4d:72:cf:2d:3a:df:29:b1:7b:8c:4a:99:b8:
                    24:80:ec:c2:dc:17:1d:7d:9f:bd:8d:62:af:b8:f2:
                    9d:b0:90:d1:a0:ec:63:b7:d7:c3:2b:58:d8:d3:0e:
                    f8:c2:e9:75:5e:aa:b7:ab:a5:0b:45:09:aa:a4:2b:
                    6c:4a:6b:a9:38:51:c3:18:06:74:36:80:49:55:44:
                    60:fc:97:3b:15:62:a7:cd:8d:d5:42:b3:7f:d7:f2:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0C:C4:BD:1D:6F:99:1D:E7:6C:D0:6C:60:1D:4A:D6:F9:EB:73:5C
            X509v3 Authority Key Identifier:
                keyid:1B:B7:D3:2A:A1:1F:ED:0D:B2:13:B2:A7:23:4D:40:1D:55:B0:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BB7D32AA11FED0DB213B2A7234D401D55B02FDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10313B9BFDF583AC1AF045F7BA7E553F3B06349333553C0174065CF3F43FBD9D/0/3137302e3233392e3136382e302f32322d3234203d3e20323634383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:8d:38:09:6e:8e:ef:dc:fb:4d:e2:9f:b5:59:78:ee:a9:c0:
         55:1e:92:2e:41:60:37:ae:17:69:3b:73:38:fb:fb:a8:da:94:
         4b:b5:0a:74:19:f8:e5:93:f4:2f:8a:78:f2:5c:f0:3f:b0:4e:
         54:8b:87:02:f1:ef:1f:69:1b:6a:55:5e:ea:26:f1:62:3a:29:
         12:19:49:89:7d:a2:8b:14:e4:2a:c5:0c:ef:58:e7:44:d4:48:
         c7:e9:7a:8b:e0:c7:bc:0d:dd:49:e4:4e:32:5a:9e:8b:be:25:
         5c:9e:0d:d7:a2:1a:83:40:f8:c3:c6:52:0a:16:f9:03:fc:8f:
         7b:16:a9:7d:dc:2c:f7:07:39:8b:48:71:f4:72:39:09:56:cc:
         e5:c8:5c:81:d6:20:c1:cb:14:23:69:c2:02:db:34:2f:eb:6c:
         80:b7:65:49:3c:23:18:20:aa:20:08:c2:cb:75:61:74:a5:74:
         43:3f:6f:b7:85:a7:c3:83:01:80:7e:af:83:8b:72:08:4f:b2:
         18:81:f7:f3:0f:f7:76:78:c6:72:72:00:49:12:e6:39:ea:69:
         16:03:72:1e:fd:9b:4d:d7:e8:8a:86:10:ca:c6:28:8d:cd:37:
         7a:f7:ef:6c:45:08:7d:d3:7a:b2:d4:da:ee:bc:55:2b:3c:d2:
         3d:fd:8c:97
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUK72k5vXYIbMVOhj7cgBDPK0dBhYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJCN0QzMkFBMTFGRUQwREIyMTNCMkE3MjM0RDQwMUQ1
NUIwMkZERTAeFw0yNTAyMDQxODA5NThaFw0yNjAyMDMxODE0NThaMDMxMTAvBgNV
BAMTKEIwMENDNEJEMUQ2Rjk5MURFNzZDRDA2QzYwMUQ0QUQ2RjlFQjczNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHSxK4ARmFlyOf2LdOXyou4SD
CdtE/9UbRClP4VWVZgFShfN4TgS3IumoZ+mxPWKQN59qamSltIxHUMfVDZvveJ5k
BALJ3QhRwjnF/HFy75XFwsr7qZS6YA1PxwUi0twgUj18Q3j/eC3Ogh9kpauQvrtT
4YdkG4qBinq3S1BWVyKZI2Bt6bFn34jBat/AJgaFu64CYj4U8LL2BF+v184WqHa6
Hf2PTXLPLTrfKbF7jEqZuCSA7MLcFx19n72NYq+48p2wkNGg7GO318MrWNjTDvjC
6XVeqrerpQtFCaqkK2xKa6k4UcMYBnQ2gElVRGD8lzsVYqfNjdVCs3/X8i6vAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUsAzEvR1vmR3nbNBsYB1K1vnrc1wwHwYDVR0j
BBgwFoAUG7fTKqEf7Q2yE7KnI01AHVWwL94wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMDMxM0I5QkZERjU4M0FDMUFGMDQ1RjdCQTdFNTUzRjNC
MDYzNDkzMzM1NTNDMDE3NDA2NUNGM0Y0M0ZCRDlELzAvMUJCN0QzMkFBMTFGRUQw
REIyMTNCMkE3MjM0RDQwMUQ1NUIwMkZERS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQkI3RDMyQUExMUZFRDBEQjIx
M0IyQTcyMzRENDAxRDU1QjAyRkRFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTAzMTNCOUJGREY1ODNBQzFBRjA0NUY3QkE3RTU1M0YzQjA2MzQ5MzMz
NTUzQzAxNzQwNjVDRjNGNDNGQkQ5RC8wLzMxMzczMDJlMzIzMzM5MmUzMTM2Mzgy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzODMxMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
76gwDQYJKoZIhvcNAQELBQADggEBANeNOAluju/c+03in7VZeO6pwFUeki5BYDeu
F2k7czj7+6jalEu1CnQZ+OWT9C+KePJc8D+wTlSLhwLx7x9pG2pVXuom8WI6KRIZ
SYl9oosU5CrFDO9Y50TUSMfpeovgx7wN3UnkTjJanou+JVyeDdeiGoNA+MPGUgoW
+QP8j3sWqX3cLPcHOYtIcfRyOQlWzOXIXIHWIMHLFCNpwgLbNC/rbIC3ZUk8Ixgg
qiAIwst1YXSldEM/b7eFp8ODAYB+r4OLcghPshiB9/MP93Z4xnJyAEkS5jnqaRYD
ch79m03X6IqGEMrGKI3NN3r372xFCH3TerLU2u68VSs80j39jJc=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:55 2025 by rpki-client