Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237383535.roa
File:                     3137302e38332e3231362e302f32322d3234203d3e203237383535.roa (raw, json)
Hash identifier:          3KgKaqDK90iI5kU+rlWYz1fV/y1gKUBdK2uqjZ9tZAo=
Subject key identifier:   C5:3A:2E:A3:85:37:07:FF:D4:8A:05:D3:A5:C5:7C:67:44:2D:1D:A2
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       3A364DED093FDE2DBD2605CB4D3076B7D91FA4A9
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237383535.roa
Signing time:             Tue 04 Feb 2025 18:16:46 +0000
ROA not before:           Tue 04 Feb 2025 18:11:46 +0000
ROA not after:            Tue 03 Feb 2026 18:16:46 +0000
asID:                     27855
IP address blocks:        170.83.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:36:4d:ed:09:3f:de:2d:bd:26:05:cb:4d:30:76:b7:d9:1f:a4:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:46 2025 GMT
            Not After : Feb  3 18:16:46 2026 GMT
        Subject: CN=C53A2EA3853707FFD48A05D3A5C57C67442D1DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:2c:a3:80:f5:cd:17:c1:ad:bf:68:64:3b:
                    10:2c:40:c2:ff:a3:52:c0:38:30:69:7a:f9:73:40:
                    a8:ce:83:b6:ec:7c:2e:4b:5c:00:28:9a:ba:06:57:
                    be:ce:00:5c:c2:39:8c:02:e3:cf:d9:5f:6e:31:13:
                    6b:28:5f:19:40:21:09:1f:94:c7:b9:03:0b:45:b8:
                    c7:6e:7d:d3:31:11:d7:98:73:65:14:a3:7e:06:ed:
                    04:7c:0d:33:3e:e2:72:ba:d4:75:f2:2a:83:68:56:
                    3c:51:6a:7e:6b:b4:6c:05:95:98:8d:a0:d7:14:b4:
                    2d:8d:63:58:d2:a9:9a:07:52:38:be:63:c9:a8:8d:
                    5c:eb:48:ab:09:57:83:b8:0d:74:e7:60:12:39:5c:
                    87:3b:5b:c4:92:46:df:63:8e:dd:40:51:0e:9e:6c:
                    80:f3:51:9a:40:d3:3c:6b:1d:95:08:f3:20:90:f6:
                    4a:c9:1d:0f:a4:19:77:89:fd:c1:d5:da:a1:65:10:
                    20:04:a9:dd:b4:73:88:30:95:c1:8a:03:f7:a1:70:
                    51:39:7d:c2:fb:b4:85:41:39:d5:47:9e:76:47:02:
                    35:16:05:b3:59:1b:fe:2d:a0:f2:80:59:81:10:fb:
                    07:86:16:e2:ed:08:e1:92:22:cf:b4:7c:61:fa:0b:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3A:2E:A3:85:37:07:FF:D4:8A:05:D3:A5:C5:7C:67:44:2D:1D:A2
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e203237383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:e9:ab:b8:ac:7b:7f:e3:08:de:31:6b:03:0a:bc:04:50:16:
         b6:1d:75:99:5d:e7:d3:ec:5c:a7:04:2e:f2:3e:b6:53:23:3f:
         f9:ca:1d:82:dc:ca:08:78:8f:73:ae:04:55:e0:00:1a:4a:ae:
         36:0a:4f:72:64:d8:d0:56:0c:81:4c:07:8b:95:14:29:99:cf:
         8b:c0:5c:fd:80:1a:1e:56:f0:67:32:26:32:c0:5d:9a:59:70:
         76:cc:4a:64:e4:4c:3f:bd:c9:3e:d1:8d:bc:3a:44:90:d4:d1:
         58:f0:ab:fe:e5:ea:03:f9:a5:f5:d4:f9:43:f4:b5:c7:97:d4:
         dc:50:cc:0a:98:93:e6:78:b1:e3:44:5d:9a:a8:c8:bf:15:88:
         a8:bb:fe:02:0b:ab:1f:ae:44:80:e8:80:f9:a7:45:3a:4b:81:
         6b:3c:c5:8a:6e:c8:2e:92:19:02:80:06:dd:a4:69:0c:df:83:
         0e:56:fd:36:5d:7f:19:a7:b1:42:50:1e:15:cf:4b:d9:1f:c2:
         07:f2:e4:9a:6e:c8:aa:88:35:2d:76:8b:bc:0f:a4:cf:04:e5:
         80:14:cc:0b:d5:15:20:8f:43:dc:a7:50:55:1d:da:56:76:eb:
         45:01:1c:86:61:ff:6f:a0:e1:08:a9:ae:af:2b:9f:54:e3:8f:
         73:d9:06:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:43:00 2025 by rpki-client