Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa
File:                     3137302e38332e3231362e302f32322d3234203d3e2033353439.roa (raw, json)
Hash identifier:          OvTJZuvFkSEVitHExbH+8DKKzFHQUI1HvX5A526CK4c=
Subject key identifier:   9E:3E:78:5E:22:26:0A:B7:31:BA:BE:6B:A1:1F:B2:05:38:1C:80:9F
Certificate issuer:       /CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
Certificate serial:       395368865DA62BCEFE18763A043561D367BE6FC1
Authority key identifier: CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:16:47 +0000
ROA not before:           Tue 04 Feb 2025 18:11:47 +0000
ROA not after:            Tue 03 Feb 2026 18:16:47 +0000
asID:                     3549
IP address blocks:        170.83.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:53:68:86:5d:a6:2b:ce:fe:18:76:3a:04:35:61:d3:67:be:6f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F
        Validity
            Not Before: Feb  4 18:11:47 2025 GMT
            Not After : Feb  3 18:16:47 2026 GMT
        Subject: CN=9E3E785E22260AB731BABE6BA11FB205381C809F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:42:73:5f:1a:3e:d1:57:0f:54:8c:36:e6:2c:
                    3a:66:f0:69:40:56:e2:63:ac:7a:00:a5:7b:7a:e1:
                    60:ab:d3:9d:ef:c2:84:24:77:5d:7e:cf:56:51:26:
                    01:42:b7:06:b3:56:4f:46:1c:c2:9a:66:13:a0:2a:
                    1e:1b:b8:91:b9:7e:70:8f:52:0f:35:ea:27:d1:b7:
                    dd:9b:4b:88:a7:f4:78:7e:c6:3c:cd:b6:b4:8b:ec:
                    61:68:09:5a:0e:30:96:16:9c:13:07:09:1b:4b:3f:
                    3d:ce:f7:37:b3:5d:10:ef:2b:d3:18:d9:70:da:b6:
                    fb:d8:c3:43:38:08:84:a4:56:a9:88:8e:54:6b:5b:
                    d6:fd:b0:08:34:00:6d:87:14:b5:44:57:17:3d:30:
                    86:62:5c:6c:7a:93:f7:42:02:7d:7a:bf:be:78:76:
                    9f:e6:03:aa:8c:f2:67:a9:7f:b7:37:1c:a4:12:76:
                    1d:a1:ae:7c:ed:ec:2e:a2:b0:6b:2b:ab:8e:ad:a8:
                    85:17:95:02:22:59:f5:f0:a6:1f:e9:56:50:c7:c6:
                    6f:96:75:c6:86:2c:48:4f:43:05:31:13:27:1f:48:
                    3d:67:d2:d2:e1:ad:c4:62:c9:6b:19:1d:6a:9a:81:
                    c5:77:1e:7e:43:a8:67:47:81:8e:dc:e1:8b:78:11:
                    07:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:3E:78:5E:22:26:0A:B7:31:BA:BE:6B:A1:1F:B2:05:38:1C:80:9F
            X509v3 Authority Key Identifier:
                keyid:CB:E7:2B:8D:81:5E:9A:3D:3D:87:C1:0B:39:ED:41:69:A8:4A:B6:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBE72B8D815E9A3D3D87C10B39ED4169A84AB68F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/117E0F28D7B109643382134A928ADB7D8C131972702EA42A048C2764C80DC7C1/0/3137302e38332e3231362e302f32322d3234203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:98:a9:9e:13:8e:7b:30:81:a5:23:6f:18:5f:7c:a8:2d:9b:
         0e:57:f2:35:a6:75:a6:d1:0c:3e:dc:5f:67:ab:cf:3f:2b:a1:
         96:e6:21:45:65:c7:d7:cb:81:09:10:85:27:c4:1c:36:ec:33:
         b8:5c:aa:f9:40:81:0d:ac:c9:26:d2:81:dc:28:34:b4:a9:06:
         4c:18:67:ed:de:ef:6e:66:28:9f:c2:30:82:6f:5e:c3:6a:6b:
         01:21:34:69:94:99:a5:40:3c:fc:7d:b6:2f:a9:5f:c0:03:23:
         b6:3a:77:57:08:c2:bd:6b:a7:34:c3:9d:e7:a2:23:bd:be:f2:
         bc:80:a7:a1:a6:0e:81:11:96:ac:91:2d:1a:96:89:94:cd:d7:
         07:2c:b8:40:ec:e4:0c:af:e7:e8:72:41:2d:c3:ef:2d:f4:01:
         11:33:23:59:06:22:20:7d:43:ac:38:fb:2e:f3:a3:1d:8d:fd:
         e7:db:7a:a4:1a:fb:18:10:48:c2:ea:68:d7:4a:2d:36:35:9b:
         d6:36:ae:89:59:c2:96:93:40:bc:c2:d6:bf:69:6d:c0:18:14:
         54:6a:18:f6:9c:a0:cc:23:87:90:9b:87:20:08:ce:c7:d3:df:
         f4:c3:09:fb:e5:15:f4:86:16:69:16:61:7a:fe:71:5f:6b:64:
         a9:a7:53:22
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOVNohl2mK87+GHY6BDVh02e+b8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0JFNzJCOEQ4MTVFOUEzRDNEODdDMTBCMzlFRDQxNjlB
ODRBQjY4RjAeFw0yNTAyMDQxODExNDdaFw0yNjAyMDMxODE2NDdaMDMxMTAvBgNV
BAMTKDlFM0U3ODVFMjIyNjBBQjczMUJBQkU2QkExMUZCMjA1MzgxQzgwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD9QnNfGj7RVw9UjDbmLDpm8GlA
VuJjrHoApXt64WCr053vwoQkd11+z1ZRJgFCtwazVk9GHMKaZhOgKh4buJG5fnCP
Ug816ifRt92bS4in9Hh+xjzNtrSL7GFoCVoOMJYWnBMHCRtLPz3O9zezXRDvK9MY
2XDatvvYw0M4CISkVqmIjlRrW9b9sAg0AG2HFLVEVxc9MIZiXGx6k/dCAn16v754
dp/mA6qM8mepf7c3HKQSdh2hrnzt7C6isGsrq46tqIUXlQIiWfXwph/pVlDHxm+W
dcaGLEhPQwUxEycfSD1n0tLhrcRiyWsZHWqagcV3Hn5DqGdHgY7c4Yt4EQfzAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUnj54XiImCrcxur5roR+yBTgcgJ8wHwYDVR0j
BBgwFoAUy+crjYFemj09h8ELOe1BaahKto8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xMTdFMEYyOEQ3QjEwOTY0MzM4MjEzNEE5MjhBREI3RDhD
MTMxOTcyNzAyRUE0MkEwNDhDMjc2NEM4MERDN0MxLzAvQ0JFNzJCOEQ4MTVFOUEz
RDNEODdDMTBCMzlFRDQxNjlBODRBQjY4Ri5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DQkU3MkI4RDgxNUU5QTNEM0Q4
N0MxMEIzOUVENDE2OUE4NEFCNjhGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTE3RTBGMjhEN0IxMDk2NDMzODIxMzRBOTI4QURCN0Q4QzEzMTk3Mjcw
MkVBNDJBMDQ4QzI3NjRDODBEQzdDMS8wLzMxMzczMDJlMzgzMzJlMzIzMTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzMzNTM0Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqU9gwDQYJ
KoZIhvcNAQELBQADggEBAAmYqZ4TjnswgaUjbxhffKgtmw5X8jWmdabRDD7cX2er
zz8roZbmIUVlx9fLgQkQhSfEHDbsM7hcqvlAgQ2sySbSgdwoNLSpBkwYZ+3e725m
KJ/CMIJvXsNqawEhNGmUmaVAPPx9ti+pX8ADI7Y6d1cIwr1rpzTDneeiI72+8ryA
p6GmDoERlqyRLRqWiZTN1wcsuEDs5Ayv5+hyQS3D7y30AREzI1kGIiB9Q6w4+y7z
ox2N/efbeqQa+xgQSMLqaNdKLTY1m9Y2rolZwpaTQLzC1r9pbcAYFFRqGPacoMwj
h5CbhyAIzsfT3/TDCfvlFfSGFmkWYXr+cV9rZKmnUyI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:31 2025 by rpki-client