Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
File:                     3137302e38342e3136382e302f32322d3234203d3e203532333038.roa (raw, json)
Hash identifier:          qraN/kyLkCHUSxxImpXCk38bwkW9yqRJVyhKYneUJSk=
Subject key identifier:   73:71:F4:1E:F0:24:40:FB:4B:EF:6A:D7:68:4C:51:30:4E:40:E6:4F
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       5676DD44D0EBF93755EFD38D599389DA1A80815D
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
Signing time:             Tue 04 Feb 2025 18:26:36 +0000
ROA not before:           Tue 04 Feb 2025 18:21:36 +0000
ROA not after:            Tue 03 Feb 2026 18:26:36 +0000
asID:                     52308
IP address blocks:        170.84.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:76:dd:44:d0:eb:f9:37:55:ef:d3:8d:59:93:89:da:1a:80:81:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Feb  4 18:21:36 2025 GMT
            Not After : Feb  3 18:26:36 2026 GMT
        Subject: CN=7371F41EF02440FB4BEF6AD7684C51304E40E64F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:15:f2:89:98:bf:32:15:e4:06:7f:17:54:7c:
                    14:ab:d1:93:bb:93:4d:60:20:d1:bb:bb:82:07:86:
                    a3:f4:45:a5:1b:be:88:e6:34:1c:13:c1:7d:b7:23:
                    12:bb:3c:e1:c9:b4:05:e0:43:e1:5b:b1:27:a5:81:
                    d8:43:2a:2c:9a:08:3c:5f:1d:b2:2d:ed:15:4b:29:
                    2a:6c:fe:28:d8:a6:1a:88:72:68:9a:45:e6:80:aa:
                    a2:e3:62:3e:ac:1f:d4:63:4c:13:b9:c3:8a:09:85:
                    c7:07:49:fa:31:54:84:6a:a8:7a:0c:c1:22:83:ee:
                    86:25:fc:55:48:c7:e4:6e:19:e2:ca:26:c3:79:65:
                    c4:92:d7:02:c0:58:1c:f5:29:ce:00:69:00:c8:96:
                    a4:2b:58:92:50:f1:f0:23:00:ec:1a:a1:8f:2d:c3:
                    2e:9d:9a:bf:83:ab:b3:df:03:13:43:88:0d:0f:73:
                    cc:2b:bc:50:00:b5:4a:a5:e2:c0:f8:62:9b:a3:0d:
                    f0:36:b8:d4:0f:a9:3f:ec:60:52:d8:8c:3b:5f:c5:
                    92:5b:0c:bc:42:da:26:f5:72:88:18:1c:35:e2:74:
                    95:61:30:85:be:65:73:d0:dd:0e:76:7c:9a:28:26:
                    55:dd:82:8c:9d:9c:e0:4f:de:29:63:2c:05:4e:56:
                    1c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:71:F4:1E:F0:24:40:FB:4B:EF:6A:D7:68:4C:51:30:4E:40:E6:4F
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:35:73:36:b5:d8:2f:45:79:3f:b8:ef:9f:88:ca:9d:21:d2:
         47:44:44:86:69:c3:35:83:6e:82:b6:40:2a:54:92:35:d2:df:
         a7:9b:4d:9e:7c:d3:b9:bf:29:8d:90:1b:ce:3a:c1:b1:ed:62:
         f9:2c:6d:2f:bc:51:a4:0c:e5:c9:00:7a:f9:61:6b:45:75:7b:
         df:9f:17:5b:fd:83:b1:70:95:92:95:ac:d0:5e:80:2c:94:88:
         83:38:70:00:42:90:4e:35:ff:7d:4f:7c:24:4a:f7:e9:34:51:
         31:8d:50:a1:fd:6c:5e:41:c7:7e:6b:37:84:39:53:36:6f:a2:
         81:33:9f:cc:0b:45:25:29:fb:c2:af:f3:72:ca:47:f2:37:2d:
         39:ee:d0:cb:1f:43:6a:12:82:0d:d5:ef:1e:3e:19:45:d6:df:
         77:d2:bf:2a:39:51:d1:56:d5:5b:d4:5c:0c:75:96:b0:de:d4:
         5b:af:60:1b:4a:59:78:81:fe:df:b6:9d:52:b4:b8:0b:e2:ce:
         d1:f5:86:09:df:24:0c:dc:83:f3:c4:11:6b:df:72:c3:88:55:
         d8:b7:7e:ba:5a:9d:67:f6:08:b8:d0:5b:15:92:3e:07:dd:46:
         3e:53:d8:f2:65:ee:48:76:96:c3:15:1d:88:9e:1b:8c:6f:b1:
         a4:11:c1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:05:19 2025 by rpki-client