Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa
File:                     3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa (raw, json)
Hash identifier:          WP9CplU3pQ0XG7FDJ5gQl9wFeIg5jH01DFIS3JTPPqc=
Subject key identifier:   8F:13:EB:A0:3B:62:4E:DB:92:5E:86:8B:4E:06:1E:05:73:36:C4:43
Certificate issuer:       /CN=7C73575E363469E69249C4583641D2A482F859B2
Certificate serial:       13071D3C7A246FDAE20FE292DE94B6AB4390F7DC
Authority key identifier: 7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa
Signing time:             Tue 04 Feb 2025 17:59:25 +0000
ROA not before:           Tue 04 Feb 2025 17:54:25 +0000
ROA not after:            Tue 03 Feb 2026 17:59:25 +0000
asID:                     270096
IP address blocks:        170.245.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 22:41:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:07:1d:3c:7a:24:6f:da:e2:0f:e2:92:de:94:b6:ab:43:90:f7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C73575E363469E69249C4583641D2A482F859B2
        Validity
            Not Before: Feb  4 17:54:25 2025 GMT
            Not After : Feb  3 17:59:25 2026 GMT
        Subject: CN=8F13EBA03B624EDB925E868B4E061E057336C443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:eb:ff:86:e1:f1:77:95:bf:b9:ee:cd:eb:
                    b2:1c:02:35:9d:7d:90:7d:18:31:80:df:23:03:4a:
                    74:4f:2d:39:81:98:b5:ff:91:a1:d4:31:7e:52:64:
                    47:62:c5:52:81:8f:52:02:c9:d3:ee:49:e8:89:e8:
                    4a:bd:33:ee:48:d1:d2:20:10:38:be:66:ea:7d:11:
                    71:39:71:2f:36:d0:b3:d5:08:da:f0:5e:49:00:fc:
                    f2:cf:cc:a7:45:a2:f5:6f:cd:ab:02:37:87:61:e6:
                    50:35:11:53:d0:49:9a:e2:08:86:e8:6d:4b:53:a4:
                    35:d9:ee:65:7f:bf:86:56:17:fd:e2:30:d4:23:5d:
                    82:ed:0c:10:2c:52:66:14:5c:b7:96:6d:02:9a:0f:
                    cf:67:6c:6b:3c:da:68:4f:f9:6c:d7:6a:60:44:7c:
                    ce:dc:70:5b:cf:f5:0e:68:8c:ee:ef:06:4d:a3:ee:
                    9e:70:d6:66:90:b8:74:72:7e:f8:78:59:b9:3f:ef:
                    49:fb:37:89:e8:47:30:3c:1e:38:c1:25:8a:3e:a9:
                    f8:12:44:14:f9:b7:db:e2:44:68:cf:07:74:be:d1:
                    a8:5c:a4:2b:6d:0d:6f:e8:b8:30:c6:98:a4:71:f6:
                    e8:99:5c:a5:93:dd:e4:45:55:07:c5:be:f3:94:bc:
                    4d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:13:EB:A0:3B:62:4E:DB:92:5E:86:8B:4E:06:1E:05:73:36:C4:43
            X509v3 Authority Key Identifier:
                keyid:7C:73:57:5E:36:34:69:E6:92:49:C4:58:36:41:D2:A4:82:F8:59:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/7C73575E363469E69249C4583641D2A482F859B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7C73575E363469E69249C4583641D2A482F859B2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22EB4DEA78D186BB1EE075FC645B2566B6C438EE0FEF53EAFB8C5DCF05A57F7C/0/3137302e3234352e3133332e302f32342d3234203d3e20323730303936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:80:a5:19:51:af:01:44:ae:ad:e5:ed:dd:fa:9b:00:14:d0:
         54:00:d2:2f:86:3e:97:0d:4f:a5:85:cf:5a:bd:94:28:fa:cf:
         fc:c2:cb:ba:1c:72:6b:ce:ca:32:fd:6d:c9:c1:b6:e6:e0:5c:
         2c:8c:47:c8:8a:2b:cd:9b:3a:5d:a9:f4:5d:89:c8:0b:46:9b:
         e1:d2:81:56:77:c3:e7:6f:53:28:74:57:a3:8f:02:0d:bb:f9:
         95:65:39:5a:b6:ab:79:68:55:7c:a2:45:93:1e:6e:78:b7:76:
         17:6a:53:04:b0:a7:f8:a8:a2:8e:c6:e3:fa:17:0e:59:8b:69:
         db:96:d9:a0:20:b3:46:e9:9d:42:03:f4:7e:f4:92:15:d8:58:
         b9:a6:b9:7d:18:9f:cb:c4:3a:e0:d0:97:ac:4d:40:7f:d2:e8:
         6b:eb:1f:07:ee:00:cf:1a:92:6f:3b:e8:dd:7f:31:18:24:f6:
         e9:68:9b:b6:cd:b5:5e:bc:a0:31:95:d6:ec:b5:ef:1e:df:5e:
         29:2e:7b:bf:50:64:52:b3:85:14:2f:ec:78:3d:5b:9c:15:b6:
         8b:fc:66:6d:21:a7:51:2c:ed:a7:ef:dd:df:40:b4:1a:6b:33:
         a5:93:7d:ed:37:f1:33:25:40:0a:f3:eb:58:63:5f:30:8b:88:
         95:3f:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:07:48 2025 by rpki-client