Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
File:                     3137302e37392e38382e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          M8vJ8Tggvvl6xmxUxWLW41NX/NYh78iOLnsaHVqKm+s=
Subject key identifier:   FA:61:5D:3B:47:E0:41:86:83:E4:21:58:22:47:1A:4B:1A:43:A2:27
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       7185984677B220DC33EE3BA097291E7C626C4770
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 04 Feb 2025 18:27:44 +0000
ROA not before:           Tue 04 Feb 2025 18:22:44 +0000
ROA not after:            Tue 03 Feb 2026 18:27:44 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 17:20:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:85:98:46:77:b2:20:dc:33:ee:3b:a0:97:29:1e:7c:62:6c:47:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Feb  4 18:22:44 2025 GMT
            Not After : Feb  3 18:27:44 2026 GMT
        Subject: CN=FA615D3B47E0418683E4215822471A4B1A43A227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:a3:2d:8f:5a:68:a3:5c:e5:17:fc:8b:34:
                    73:91:9d:b7:86:e1:60:4f:3c:b9:e7:d3:9b:4a:22:
                    e6:c3:23:a1:42:4a:28:e5:97:77:9d:6c:11:6d:73:
                    76:9e:29:a9:bb:f7:71:00:a8:ae:19:36:78:ba:7b:
                    87:80:8f:31:56:57:4a:d3:b2:f9:6c:10:5a:2a:33:
                    27:c0:90:34:2a:3f:cd:13:d1:30:30:bc:36:18:6d:
                    61:bb:d9:5c:6f:a9:2d:39:95:11:3f:31:c7:a1:b9:
                    6c:2e:1b:66:d5:05:18:e1:29:5d:1c:5b:6b:d9:0b:
                    2c:5b:99:61:6b:54:cc:27:1a:e6:53:0d:18:57:b3:
                    93:bf:42:2a:da:1b:06:fa:a3:52:7d:7f:c6:93:fd:
                    d3:8a:d2:75:eb:b7:94:bf:db:b7:87:c1:38:ec:b6:
                    60:34:32:7c:1f:2a:00:40:fa:ce:23:8a:39:4d:bd:
                    4a:65:5a:74:05:e6:c6:54:e3:2c:bd:8c:fa:2c:00:
                    a3:49:ba:37:d2:29:90:12:26:4a:ef:d0:a4:c8:f2:
                    4c:0c:f9:c8:12:50:8f:ca:5d:61:75:7a:64:d4:8c:
                    d4:9f:4c:ad:4a:a4:a9:3f:1f:35:57:77:87:d9:55:
                    ec:05:43:78:fc:ae:33:bd:3d:8d:ee:77:f6:5d:49:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:61:5D:3B:47:E0:41:86:83:E4:21:58:22:47:1A:4B:1A:43:A2:27
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:39:80:02:43:21:70:0d:7f:b9:18:0e:ea:48:34:23:ec:
         d4:07:aa:52:b7:62:e7:72:6d:f0:80:97:bd:d2:19:5e:fe:6f:
         5a:66:ea:6b:83:c4:06:92:a8:51:a5:94:98:6b:8a:be:3f:07:
         61:42:e8:30:28:b3:54:5d:70:bc:6f:d1:52:6b:b3:30:02:5a:
         e1:fd:bf:82:cd:39:88:e0:de:65:a2:dd:59:64:49:27:23:e0:
         d7:88:72:3a:43:ee:0f:3e:14:60:7a:f8:6a:85:ab:68:10:72:
         49:2f:9c:b4:5a:72:7b:50:6f:e2:bb:f3:27:81:d6:58:fa:8e:
         51:b7:f6:47:b7:ea:4c:4d:bc:a5:24:41:d8:3b:92:28:3b:79:
         d0:86:36:7f:39:cc:ee:31:54:ac:50:12:c4:6e:80:e5:58:31:
         3e:db:78:06:63:18:ab:16:2f:23:63:63:88:e6:fe:6d:99:c0:
         c1:2d:4c:30:2e:cb:2d:be:7c:e7:bf:0d:06:5f:e4:67:2a:8c:
         50:4b:99:20:d7:bc:bc:99:ae:8d:34:d9:b8:fa:fd:75:a7:15:
         11:13:06:f6:83:61:cf:0c:70:3a:6e:7d:f4:1f:d5:b0:63:66:
         1d:dd:3d:08:a2:99:10:14:be:09:94:8c:f9:b9:9a:3f:bb:1e:
         5a:16:20:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:39 2025 by rpki-client