Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3232203d3e20323731383134.roa
File:                     3137302e3234362e35362e302f32322d3232203d3e20323731383134.roa (raw, json)
Hash identifier:          ZowvI2W/4qKAE7R+v2l6GFHzD+CS7FOFOUHjMGuGjuY=
Subject key identifier:   A4:F3:47:10:4C:8A:E8:AA:DA:77:C6:33:F1:8B:4C:0B:CA:79:5B:67
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       76C4121443E660A141ED63EB947C835A41E78AE3
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3232203d3e20323731383134.roa
Signing time:             Tue 04 Feb 2025 18:01:14 +0000
ROA not before:           Tue 04 Feb 2025 17:56:14 +0000
ROA not after:            Tue 03 Feb 2026 18:01:14 +0000
asID:                     271814
IP address blocks:        170.246.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:c4:12:14:43:e6:60:a1:41:ed:63:eb:94:7c:83:5a:41:e7:8a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Feb  4 17:56:14 2025 GMT
            Not After : Feb  3 18:01:14 2026 GMT
        Subject: CN=A4F347104C8AE8AADA77C633F18B4C0BCA795B67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:cc:c4:db:f6:3e:49:20:1b:f9:23:87:cb:16:
                    5c:69:d5:45:bf:5d:01:48:a0:16:98:b1:9d:c9:ca:
                    9d:db:af:3c:3e:d5:c6:ca:0a:ec:8b:f6:f0:f0:22:
                    91:ec:0f:5c:f5:aa:a8:71:21:29:66:7d:c4:20:75:
                    54:fb:53:5c:fb:de:39:e5:1e:bc:d2:84:41:72:3f:
                    8a:f7:53:1b:de:7e:40:71:40:62:8d:62:8a:9b:8f:
                    8c:a1:6a:84:08:1b:21:d6:5e:94:ab:78:ce:31:86:
                    09:54:d7:1e:c7:37:b1:f6:e4:ee:83:a3:39:70:38:
                    58:03:4a:2b:ab:2c:b4:95:d1:dc:df:82:1b:8c:54:
                    33:77:b1:20:36:f6:70:ac:b3:af:66:67:06:3d:a5:
                    e8:d6:c4:9d:2d:c7:f1:58:b7:c0:67:30:ff:eb:d2:
                    20:37:d3:3a:39:ac:0b:95:9f:88:49:77:8a:fe:f2:
                    da:b2:12:58:b7:ad:81:fd:39:4e:ee:9a:af:48:3f:
                    41:11:06:7e:25:4f:bf:d9:76:9b:17:15:2a:8d:09:
                    67:f7:d9:37:83:db:2e:37:c8:50:a3:26:37:91:8e:
                    fc:9b:14:87:f3:56:27:1a:ee:88:bf:db:d5:ba:4d:
                    55:6f:15:99:97:bc:a9:1e:22:c2:29:03:04:1d:71:
                    a0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F3:47:10:4C:8A:E8:AA:DA:77:C6:33:F1:8B:4C:0B:CA:79:5B:67
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35362e302f32322d3232203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:79:7a:12:69:40:52:eb:b3:77:e3:67:82:1f:58:02:fc:72:
         ee:d0:db:57:9d:2a:6f:ce:0c:7b:fd:38:61:78:47:18:4e:dc:
         e9:14:fa:1e:e6:c1:67:16:89:ae:93:a8:12:86:b6:95:dc:1d:
         52:11:a5:14:a4:3b:3e:a0:93:73:c1:84:dd:90:cc:54:f1:7f:
         07:a6:a8:2c:7e:a3:77:d1:98:83:50:76:ce:9b:35:21:b9:96:
         52:16:0f:99:7d:73:23:ba:eb:95:12:50:ec:6b:dd:09:3a:cf:
         36:7f:30:81:44:7a:46:6c:9e:02:5d:08:b5:c6:54:d1:45:41:
         f4:0f:a8:dc:b6:5a:f4:ae:f8:7c:e0:f8:ea:71:18:63:77:9e:
         10:84:01:45:e2:29:72:06:40:21:a1:f8:99:0b:a7:4d:fb:27:
         8e:fb:2f:4d:3a:39:d4:d6:74:fe:32:2e:a8:da:bd:da:dd:70:
         65:52:08:5c:aa:29:fe:43:2c:95:a0:4f:37:ac:ec:3b:4b:ca:
         1f:2d:1f:07:53:2c:e1:1a:c4:73:7d:7b:5e:55:30:b3:75:6f:
         88:1b:70:06:f4:cb:42:a6:da:f3:97:46:52:ee:5f:ea:00:32:
         d6:d7:a9:c2:44:4e:fd:2a:ef:bd:e0:2d:4d:d1:88:5a:b9:04:
         30:d7:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:13:37 2025 by rpki-client