Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa
File:                     3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          BUEP7hwZsx8BNidmkTVhaWJHrWcwVwA6mgfnHE7MQWw=
Subject key identifier:   E7:60:6B:47:61:19:F5:40:87:F7:33:20:1D:3E:A6:BA:5B:2A:03:E6
Certificate issuer:       /CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Certificate serial:       01D268B3F8FFDDAC7F092EF9385820C9D1870D1C
Authority key identifier: 1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa
Signing time:             Tue 04 Feb 2025 18:37:00 +0000
ROA not before:           Tue 04 Feb 2025 18:32:00 +0000
ROA not after:            Tue 03 Feb 2026 18:37:00 +0000
asID:                     264827
IP address blocks:        170.247.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:68:b3:f8:ff:dd:ac:7f:09:2e:f9:38:58:20:c9:d1:87:0d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
        Validity
            Not Before: Feb  4 18:32:00 2025 GMT
            Not After : Feb  3 18:37:00 2026 GMT
        Subject: CN=E7606B476119F54087F733201D3EA6BA5B2A03E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:d5:ea:2e:8d:e2:bf:a0:41:33:52:53:ea:
                    99:39:fa:0a:98:1a:ab:e7:fc:f3:3b:7b:76:32:21:
                    2c:05:cd:d2:35:8f:fb:fc:13:0f:13:6a:77:33:7b:
                    42:06:25:67:84:88:ab:6d:09:93:50:ae:63:4e:8c:
                    f4:9b:44:c0:da:2d:90:16:f7:d0:ac:3a:83:ee:95:
                    d9:c6:89:c3:86:7d:82:e5:34:dc:11:7a:6e:8c:d7:
                    79:0e:1d:2b:28:35:d6:b4:c2:5e:12:86:f7:63:46:
                    2c:88:51:76:30:d9:cb:ce:65:67:4e:b5:f3:41:b2:
                    69:1d:86:8b:c2:fc:37:84:1f:e0:29:b2:1b:80:2c:
                    1a:83:d6:dc:4c:cd:d9:64:37:fa:7e:3a:12:e8:e0:
                    8a:07:71:53:9e:a6:36:71:b3:21:d9:a8:ad:3f:fd:
                    4f:0a:38:c4:a0:41:f0:2f:ad:21:e8:65:b9:5c:b0:
                    9d:d5:f4:c7:19:db:16:6e:b5:e9:2f:43:07:65:82:
                    df:0e:62:5e:59:44:de:98:c8:da:2c:50:7a:85:d2:
                    3f:31:2a:7d:99:77:ee:54:0f:aa:bf:55:f7:b0:50:
                    f5:1b:03:88:ac:de:23:1c:5d:bd:a2:ee:13:0d:7c:
                    a8:74:76:39:b5:eb:35:88:d9:fe:1c:ed:fa:15:69:
                    7d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:60:6B:47:61:19:F5:40:87:F7:33:20:1D:3E:A6:BA:5B:2A:03:E6
            X509v3 Authority Key Identifier:
                keyid:1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230342e302f32342d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a6:0a:87:cd:2a:5a:05:64:08:2b:f4:ef:09:3d:76:b8:4f:
         7e:98:4c:6e:87:06:42:20:7f:1f:d7:ad:ee:51:e9:57:c4:ad:
         68:92:ab:01:37:ad:d6:1a:61:2b:72:4c:23:95:93:b2:85:84:
         78:2e:9e:76:bc:75:79:ef:60:5d:7c:65:2c:d8:fc:e9:7a:0e:
         e4:5c:b5:db:e6:3e:2c:a8:f3:e5:8c:7d:28:24:74:1e:33:21:
         88:c9:96:09:c6:b4:f2:9c:98:42:6c:14:4d:a0:1e:aa:52:5d:
         5c:e4:cd:3b:ae:f6:fb:6d:0e:5d:bd:49:bd:41:92:b8:ad:4b:
         dc:ec:40:94:59:69:c3:85:6b:8c:c2:34:e4:c7:46:8c:94:4d:
         02:79:dc:e4:13:2a:e4:70:1b:25:f1:e8:7d:cc:82:62:7b:e4:
         87:96:09:da:3c:2c:e9:f9:f2:38:39:c9:dd:10:63:c1:19:c2:
         50:43:e0:37:2a:4e:59:e0:6f:9d:b3:ef:aa:80:35:98:8f:41:
         4d:89:c2:80:f3:e3:c5:d7:5c:bd:fc:b8:d4:2c:b0:94:4b:aa:
         06:ff:fb:cc:ce:2e:c4:7b:46:c4:ff:6c:7b:80:4e:97:2a:26:
         51:60:24:2b:40:8a:3f:f6:ed:e5:6a:3d:88:9b:90:12:7c:10:
         c6:0f:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:00:06 2025 by rpki-client