Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
File:                     3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa (raw, json)
Hash identifier:          0IZvmdVw1OnqNWzgkmmc0W2z4t0K0Ft/1pKE/P+0/ck=
Subject key identifier:   88:31:D9:9D:CD:E7:D8:07:AE:DB:2D:32:58:62:CB:E7:2C:D0:91:EB
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       084742942F1FEE62952993BC92583F90BC7ACE63
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
Signing time:             Tue 04 Feb 2025 18:05:22 +0000
ROA not before:           Tue 04 Feb 2025 18:00:22 +0000
ROA not after:            Tue 03 Feb 2026 18:05:22 +0000
asID:                     264843
IP address blocks:        170.82.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:47:42:94:2f:1f:ee:62:95:29:93:bc:92:58:3f:90:bc:7a:ce:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Feb  4 18:00:22 2025 GMT
            Not After : Feb  3 18:05:22 2026 GMT
        Subject: CN=8831D99DCDE7D807AEDB2D325862CBE72CD091EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:41:3f:12:d8:d3:b4:65:09:b2:c3:90:1b:
                    e2:fc:62:b5:20:92:0e:3d:01:32:40:9f:43:b1:44:
                    5c:48:38:09:18:f5:7a:e9:0d:72:45:79:a8:4f:39:
                    49:d0:1d:27:0f:e2:c5:e7:05:9e:dd:82:49:36:c9:
                    c8:f2:1d:95:53:00:8b:e3:93:3d:01:cc:79:8a:5e:
                    8f:cc:68:6b:c5:18:fd:de:2c:80:4d:b6:66:7f:ca:
                    06:3c:b2:1e:a6:f1:6f:21:29:15:8c:e6:03:b9:aa:
                    36:4e:20:00:1f:89:f6:64:ad:12:64:3a:97:10:43:
                    fd:2e:b8:bf:a6:5d:d7:51:40:6b:19:80:9c:c9:66:
                    92:67:23:40:4d:bf:db:0a:67:d9:1d:99:87:57:bb:
                    c5:d2:61:20:db:0f:e6:94:3b:be:cc:ac:44:e3:bf:
                    90:5f:59:84:63:85:1a:4f:0d:7a:af:97:32:07:02:
                    14:cd:77:93:1e:73:63:9d:30:e2:56:82:80:83:26:
                    68:e4:fd:53:18:f8:dd:a0:66:d6:48:6e:5c:9b:b1:
                    4a:1f:8d:bf:ef:ef:10:c2:b1:3a:c2:76:df:df:c3:
                    20:9a:da:4b:34:e2:3b:91:33:53:53:29:ed:74:0f:
                    0d:37:04:f6:9f:41:fa:da:5d:9f:bb:35:12:69:13:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:31:D9:9D:CD:E7:D8:07:AE:DB:2D:32:58:62:CB:E7:2C:D0:91:EB
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:66:1a:69:2e:66:25:97:bc:87:e6:b6:68:99:39:b3:3b:af:
         24:a5:51:b3:d6:ad:f9:d4:ce:65:74:ee:02:95:25:06:81:d7:
         1d:5c:ae:de:52:f7:eb:ac:9e:9b:af:81:9d:ea:2d:f0:45:0b:
         46:40:2c:ff:c8:84:b9:af:10:a5:89:dd:dc:a2:63:43:62:6d:
         6d:6e:f4:0d:1d:f1:25:8c:34:b6:af:bf:68:4a:69:d0:f7:08:
         61:bf:54:75:d0:65:08:3e:ea:e6:e0:12:f3:d2:f2:ee:93:bc:
         1d:1e:e9:79:5e:da:7d:1f:d1:a1:bc:dd:c3:5d:46:e5:7f:5e:
         bf:e1:24:47:05:8e:aa:2e:bd:39:38:a3:b2:a9:e8:b3:39:fc:
         b3:32:1a:fe:f8:ac:38:6b:4c:cb:9c:21:77:cf:3d:9a:08:4a:
         3a:50:8b:da:8e:23:f4:7d:72:13:98:c3:50:aa:f6:af:2c:3e:
         71:09:ec:a8:9b:1b:58:04:a8:48:50:1b:e3:84:be:40:ae:e9:
         18:c5:64:e6:dc:74:da:c3:fd:46:43:8b:f2:10:19:a8:31:a1:
         4d:d3:66:b5:f9:45:3a:d0:b8:17:b9:a0:37:fd:54:c4:8d:1c:
         8a:c4:9a:0e:22:d6:b0:13:00:1b:14:14:50:ee:cd:9c:68:91:
         9c:6d:a8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:44:08 2025 by rpki-client