Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e32392e302f32342d3234203d3e203532333632.roa
File:                     3137302e3135302e32392e302f32342d3234203d3e203532333632.roa (raw, json)
Hash identifier:          otu8j9C+8LPM6bSbth8pggU3rgFmWu3g+9EPmEPCoN0=
Subject key identifier:   B4:5F:D5:0C:21:B4:0E:1A:EE:3F:2D:70:86:54:B1:EE:FC:65:83:2A
Certificate issuer:       /CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
Certificate serial:       226686FD3C33A11D343BF332C059282F4B93FA0E
Authority key identifier: 4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e32392e302f32342d3234203d3e203532333632.roa
Signing time:             Fri 14 Mar 2025 23:10:00 +0000
ROA not before:           Fri 14 Mar 2025 23:05:00 +0000
ROA not after:            Fri 13 Mar 2026 23:10:00 +0000
asID:                     52362
IP address blocks:        170.150.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:66:86:fd:3c:33:a1:1d:34:3b:f3:32:c0:59:28:2f:4b:93:fa:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0
        Validity
            Not Before: Mar 14 23:05:00 2025 GMT
            Not After : Mar 13 23:10:00 2026 GMT
        Subject: CN=B45FD50C21B40E1AEE3F2D708654B1EEFC65832A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:12:e3:f8:54:91:33:3c:3b:a1:10:a6:ae:
                    34:43:2c:88:ad:19:4e:d7:e0:81:36:90:87:5e:63:
                    c2:3c:9d:2b:14:50:aa:29:e1:e0:c5:f6:c1:06:82:
                    d2:22:25:a6:74:43:22:af:60:18:d5:32:99:4e:50:
                    39:25:2c:8e:a0:33:a7:85:a9:d1:9d:d5:8c:45:e9:
                    e6:36:72:00:46:f4:2b:a7:09:50:e8:a4:4b:75:4b:
                    bb:fa:41:97:38:f6:4a:42:95:b3:aa:54:5d:11:ea:
                    03:53:a0:cb:28:54:21:55:12:69:f2:f9:97:f5:f7:
                    c4:8c:0b:eb:dd:3d:4f:52:3e:a1:0f:ec:33:61:a2:
                    d3:b3:60:65:63:fe:2c:ec:f9:90:13:7f:78:98:1a:
                    2f:fc:f9:e7:fa:c4:27:2a:c9:07:4d:4b:6e:62:08:
                    8b:4e:1f:ce:1f:df:f7:97:cd:34:1a:c4:a4:7b:29:
                    cc:f8:d0:a2:eb:fe:3b:e2:8f:53:24:4b:e7:e0:68:
                    bd:4f:29:62:1f:44:24:7f:df:79:cb:e0:11:c8:38:
                    2d:4f:c9:24:fc:4e:18:b0:49:cc:83:4e:04:01:ea:
                    0a:17:39:21:ac:67:eb:a6:c0:56:65:09:2d:23:cb:
                    cd:f9:f2:a6:37:2c:73:fd:9c:5a:2f:b8:f7:bc:a6:
                    07:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:D5:0C:21:B4:0E:1A:EE:3F:2D:70:86:54:B1:EE:FC:65:83:2A
            X509v3 Authority Key Identifier:
                keyid:4C:C1:00:87:B3:2E:E6:9A:48:8F:5A:E8:AF:A2:EE:2F:50:61:AD:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4CC10087B32EE69A488F5AE8AFA2EE2F5061ADE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50072E5743143975C51B47D9F3A728F2952D2260ADDD001F0CA6307875AD41C8/0/3137302e3135302e32392e302f32342d3234203d3e203532333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:0d:61:a6:ad:06:d1:ed:6a:fb:6c:7a:00:fe:99:0b:70:f3:
         03:f4:bf:81:99:96:dc:02:80:1e:fc:9f:b3:34:d2:18:18:e2:
         84:9a:c2:e1:94:b3:03:aa:20:28:0b:16:06:9f:2d:49:2c:30:
         64:37:08:15:2f:8a:90:be:6a:4f:5a:bb:6c:23:3d:e0:86:b1:
         04:25:40:fd:3f:43:72:a4:2a:8a:85:16:5e:81:6d:1e:e5:1a:
         6c:a5:6e:82:02:ca:96:e4:d3:ec:37:27:18:09:0e:b7:ee:97:
         1c:d6:4c:d1:af:df:54:95:66:78:ec:8b:88:78:e2:15:fc:82:
         d4:4f:75:ef:a0:64:2a:69:c3:61:e7:40:90:ea:5a:e9:27:6f:
         08:2a:49:e4:30:84:91:f6:e1:b3:44:20:a9:bd:4f:6d:cc:87:
         69:3f:ce:e6:08:38:09:a8:aa:31:09:67:09:ac:b8:91:17:b6:
         2a:07:8c:87:ee:a3:91:0e:dd:84:f6:8f:e3:e9:9d:65:c4:25:
         ee:52:04:07:aa:fc:81:c8:d8:82:03:f1:07:29:38:1d:cb:fa:
         90:97:76:74:e2:67:17:8c:d7:8e:3b:54:24:04:3c:ac:64:65:
         4b:47:dc:b5:67:80:e6:9a:d0:17:63:45:93:1d:cd:54:06:8e:
         a6:94:0d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:11 2025 by rpki-client