Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa
File:                     3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          Hvwp2JQA4cjuwUKqW5rPTdOveRLiKbOBS0LJPn2FwIQ=
Subject key identifier:   F6:64:9B:94:7A:15:FB:95:EC:D4:6D:81:5E:7C:F6:69:88:52:1E:95
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       43E22902398F6B2BA7818243C440DC3CF3F9D204
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 17 Mar 2025 15:12:08 +0000
ROA not before:           Mon 17 Mar 2025 15:07:08 +0000
ROA not after:            Mon 16 Mar 2026 15:12:08 +0000
asID:                     7777
IP address blocks:        170.247.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:e2:29:02:39:8f:6b:2b:a7:81:82:43:c4:40:dc:3c:f3:f9:d2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar 17 15:07:08 2025 GMT
            Not After : Mar 16 15:12:08 2026 GMT
        Subject: CN=F6649B947A15FB95ECD46D815E7CF66988521E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:17:c2:1f:d1:0e:29:3f:57:62:73:36:d2:74:
                    13:1f:6a:e1:48:d5:b6:4c:72:e1:35:d4:7d:44:0d:
                    38:c5:3e:1d:c8:77:ed:ad:c7:43:17:15:f9:99:22:
                    cf:fd:bf:cc:21:de:56:b8:09:b8:7f:e6:f4:6e:2d:
                    9c:31:18:b0:ea:8d:0f:3d:09:7e:b6:d5:79:3c:0b:
                    d9:c7:58:8e:fd:cd:06:64:17:65:d0:5e:ae:0c:de:
                    5f:36:e0:30:fa:37:a0:74:1b:22:70:7d:8f:63:fb:
                    ca:6b:96:49:0c:85:cc:db:82:12:cb:8f:1a:c7:ac:
                    8f:d2:a2:cb:2a:e6:fe:03:cd:e8:25:d2:49:ac:f2:
                    86:91:5b:37:01:57:9e:41:79:6d:8f:a6:de:15:29:
                    f8:94:22:5e:0d:e6:f9:34:08:5c:8d:10:56:8c:17:
                    6e:c2:04:10:af:97:37:8b:ec:29:2e:45:9d:79:14:
                    57:7b:f9:57:b5:51:fd:0a:44:65:3c:fa:3a:f3:f3:
                    a3:7a:b6:ed:52:b9:e6:ab:f3:1f:6a:c0:dc:5f:c7:
                    23:3c:35:bb:47:53:eb:02:45:7f:e4:41:98:a1:78:
                    42:4e:ea:c1:81:ae:ee:84:f1:31:1e:28:b0:0a:4e:
                    7a:99:ab:26:1b:40:fa:36:5c:71:24:ce:55:ae:e0:
                    3e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:9B:94:7A:15:FB:95:EC:D4:6D:81:5E:7C:F6:69:88:52:1E:95
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d3:04:e8:d0:52:97:c4:ab:bd:c6:78:8e:53:78:f7:58:5b:11:
         06:a7:36:4d:43:8a:9e:5d:90:2c:af:e9:2f:81:3f:9f:7a:29:
         c1:2c:e6:1d:be:14:f4:66:27:1f:eb:eb:49:31:51:75:7f:e9:
         f1:9e:76:5d:ae:b6:11:64:50:59:9b:6b:35:73:74:e0:86:fd:
         3c:c2:cd:84:78:01:15:50:64:d4:d7:24:02:12:e2:74:64:5a:
         18:c0:fe:84:49:f8:74:19:30:bf:11:9a:aa:f4:45:97:d7:bb:
         0b:ef:64:0d:9b:9c:c8:01:69:e3:dc:bc:9f:82:8f:71:61:bf:
         48:d1:f3:04:f1:7f:75:9f:b7:f0:b4:10:e2:d9:bb:f7:ce:8f:
         ac:71:8f:66:d1:24:6c:5c:ff:25:4a:ce:7d:61:5b:15:34:38:
         c3:a4:bd:ec:4b:bc:27:ed:a0:8c:24:a7:b5:82:98:61:fc:e4:
         81:fb:86:05:f7:63:88:e9:a6:47:c6:30:6f:ca:0b:46:43:f8:
         75:62:62:c7:6f:e2:f9:9e:bd:f6:c5:82:5a:05:7d:95:2d:a9:
         45:d8:96:70:9d:c9:67:49:40:73:0f:f2:89:32:3e:ad:84:15:
         66:04:6a:cd:b7:44:61:2a:f1:6d:24:c9:65:bb:21:ed:77:ab:
         ae:68:dd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:56 2025 by rpki-client