Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32342d3234203d3e2037373737.roa
File:                     3137302e3234372e3136382e302f32342d3234203d3e2037373737.roa (raw, json)
Hash identifier:          /nRlsPmpEftHf0WRnBiA8YD6Ti97caq9SKG3muCThm0=
Subject key identifier:   04:54:45:B2:34:7E:27:AB:3B:FE:1C:13:7B:DA:B3:45:7F:E0:5B:EF
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       2FEB835C08155433B091F2F7D026789334BA9F22
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32342d3234203d3e2037373737.roa
Signing time:             Fri 11 Jul 2025 04:35:00 +0000
ROA not before:           Fri 11 Jul 2025 04:30:00 +0000
ROA not after:            Fri 10 Jul 2026 04:35:00 +0000
asID:                     7777
IP address blocks:        170.247.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Jul 2025 22:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:eb:83:5c:08:15:54:33:b0:91:f2:f7:d0:26:78:93:34:ba:9f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Jul 11 04:30:00 2025 GMT
            Not After : Jul 10 04:35:00 2026 GMT
        Subject: CN=045445B2347E27AB3BFE1C137BDAB3457FE05BEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2e:5b:c4:7d:12:74:15:62:63:d1:3a:a2:9d:
                    3a:8e:3c:55:ef:f0:7a:2d:e0:ac:ff:0d:8b:71:89:
                    2e:49:5e:cc:cf:58:e3:be:fa:e8:26:6b:43:95:a5:
                    90:f6:21:e2:ac:a0:49:f9:ac:eb:97:ac:bc:d7:5b:
                    4b:e0:78:36:47:c2:33:5e:72:01:64:79:54:0f:6a:
                    cf:85:3d:c9:f5:36:ee:7b:4e:dd:a3:60:d3:b4:ea:
                    35:74:54:a2:66:db:10:60:2d:31:40:09:89:c4:61:
                    52:0b:b8:e5:61:e0:b8:b7:36:16:7e:63:79:ac:5a:
                    d7:eb:4d:36:76:60:bc:29:22:72:cd:fa:46:ed:1b:
                    95:b6:f9:8a:96:7d:20:82:a7:c2:e5:28:43:1d:d0:
                    42:c0:e5:d5:72:46:ff:0f:5e:be:9c:ea:ab:b1:bf:
                    a3:23:58:91:93:86:01:51:63:fe:f8:1f:bd:38:15:
                    71:b6:f8:72:fd:43:ad:a9:67:0a:f6:f9:aa:a6:a0:
                    2f:f4:62:67:1c:4b:60:e4:d3:59:61:15:6e:2c:6d:
                    e8:71:94:30:1a:b0:0e:a8:97:42:39:20:d9:0d:a6:
                    28:4c:8f:a3:ce:40:a2:93:28:0f:67:59:5d:e3:4e:
                    df:bd:9d:df:57:2b:af:0c:6b:95:bd:95:7b:07:08:
                    4a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:54:45:B2:34:7E:27:AB:3B:FE:1C:13:7B:DA:B3:45:7F:E0:5B:EF
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32342d3234203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:e7:d3:f2:ad:6d:86:f9:7f:7a:60:25:81:18:24:60:74:
         f5:1f:42:5a:35:58:e6:13:a3:9c:bb:eb:1b:37:bc:cd:5a:fa:
         05:7b:6f:c9:ee:47:89:ee:cb:b2:08:dc:52:f0:f6:49:ec:bd:
         ff:92:ec:56:31:82:fb:c4:25:78:83:0f:ea:07:5b:e2:af:24:
         99:da:01:c3:08:d9:34:d9:ee:28:b6:20:24:03:1e:de:ed:4f:
         0c:8d:8d:8d:f6:d8:64:e3:20:6f:dd:60:87:db:4b:63:f1:10:
         a2:b1:58:16:3b:f2:c4:5c:99:c5:5a:56:53:f6:23:bf:bb:88:
         d9:04:88:4d:22:b1:ce:5f:c4:a4:87:2d:d6:4a:5f:8f:af:54:
         51:5a:45:0e:5e:87:46:c0:65:a8:78:64:4e:38:54:ce:37:23:
         11:7b:a1:84:e0:38:19:e7:8b:43:66:5b:a6:62:1b:95:84:00:
         6e:ef:ab:82:18:d6:62:fe:eb:19:dd:c0:5d:de:d6:88:02:20:
         06:81:b8:3a:61:7b:16:3a:dc:31:53:95:70:0e:f7:8a:6b:77:
         92:77:15:45:8c:40:85:c1:c9:e0:c5:8c:52:3d:8e:47:1e:ae:
         11:eb:84:a9:7b:61:2e:a2:57:2f:03:b3:37:3f:a9:dc:b7:4d:
         ce:80:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:36:05 2025 by rpki-client