Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa
File:                     3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa (raw, json)
Hash identifier:          x6fd72u+6Cy2Nlgxu9yw1q/p3isrLv6eHiwO8wuPHbs=
Subject key identifier:   42:07:28:69:21:B8:1A:C5:FC:B6:05:19:7C:F5:19:59:7A:D4:5E:AD
Certificate issuer:       /CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
Certificate serial:       75DA921B7B624118F1322DD2F668904885E8D413
Authority key identifier: 0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa
Signing time:             Tue 04 Feb 2025 18:31:48 +0000
ROA not before:           Tue 04 Feb 2025 18:26:48 +0000
ROA not after:            Tue 03 Feb 2026 18:31:48 +0000
asID:                     18840
IP address blocks:        170.246.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:51:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:da:92:1b:7b:62:41:18:f1:32:2d:d2:f6:68:90:48:85:e8:d4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0
        Validity
            Not Before: Feb  4 18:26:48 2025 GMT
            Not After : Feb  3 18:31:48 2026 GMT
        Subject: CN=4207286921B81AC5FCB605197CF519597AD45EAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bd:b8:74:89:3a:e0:04:41:de:42:ed:7a:30:
                    a7:f8:39:dd:f5:80:70:3c:ec:99:a4:f7:df:f2:51:
                    1a:a2:9b:64:e4:12:b5:d9:5a:f5:19:78:d5:27:b6:
                    a9:22:70:eb:dd:fc:54:c7:b8:da:c0:98:dd:b5:34:
                    85:52:d6:6b:bb:40:61:42:f9:77:6e:0c:f5:9a:71:
                    35:8c:f0:4f:c1:3c:cf:58:34:ab:c8:16:30:44:b9:
                    4e:b6:ea:87:ad:e0:e4:37:5c:2e:41:a4:9d:37:99:
                    7d:d0:ca:db:ef:73:7d:26:ed:64:43:42:81:e4:7a:
                    4c:7c:4b:ae:4f:4c:e7:b5:04:df:2f:19:7b:e7:ad:
                    c8:e1:73:d9:2f:da:fe:67:81:72:45:08:89:22:58:
                    47:7d:51:28:f5:bb:7f:4d:5e:e2:70:fd:b0:62:18:
                    ac:0c:27:c7:a6:f4:61:5a:77:e6:ee:f8:80:bb:3b:
                    f7:68:3a:8b:61:d4:b1:09:99:37:25:0a:8b:e3:44:
                    2a:a5:36:54:48:e0:da:07:59:03:76:87:04:fd:f4:
                    c3:c8:dc:66:73:fa:71:23:71:b8:50:81:9c:fc:ef:
                    39:8e:02:2a:07:ee:6e:7b:f7:85:c6:5c:64:93:91:
                    10:da:b9:7e:d1:53:b2:43:a4:e9:41:64:36:34:0a:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:07:28:69:21:B8:1A:C5:FC:B6:05:19:7C:F5:19:59:7A:D4:5E:AD
            X509v3 Authority Key Identifier:
                keyid:0C:8C:E2:A1:7D:80:1B:B5:C7:70:E6:EB:6A:B3:DD:DB:F7:62:58:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C8CE2A17D801BB5C770E6EB6AB3DDDBF76258C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BDD72F00293C6D73B1A4E39899D25DCA3C3295DFB2004B7979E4623E40469AF/0/3137302e3234362e3135322e302f32322d3234203d3e203138383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:33:4b:8d:fa:20:21:79:e2:f0:0f:31:4d:fa:41:cd:68:57:
         6e:36:a9:15:5f:70:2a:e2:2d:57:9a:1b:52:dc:06:c4:27:58:
         da:89:95:b7:d6:57:8c:fc:18:b3:6b:0e:91:49:b3:b2:da:d8:
         f2:4d:ce:18:0b:42:25:d2:15:af:43:af:4c:b6:ef:01:22:2b:
         70:45:dd:cd:ca:d2:5b:ae:f5:2c:93:80:c4:7d:62:ca:14:33:
         8e:e8:ec:2c:2d:2c:64:c6:5a:22:9e:b2:5a:19:2d:fa:85:5c:
         39:37:7d:26:7c:31:3b:b0:cd:27:11:05:6f:2c:8f:c5:a8:58:
         88:bd:d5:d5:be:be:2b:be:f4:fd:fc:c5:60:10:65:f8:69:ef:
         d0:05:96:76:d6:21:ec:19:cb:09:a1:0d:39:51:b8:bb:44:45:
         1d:35:dc:a2:f6:50:a9:48:8c:ad:66:a1:13:6d:88:da:fc:07:
         c2:ff:5a:14:54:9a:1d:b7:d0:f7:c2:90:1c:f9:4a:77:25:e5:
         f0:2d:a6:55:ff:52:2f:87:98:ca:cb:fa:ef:d7:3a:2e:5a:5b:
         44:13:09:55:eb:ae:81:d8:64:f1:bf:c9:0d:fd:b9:fe:78:f9:
         58:9d:60:3a:1e:ab:2b:16:83:c7:8a:3c:7b:2c:f6:7d:33:5c:
         45:df:6f:88
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUddqSG3tiQRjxMi3S9miQSIXo1BMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM4Q0UyQTE3RDgwMUJCNUM3NzBFNkVCNkFCM0REREJG
NzYyNThDMDAeFw0yNTAyMDQxODI2NDhaFw0yNjAyMDMxODMxNDhaMDMxMTAvBgNV
BAMTKDQyMDcyODY5MjFCODFBQzVGQ0I2MDUxOTdDRjUxOTU5N0FENDVFQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUvbh0iTrgBEHeQu16MKf4Od31
gHA87Jmk99/yURqim2TkErXZWvUZeNUntqkicOvd/FTHuNrAmN21NIVS1mu7QGFC
+XduDPWacTWM8E/BPM9YNKvIFjBEuU626oet4OQ3XC5BpJ03mX3Qytvvc30m7WRD
QoHkekx8S65PTOe1BN8vGXvnrcjhc9kv2v5ngXJFCIkiWEd9USj1u39NXuJw/bBi
GKwMJ8em9GFad+bu+IC7O/doOoth1LEJmTclCovjRCqlNlRI4NoHWQN2hwT99MPI
3GZz+nEjcbhQgZz87zmOAioH7m5794XGXGSTkRDauX7RU7JDpOlBZDY0Co5NAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQgcoaSG4GsX8tgUZfPUZWXrUXq0wHwYDVR0j
BBgwFoAUDIzioX2AG7XHcObrarPd2/diWMAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkRENzJGMDAyOTNDNkQ3M0IxQTRFMzk4OTlEMjVEQ0Ez
QzMyOTVERkIyMDA0Qjc5NzlFNDYyM0U0MDQ2OUFGLzAvMEM4Q0UyQTE3RDgwMUJC
NUM3NzBFNkVCNkFCM0REREJGNzYyNThDMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wQzhDRTJBMTdEODAxQkI1Qzc3
MEU2RUI2QUIzREREQkY3NjI1OEMwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJERDcyRjAwMjkzQzZENzNCMUE0RTM5ODk5RDI1RENBM0MzMjk1REZC
MjAwNEI3OTc5RTQ2MjNFNDA0NjlBRi8wLzMxMzczMDJlMzIzNDM2MmUzMTM1MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTM4MzgzNDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvaY
MA0GCSqGSIb3DQEBCwUAA4IBAQBIM0uN+iAheeLwDzFN+kHNaFduNqkVX3Aq4i1X
mhtS3AbEJ1jaiZW31leM/Bizaw6RSbOy2tjyTc4YC0Il0hWvQ69Mtu8BIitwRd3N
ytJbrvUsk4DEfWLKFDOO6OwsLSxkxloinrJaGS36hVw5N30mfDE7sM0nEQVvLI/F
qFiIvdXVvr4rvvT9/MVgEGX4ae/QBZZ21iHsGcsJoQ05Ubi7REUdNdyi9lCpSIyt
ZqETbYja/AfC/1oUVJodt9D3wpAc+Up3JeXwLaZV/1Ivh5jKy/rv1zouWltEEwlV
666B2GTxv8kN/bn+ePlYnWA6HqsrFoPHijx7LPZ9M1xF32+I
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:53:54 2025 by rpki-client