Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3137302e3233312e33362e302f32322d3234203d3e203237383531.roa
File:                     3137302e3233312e33362e302f32322d3234203d3e203237383531.roa (raw, json)
Hash identifier:          +3bPk6nyL4hG+c33vJUBc8Tw8BcorvgDj73i9rSCKVg=
Subject key identifier:   02:14:DE:79:DA:22:39:09:12:C4:60:CB:1C:97:2A:53:31:F0:89:59
Certificate issuer:       /CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
Certificate serial:       7FD30E87E10C0AA4E7F388B616AC3F981287B7B7
Authority key identifier: 57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3137302e3233312e33362e302f32322d3234203d3e203237383531.roa
Signing time:             Tue 04 Feb 2025 18:48:47 +0000
ROA not before:           Tue 04 Feb 2025 18:43:47 +0000
ROA not after:            Tue 03 Feb 2026 18:48:47 +0000
asID:                     27851
IP address blocks:        170.231.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:d3:0e:87:e1:0c:0a:a4:e7:f3:88:b6:16:ac:3f:98:12:87:b7:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5762012909FC5692BB70AC7A12BF804F577A0AE8
        Validity
            Not Before: Feb  4 18:43:47 2025 GMT
            Not After : Feb  3 18:48:47 2026 GMT
        Subject: CN=0214DE79DA22390912C460CB1C972A5331F08959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:eb:68:7f:29:95:76:61:31:b5:24:e8:4a:a7:
                    77:d4:a1:6c:3d:e1:90:c9:dd:a5:40:aa:85:1c:0c:
                    70:35:2f:49:d2:b1:42:70:e8:ef:a1:52:2b:8f:87:
                    49:6f:50:31:80:f0:bd:57:c9:f2:56:82:1b:b4:f2:
                    06:86:18:55:b2:c5:86:4d:22:0a:50:c3:9c:f1:6e:
                    4f:04:f7:d9:e8:f6:b0:35:17:fa:83:2b:2e:55:b1:
                    7d:7c:ba:0f:3f:de:a2:4e:97:cf:3c:e3:3b:12:b2:
                    4b:2a:90:1b:80:ee:2d:ee:96:05:92:d4:90:2b:eb:
                    53:fa:8c:f3:ce:c0:6e:0f:72:2e:6d:68:b3:6b:d1:
                    78:83:8a:0b:a3:38:eb:0b:26:24:c7:4f:db:db:b5:
                    b8:e9:03:7d:5b:43:e9:91:a3:30:94:cc:5e:36:78:
                    e5:ee:29:30:b3:19:d4:37:25:db:8e:e5:09:7e:ce:
                    bf:1b:fe:1a:c6:53:b7:4c:d9:ef:91:9a:f7:4c:c5:
                    99:c8:e0:46:cd:17:db:c2:7d:a5:a4:75:f8:77:fd:
                    e6:cb:95:af:99:24:5c:e5:33:09:43:e3:54:80:0c:
                    fa:54:d0:db:87:78:2f:5e:04:8e:a4:64:c6:f2:b6:
                    be:c6:2b:5b:41:10:ac:d0:44:da:0d:f6:b9:cb:6e:
                    33:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:14:DE:79:DA:22:39:09:12:C4:60:CB:1C:97:2A:53:31:F0:89:59
            X509v3 Authority Key Identifier:
                keyid:57:62:01:29:09:FC:56:92:BB:70:AC:7A:12:BF:80:4F:57:7A:0A:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5762012909FC5692BB70AC7A12BF804F577A0AE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61CCC720CDBC167213ADAA418043DA86E1FE3975F38BB23C48C43A8E8C60C3F0/0/3137302e3233312e33362e302f32322d3234203d3e203237383531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c1:73:78:29:e6:46:86:73:8a:cb:07:5e:0e:70:96:76:c3:
         6d:91:c6:ef:d2:00:4d:53:cf:28:f6:57:32:2f:83:9c:ea:de:
         78:b4:6b:dd:71:d1:8f:84:ce:ba:5e:be:ef:e1:d7:03:b0:3b:
         e9:52:ed:ba:e0:ca:a3:44:4a:9b:e5:c2:f5:70:55:5e:38:fe:
         42:48:e4:00:f9:8d:f3:37:41:71:ab:4c:9e:b3:4b:a2:39:d0:
         d2:f0:46:bd:cd:6a:7a:cf:50:aa:5c:17:3e:f7:02:63:ac:bb:
         6c:b9:e5:e0:7c:ef:d2:08:96:3b:89:3c:f2:86:d3:90:f7:41:
         d7:00:6a:f6:b5:fc:d1:4f:f0:b2:e1:60:ce:a8:0c:6f:8f:84:
         a2:1e:20:7c:03:c0:64:b6:6c:79:a9:65:46:be:fd:64:76:6f:
         dd:55:99:50:9b:e4:a6:c2:e4:ba:6f:e8:88:ae:fd:1b:57:d8:
         6b:cb:8e:52:58:8e:dd:c3:c2:9d:16:4e:63:58:02:df:f0:15:
         b1:dd:b2:47:e3:7f:2c:b4:1d:57:4b:51:70:4d:e7:0e:6c:17:
         25:71:b8:df:a0:ff:1d:8d:39:48:a9:4b:72:e3:5a:50:89:39:
         07:d0:a4:24:1b:61:f3:de:b1:e8:70:56:de:45:95:33:a9:bd:
         1f:68:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:30 2025 by rpki-client