Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/3137302e38302e3133362e302f32322d3234203d3e20323634383232.roa
File:                     3137302e38302e3133362e302f32322d3234203d3e20323634383232.roa (raw, json)
Hash identifier:          jGdl3i/ya9MpMAkp2Cqa4s7LOgVeq1e0fHRTTFtR4eU=
Subject key identifier:   63:4F:77:AA:BD:7F:7B:BD:7B:82:E6:41:0C:24:B6:1B:7A:A1:07:86
Certificate issuer:       /CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58
Certificate serial:       79A4B3E207CCD303B96E768EADE1F04CB43D0134
Authority key identifier: 88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/3137302e38302e3133362e302f32322d3234203d3e20323634383232.roa
Signing time:             Tue 04 Feb 2025 19:57:55 +0000
ROA not before:           Tue 04 Feb 2025 19:52:55 +0000
ROA not after:            Tue 03 Feb 2026 19:57:55 +0000
asID:                     264822
IP address blocks:        170.80.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl
                          rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a4:b3:e2:07:cc:d3:03:b9:6e:76:8e:ad:e1:f0:4c:b4:3d:01:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58
        Validity
            Not Before: Feb  4 19:52:55 2025 GMT
            Not After : Feb  3 19:57:55 2026 GMT
        Subject: CN=634F77AABD7F7BBD7B82E6410C24B61B7AA10786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:dd:1a:ca:44:42:83:08:5d:b5:ec:cc:9e:
                    30:c1:b1:50:2b:b6:c7:13:b9:a9:4a:45:2b:98:af:
                    c0:4d:cb:42:38:bb:12:aa:09:57:82:db:63:5c:e0:
                    c2:01:ce:df:6e:46:99:f1:96:10:3a:1a:a2:21:f7:
                    80:e4:db:f8:04:0b:9b:75:d1:c7:79:51:06:53:2a:
                    ab:a2:fb:a6:d2:4d:f7:f0:ac:ed:ed:ca:c4:65:47:
                    49:42:9a:66:63:df:14:78:05:ee:7a:e5:42:a3:47:
                    e7:78:16:db:53:b7:3c:37:fd:3e:67:37:2e:45:fa:
                    7c:a9:8d:12:97:db:3f:99:77:36:2f:0e:03:2e:7a:
                    db:cf:de:f1:9e:bc:82:6d:46:fb:18:62:a9:f9:7d:
                    a2:85:4a:c7:da:33:40:72:eb:02:6d:3f:1b:8e:2a:
                    7e:33:7b:2e:31:e0:14:ca:32:25:a6:2d:c7:1f:4f:
                    e4:c4:c1:81:20:8c:2f:b3:55:43:aa:80:ac:51:2c:
                    fb:67:6a:53:cf:7d:72:5d:5c:69:ac:3a:65:ae:c5:
                    5f:10:d5:f7:ea:31:f5:93:ca:c2:b1:c7:f7:18:1d:
                    2b:66:57:bc:c4:7f:14:6b:e0:b3:0b:d6:63:b9:89:
                    55:11:08:93:5b:8f:f6:f6:51:5a:70:8f:97:6d:2a:
                    77:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:4F:77:AA:BD:7F:7B:BD:7B:82:E6:41:0C:24:B6:1B:7A:A1:07:86
            X509v3 Authority Key Identifier:
                keyid:88:ED:9F:EC:72:E4:DE:7B:BA:CC:A9:96:D9:28:A1:3A:27:AF:7C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/88ED9FEC72E4DE7BBACCA996D928A13A27AF7C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64051B29DA82CB9E438A8A1FE5EACCFAD87F1651665561A3B495F26A90D9E694/0/3137302e38302e3133362e302f32322d3234203d3e20323634383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:bb:84:b6:2b:65:69:d4:c6:c3:ad:8e:d5:3e:c7:ff:3c:8e:
         82:b0:7f:6b:b7:63:e3:8c:6d:9d:75:7d:49:6d:36:21:e1:c4:
         b0:cc:c6:b2:3d:71:91:df:9b:f7:95:d0:a9:92:d4:57:2a:2c:
         81:96:83:26:f0:22:bb:b9:63:4b:ea:59:1d:52:34:ce:56:95:
         be:98:9f:f7:84:57:8b:a1:67:e4:98:93:dc:25:75:79:0f:f4:
         3d:45:4d:0f:07:d6:33:ff:3f:18:ad:a6:90:10:87:99:2c:34:
         7a:16:53:64:21:e7:5a:bf:76:fb:50:ad:a5:b4:ea:f4:9b:35:
         a4:27:b1:16:4a:73:b8:2f:5b:f2:72:8f:77:c6:3f:53:3a:23:
         a0:73:d6:25:81:21:d5:49:f2:1d:a3:f7:ba:79:f1:4d:9d:33:
         77:e8:8f:39:1a:16:84:67:80:b0:f0:8c:da:09:b9:bc:97:ac:
         8c:3b:1c:cd:b4:d1:20:47:b8:cf:9a:50:f8:dd:c9:30:d4:be:
         d2:9a:b7:25:0d:0d:b5:f0:1c:63:99:e9:71:05:b6:03:6a:29:
         98:4a:59:db:e8:10:54:cb:a7:fb:b4:ee:63:88:6c:53:94:07:
         55:a2:19:ba:05:da:d2:c5:e2:b0:9b:28:58:d7:bf:a8:23:ab:
         3c:6e:0d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:01:59 2025 by rpki-client