Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa
File:                     3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa (raw, json)
Hash identifier:          /2cVfcfzL9lmTv5XfEEu9Txcv8oax84zDYSoIgz+3u4=
Subject key identifier:   99:00:C7:C0:7E:62:00:9D:2D:31:A6:24:67:3B:C6:13:57:B7:B3:40
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       18AA955FAAD12DDEC63303243512DB40E2CBDE56
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa
Signing time:             Tue 04 Feb 2025 18:18:29 +0000
ROA not before:           Tue 04 Feb 2025 18:13:29 +0000
ROA not after:            Tue 03 Feb 2026 18:18:29 +0000
asID:                     264741
IP address blocks:        170.233.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:95:5f:aa:d1:2d:de:c6:33:03:24:35:12:db:40:e2:cb:de:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Feb  4 18:13:29 2025 GMT
            Not After : Feb  3 18:18:29 2026 GMT
        Subject: CN=9900C7C07E62009D2D31A624673BC61357B7B340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:32:c7:90:c4:7d:49:ea:ae:ed:11:56:14:7c:
                    20:c1:40:16:7a:61:94:0d:df:df:c5:5a:69:6d:bd:
                    a3:17:f9:3e:6a:fb:ed:b9:b6:f8:12:11:a1:5c:b0:
                    97:28:78:67:a1:07:b8:15:cc:82:c2:60:c5:7e:c3:
                    5e:f5:26:6b:02:3f:00:40:5d:5e:96:f1:fa:0f:97:
                    49:40:bc:0a:15:c6:0b:ba:b8:8b:a5:44:63:9f:96:
                    dd:92:41:f6:9e:bf:41:55:5a:af:8e:a3:66:ef:5f:
                    80:74:8e:8a:88:e8:38:2e:1b:02:18:82:7c:eb:4f:
                    29:8b:1c:29:be:01:7d:da:ce:d4:aa:e1:87:2a:ee:
                    76:ec:92:ab:cb:4c:d0:3a:2e:d2:c5:ed:96:7b:26:
                    40:5b:61:82:c4:e8:bd:99:8a:53:50:af:a5:f7:0d:
                    2e:2a:4b:e1:e9:cf:46:af:ff:64:9e:3c:5a:e2:57:
                    70:0f:c9:42:05:8a:1d:9c:a0:c0:6f:53:42:95:d9:
                    c5:0f:e6:39:68:8c:84:87:90:5f:e2:ff:b7:b9:c4:
                    da:5c:39:eb:0a:50:41:0e:d6:e5:2a:61:a9:90:12:
                    7b:b2:fd:46:4e:b8:26:04:26:f0:fe:d2:48:84:19:
                    f6:63:de:fa:06:11:eb:62:83:5e:4b:22:0e:c4:ef:
                    88:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:C7:C0:7E:62:00:9D:2D:31:A6:24:67:3B:C6:13:57:B7:B3:40
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:07:ad:98:8c:08:b8:f1:2f:1b:11:86:b3:ec:e7:de:d4:
         ac:15:01:5c:de:52:4f:4a:47:96:2f:60:bf:30:60:ba:be:79:
         67:11:25:b2:9e:8c:81:ea:ec:4c:7c:fb:26:03:c1:fc:dc:9c:
         da:40:f5:49:68:0c:b6:e1:0b:d8:d2:9b:db:7c:7c:2b:1a:c3:
         91:54:e4:34:5a:a1:8a:3f:e3:53:3a:73:92:b5:bc:08:62:a6:
         8f:fd:60:15:8f:c7:b7:45:6d:c3:1a:3d:4c:f9:01:1c:aa:3d:
         7e:6f:d0:9b:b4:c5:b5:c4:75:f0:e6:5b:3c:ec:81:bc:d7:81:
         08:af:4c:0a:ce:7e:3e:34:0a:31:c8:31:b0:86:cd:8b:bb:8d:
         92:de:03:d0:e7:57:ad:63:ae:0f:12:29:1b:5d:67:78:30:57:
         ad:19:da:ec:42:5f:7a:9d:59:dd:83:e7:6c:62:a7:27:31:c9:
         7d:5d:e1:99:42:6e:ad:19:70:8d:1e:01:55:df:9a:f3:74:60:
         1a:4e:4f:b6:5f:2d:20:1b:1e:60:f3:38:29:1b:15:8c:1b:90:
         5d:98:2c:11:6e:f8:b0:21:a1:90:a9:43:59:bb:90:b1:8a:70:
         14:96:e5:d0:45:45:b7:6a:65:46:15:f4:b5:12:1b:36:c3:0b:
         dc:53:c8:07
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUGKqVX6rRLd7GMwMkNRLbQOLL3lYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJBRDAzNkYzQjhBQ0U1MzFFMUEwOTVGQUMxRTEzQjJD
NzMyNDQzMDAeFw0yNTAyMDQxODEzMjlaFw0yNjAyMDMxODE4MjlaMDMxMTAvBgNV
BAMTKDk5MDBDN0MwN0U2MjAwOUQyRDMxQTYyNDY3M0JDNjEzNTdCN0IzNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMseQxH1J6q7tEVYUfCDBQBZ6
YZQN39/FWmltvaMX+T5q++25tvgSEaFcsJcoeGehB7gVzILCYMV+w171JmsCPwBA
XV6W8foPl0lAvAoVxgu6uIulRGOflt2SQfaev0FVWq+Oo2bvX4B0joqI6DguGwIY
gnzrTymLHCm+AX3aztSq4Ycq7nbskqvLTNA6LtLF7ZZ7JkBbYYLE6L2ZilNQr6X3
DS4qS+Hpz0av/2SePFriV3APyUIFih2coMBvU0KV2cUP5jlojISHkF/i/7e5xNpc
OesKUEEO1uUqYamQEnuy/UZOuCYEJvD+0kiEGfZj3voGEetig15LIg7E74jdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUmQDHwH5iAJ0tMaYkZzvGE1e3s0AwHwYDVR0j
BBgwFoAU4q0DbzuKzlMeGglfrB4TsscyRDAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82QkVGQzM5MkYyMzgxRTc5N0REQTBDMDU4M0JDMzYxRTI5
Q0IxOEVDRUI3ODIyMUI2RTg4NzQ5RTJGMjA1QzNFLzAvRTJBRDAzNkYzQjhBQ0U1
MzFFMUEwOTVGQUMxRTEzQjJDNzMyNDQzMC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMkFEMDM2RjNCOEFDRTUzMUUx
QTA5NUZBQzFFMTNCMkM3MzI0NDMwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNkJFRkMzOTJGMjM4MUU3OTdEREEwQzA1ODNCQzM2MUUyOUNCMThFQ0VC
NzgyMjFCNkU4ODc0OUUyRjIwNUMzRS8wLzMxMzczMDJlMzIzMzMzMmUzMjMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzM0MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
6egwDQYJKoZIhvcNAQELBQADggEBAEvoB62YjAi48S8bEYaz7Ofe1KwVAVzeUk9K
R5YvYL8wYLq+eWcRJbKejIHq7Ex8+yYDwfzcnNpA9UloDLbhC9jSm9t8fCsaw5FU
5DRaoYo/41M6c5K1vAhipo/9YBWPx7dFbcMaPUz5ARyqPX5v0Ju0xbXEdfDmWzzs
gbzXgQivTArOfj40CjHIMbCGzYu7jZLeA9DnV61jrg8SKRtdZ3gwV60Z2uxCX3qd
Wd2D52xipycxyX1d4ZlCbq0ZcI0eAVXfmvN0YBpOT7ZfLSAbHmDzOCkbFYwbkF2Y
LBFu+LAhoZCpQ1m7kLGKcBSW5dBFRbdqZUYV9LUSGzbDC9xTyAc=
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:49:28 2025 by rpki-client