Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa
File:                     3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa (raw, json)
Hash identifier:          WepuB10llqPbydAj8Y3lPxYnDaIItO4OVggReag71eU=
Subject key identifier:   27:71:FE:E3:92:88:2B:9F:5C:12:35:4A:FE:F6:EF:C8:BF:1A:FA:29
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       059DF1C15FD905464E10682325A03718357E9ADB
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa
Signing time:             Tue 04 Feb 2025 18:18:29 +0000
ROA not before:           Tue 04 Feb 2025 18:13:29 +0000
ROA not after:            Tue 03 Feb 2026 18:18:29 +0000
asID:                     264741
IP address blocks:        170.247.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:9d:f1:c1:5f:d9:05:46:4e:10:68:23:25:a0:37:18:35:7e:9a:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Feb  4 18:13:29 2025 GMT
            Not After : Feb  3 18:18:29 2026 GMT
        Subject: CN=2771FEE392882B9F5C12354AFEF6EFC8BF1AFA29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:ee:1b:d0:ab:bc:79:a6:c4:12:5a:ee:e3:
                    69:96:c3:ee:72:14:8d:04:94:ad:3e:95:13:25:1d:
                    76:1c:64:d4:e6:07:22:1c:1b:12:b8:ea:06:ec:c2:
                    1c:85:56:cf:de:ec:3f:de:5e:74:fb:8d:d4:21:ab:
                    ec:48:b0:e5:1f:95:b2:67:d7:f6:80:61:d1:2b:89:
                    4d:83:17:12:1b:0f:9d:e2:5a:33:0f:6f:64:cb:3e:
                    7e:5d:4d:0f:09:51:eb:57:6c:3b:e4:84:d0:bc:4e:
                    ef:f2:f8:78:3f:5c:fb:13:20:18:e1:e9:2e:ba:69:
                    cd:b7:f4:5d:78:e9:fe:fb:6c:5e:5e:16:71:1e:d8:
                    0a:1a:54:58:84:8b:41:09:21:5b:a7:5d:1b:b8:1e:
                    40:16:8e:56:ca:51:b7:10:81:c9:dd:b0:d2:ce:ad:
                    2b:4c:6e:0e:e7:96:f3:c3:6d:cc:a4:8b:af:eb:dd:
                    a3:3e:a2:7c:cc:7a:1f:78:c7:04:ca:8b:e4:72:d7:
                    08:89:68:a5:c7:dc:0f:31:d2:85:87:fa:9c:e9:ea:
                    02:d4:29:97:ff:84:86:69:a1:5d:28:27:55:50:47:
                    d6:3e:73:31:9d:f2:1b:2d:30:30:8c:68:fb:19:e8:
                    5e:c5:e4:3e:c0:03:75:52:8e:6c:de:93:e6:df:54:
                    21:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:71:FE:E3:92:88:2B:9F:5C:12:35:4A:FE:F6:EF:C8:BF:1A:FA:29
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3234372e38382e302f32322d3234203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:7a:6e:24:ea:fc:84:ae:8c:3b:ea:52:42:a6:a9:b1:82:
         d3:e5:5c:f3:fc:cc:4b:c2:67:80:8d:35:01:c9:c6:3c:1a:ba:
         f7:77:a2:50:32:19:c1:2a:d4:ad:d8:78:87:1d:3f:66:9b:71:
         16:be:0e:2a:20:95:3d:b7:4e:c0:ba:ce:44:3a:fc:cc:59:80:
         44:21:98:b2:09:9f:de:e5:cc:a5:f8:7e:38:e0:48:f8:23:32:
         84:e2:68:4f:7f:a9:8e:44:a8:4f:31:c3:19:34:e2:8e:83:8b:
         75:cc:25:f9:da:56:4b:e5:ed:72:97:cd:c4:8b:a6:f6:99:e2:
         c6:92:29:88:67:21:17:a4:70:b5:3b:f0:74:ee:a1:50:fc:51:
         bc:3f:2f:1c:a8:17:fc:62:b6:52:9f:51:81:89:8e:7d:dc:7e:
         4c:1a:69:81:a6:99:86:41:06:7f:54:4a:07:e2:63:d2:1f:9e:
         1e:fc:03:ac:95:0b:6d:80:88:fa:c5:5e:60:ec:51:16:5b:ea:
         45:ca:36:21:70:22:c5:37:e7:fb:d4:37:a5:dc:66:da:44:a9:
         05:2a:f1:3d:fa:2e:60:cd:27:52:d4:e7:9a:f7:7a:20:92:72:
         c7:83:6e:81:5e:92:6f:f9:d0:dd:0f:7f:ae:31:46:92:b1:b7:
         ef:c4:be:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:55:28 2025 by rpki-client