Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          12BSco61/uXxH6oShd9WqdxlEOkugvB1yYpUDCl9WlY=
Subject key identifier:   5A:8E:3A:3B:3D:73:6A:9F:2C:F7:C9:14:4E:F3:73:7F:E3:60:EA:91
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       08F2AE538E59C5B74A911377FEFFDA9888C2DADD
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 04 Feb 2025 18:01:20 +0000
ROA not before:           Tue 04 Feb 2025 17:56:20 +0000
ROA not after:            Tue 03 Feb 2026 18:01:20 +0000
asID:                     272981
IP address blocks:        170.247.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 02:03:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f2:ae:53:8e:59:c5:b7:4a:91:13:77:fe:ff:da:98:88:c2:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Feb  4 17:56:20 2025 GMT
            Not After : Feb  3 18:01:20 2026 GMT
        Subject: CN=5A8E3A3B3D736A9F2CF7C9144EF3737FE360EA91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ef:23:c5:3c:d4:ff:84:81:61:7d:6b:a4:3e:
                    fd:fd:eb:dc:db:e9:55:16:2e:ab:d1:f1:a0:9e:f1:
                    ad:ed:ef:9d:77:c6:0b:22:b8:c4:17:5e:ce:f6:40:
                    2a:89:76:b2:1c:98:70:3a:36:75:c6:8d:66:2b:b5:
                    28:32:80:d3:fd:60:f0:a7:09:f8:08:61:a6:62:5a:
                    06:78:c3:11:a9:9c:c8:bf:31:8d:32:67:a7:99:af:
                    59:43:45:21:86:18:65:a2:07:91:eb:8f:73:f4:dc:
                    25:4c:b6:32:59:e1:91:9a:44:ce:5f:f5:6c:83:1e:
                    c9:3e:f8:d1:3b:6e:0e:70:f6:22:3d:f6:01:cb:23:
                    69:35:f5:9e:30:e5:c3:89:18:79:ef:78:d3:25:cd:
                    e7:03:86:f5:30:24:59:5e:55:d7:32:32:cb:19:de:
                    98:10:8a:fe:da:85:61:10:88:c2:19:02:70:cb:c9:
                    de:88:f3:15:13:23:b4:8a:5a:29:54:e4:dc:28:dc:
                    3e:06:a8:65:cd:d1:2d:7a:ad:43:68:ef:40:a6:0d:
                    17:61:97:b3:91:01:34:96:eb:14:e8:74:0a:73:60:
                    33:27:98:9e:d5:ac:94:40:c9:b8:48:d0:06:af:d2:
                    d1:31:0a:a3:85:54:45:11:c2:1a:74:8f:7c:8b:db:
                    33:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8E:3A:3B:3D:73:6A:9F:2C:F7:C9:14:4E:F3:73:7F:E3:60:EA:91
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:0d:04:7d:ae:3d:45:e5:98:c2:f5:b6:ed:93:99:53:d6:
         d6:b2:e2:2a:d9:15:ae:d7:74:00:5d:aa:52:b1:bb:72:fe:b4:
         18:c3:fb:cf:4d:7e:01:1e:1a:f1:64:a7:43:6a:e8:44:37:26:
         9c:a2:65:67:11:ec:3e:7e:5e:60:36:13:bb:40:3f:b6:70:ac:
         6e:5c:03:ce:86:6f:8e:41:29:f6:e7:94:e0:48:30:64:13:42:
         94:9b:61:03:05:31:52:73:56:42:d8:77:c0:11:94:2a:08:32:
         66:d0:b7:f6:2f:26:f8:4d:b3:88:f8:2e:73:40:8f:0e:14:37:
         73:85:db:a3:51:34:64:20:bf:66:b2:55:78:21:a7:95:32:a7:
         f3:d3:12:1c:80:cb:f4:40:12:5d:c4:1b:8a:f8:57:5d:31:23:
         42:9d:60:97:db:af:ed:20:a0:13:53:52:40:d0:62:3f:fd:39:
         02:3c:11:17:42:53:c9:0a:d7:33:ab:2e:5c:4f:76:56:14:2e:
         9d:a8:11:6a:0e:fb:55:65:29:83:7f:72:63:c8:1d:a5:c5:0d:
         ff:6d:6b:cc:a1:0b:96:ef:cf:3c:26:c5:18:d4:c3:6e:6b:ab:
         c4:58:00:04:2f:f1:5b:c7:2b:46:bb:d0:e8:1d:39:f9:3a:53:
         05:53:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:41 2025 by rpki-client