Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32342d3234203d3e20323639393630.roa
File:                     3137302e38322e33362e302f32342d3234203d3e20323639393630.roa (raw, json)
Hash identifier:          v0tueqFtAN4sOnemPiu0w+cgXakL0WoPGA3mzbjSWHU=
Subject key identifier:   67:87:21:17:83:94:17:4A:94:87:7C:37:12:44:0D:49:87:44:63:16
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       5155D9EB5F6960079B4E6B5145DB4F598D54A8FB
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32342d3234203d3e20323639393630.roa
Signing time:             Tue 04 Feb 2025 18:16:05 +0000
ROA not before:           Tue 04 Feb 2025 18:11:05 +0000
ROA not after:            Tue 03 Feb 2026 18:16:05 +0000
asID:                     269960
IP address blocks:        170.82.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 03:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:55:d9:eb:5f:69:60:07:9b:4e:6b:51:45:db:4f:59:8d:54:a8:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Feb  4 18:11:05 2025 GMT
            Not After : Feb  3 18:16:05 2026 GMT
        Subject: CN=678721178394174A94877C3712440D4987446316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:83:8d:c8:71:1e:e2:d0:44:b5:d4:f3:ab:73:
                    04:a2:f1:60:78:b0:4d:1c:38:1f:d7:08:a8:e2:14:
                    8d:26:d0:aa:c0:f0:c9:43:cc:e9:c5:dd:b6:4d:68:
                    7a:92:eb:42:67:74:22:bc:76:f3:fb:16:d0:8a:22:
                    a6:b3:0c:bb:db:03:f0:53:df:4c:c3:95:da:93:f6:
                    4b:09:f6:7f:df:cd:f4:97:44:b5:04:4c:26:ca:bc:
                    5f:8e:89:77:a5:c2:56:12:b6:d7:94:23:4d:e0:8e:
                    75:5d:30:4a:bd:26:b9:b4:22:a7:c9:22:2c:ec:45:
                    bc:ae:7e:6e:bc:85:8c:fd:ca:d8:8a:29:f6:ce:24:
                    95:40:e2:13:91:34:1b:5b:2f:78:b0:ee:5f:52:95:
                    90:5e:eb:bd:c9:6e:c1:fd:74:0f:c1:6f:b3:c2:cf:
                    18:5d:ae:dd:42:16:08:d0:87:c4:f0:00:03:c8:8a:
                    43:cc:ee:6a:84:d0:45:75:30:7a:30:4f:88:e1:a3:
                    f8:13:90:a7:30:1f:fb:5c:6b:fd:7e:34:8f:a9:e2:
                    07:c0:b0:bb:00:90:6e:51:f7:10:4f:90:7c:29:20:
                    f3:0f:0a:97:75:3d:02:19:d8:a1:e3:07:ef:6f:2d:
                    68:a0:03:64:58:0b:50:6e:3b:4d:26:e7:bc:cf:8a:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:21:17:83:94:17:4A:94:87:7C:37:12:44:0D:49:87:44:63:16
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32342d3234203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:88:10:c6:fe:4c:eb:b7:69:91:d8:ef:06:4d:a7:cf:e8:76:
         7a:05:1d:1e:9d:ac:6d:47:56:67:0b:aa:97:8e:9a:e5:ae:7e:
         3a:1f:ff:bf:05:f5:62:19:86:6a:71:78:7a:07:aa:ec:f5:dc:
         b7:e4:98:15:21:3a:2e:ca:ee:b6:21:af:2b:f1:b9:ac:81:a4:
         4b:4d:76:85:77:82:7c:35:4f:3b:47:91:e5:85:63:c7:2d:e7:
         79:75:92:62:79:a8:5d:62:2b:36:e7:dc:05:6f:07:af:a3:68:
         95:0f:c0:37:a1:0d:3e:14:6f:93:25:36:7a:60:0d:bd:0d:df:
         0d:1a:52:43:c1:aa:2d:85:39:85:25:9e:b0:19:eb:1f:99:73:
         49:65:ab:92:ab:5a:c0:be:bd:f0:64:b4:b5:0e:49:d3:5b:a0:
         72:0b:0b:34:05:1b:65:a6:60:e6:7c:28:93:78:26:7f:3e:57:
         50:61:ca:7f:fe:44:30:d0:2d:4a:bf:06:c5:ca:7c:f8:68:7c:
         ba:62:cf:57:b4:1d:7c:a6:b0:08:ce:c2:42:99:fa:a7:83:c4:
         db:31:c7:de:6f:e0:71:83:83:dc:48:e8:fa:89:40:3b:3d:54:
         75:1b:6e:5c:35:7d:70:43:5a:fc:80:a8:6d:58:82:af:cd:fd:
         f7:6b:de:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:57:52 2025 by rpki-client