Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20313938393439.roa
File:                     3137302e3233382e3137302e302f32332d3233203d3e20313938393439.roa (raw, json)
Hash identifier:          Q1I4oBkLOZLfxg/aVf3PuOxbnIlcLkj9Rtkx64x05us=
Subject key identifier:   DF:6A:17:DA:FA:22:24:7B:CC:03:9A:1F:92:4F:B1:3C:E8:41:FE:A8
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       4EA4401AFDDA8D44173D84F50E9B4ECA2EE6C8D3
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20313938393439.roa
Signing time:             Tue 04 Feb 2025 18:31:37 +0000
ROA not before:           Tue 04 Feb 2025 18:26:37 +0000
ROA not after:            Tue 03 Feb 2026 18:31:37 +0000
asID:                     198949
IP address blocks:        170.238.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 14:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a4:40:1a:fd:da:8d:44:17:3d:84:f5:0e:9b:4e:ca:2e:e6:c8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: Feb  4 18:26:37 2025 GMT
            Not After : Feb  3 18:31:37 2026 GMT
        Subject: CN=DF6A17DAFA22247BCC039A1F924FB13CE841FEA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f6:70:47:d3:2a:39:bd:9c:ff:aa:cd:d9:fe:
                    12:ea:cf:5b:2d:00:8e:73:94:54:8d:ce:b3:23:11:
                    bf:ff:7d:8b:c4:41:0a:a4:d0:40:88:70:3c:03:65:
                    94:1f:b9:44:3d:3e:c1:a0:3d:21:5a:4b:36:7a:6c:
                    93:f4:0c:5c:3c:b9:64:e0:d6:79:62:c8:7f:58:6c:
                    52:91:03:bd:0c:3b:3e:ba:2e:43:25:90:80:c0:f4:
                    4e:16:bd:2d:de:85:97:50:c1:4a:12:a8:b7:fd:5c:
                    67:e3:6d:45:c6:dd:f7:54:d9:42:32:9a:d1:b2:ee:
                    5f:91:8b:82:53:fc:b9:c3:d3:f2:87:28:68:c9:ac:
                    8e:0d:fb:15:5c:c9:bd:48:d2:2c:1f:57:5e:54:c3:
                    85:89:66:82:9f:35:6f:dc:f2:80:1a:f1:95:4e:f8:
                    a4:42:c9:93:56:33:e2:43:a9:ba:c5:7f:dd:54:0d:
                    cd:b9:b2:d5:df:20:5a:40:7c:54:c5:0d:e3:3d:1e:
                    d1:22:c5:5d:cf:ed:43:47:50:4b:f4:6a:32:ac:fb:
                    80:f9:9c:13:bd:65:e7:6e:66:b5:b1:43:d5:47:af:
                    f3:89:a0:2f:7f:23:5a:7e:cb:3f:c6:c6:23:d9:65:
                    f1:d7:6c:d0:97:26:9f:76:b0:3d:94:82:38:6d:b0:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6A:17:DA:FA:22:24:7B:CC:03:9A:1F:92:4F:B1:3C:E8:41:FE:A8
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:44:41:30:34:bf:80:1d:be:70:d9:a4:5e:05:62:81:2d:92:
         f8:db:2b:8d:bf:39:2d:73:aa:bd:b1:d7:23:7c:11:e5:c6:cc:
         f2:74:7b:75:9c:80:31:88:5e:83:49:9b:a2:b6:3e:c2:ca:19:
         ec:a1:ce:16:cc:10:36:9a:6d:78:a3:78:c6:f5:92:93:b2:61:
         d6:87:5d:fe:e5:1f:aa:77:8a:58:57:86:2b:99:73:6c:bb:92:
         c0:53:16:5e:5f:11:04:b0:1d:70:5d:82:32:28:15:b1:b7:2e:
         1a:d9:bf:13:c8:a0:85:47:a7:50:0b:c3:a4:81:80:0e:c9:83:
         07:ec:c4:8b:81:15:30:af:ec:fb:e0:93:dc:97:67:3e:0e:69:
         63:8f:96:c8:5e:b2:e0:e8:bc:6e:45:01:f5:d1:de:16:9e:84:
         4f:3a:69:2b:1e:5b:06:45:7f:66:66:85:5b:ce:a5:58:b7:3a:
         af:78:3a:fd:c0:ea:c3:24:40:cd:30:f3:ad:6a:af:f8:0a:30:
         9f:94:37:8f:61:ab:07:b7:ee:bf:d0:99:8f:7c:d0:77:e0:53:
         cf:b2:7f:22:a5:f8:86:1b:7d:a3:e9:cd:c5:ee:4d:b1:6e:26:
         a7:eb:17:5e:97:9a:8d:30:64:0c:04:e2:ef:09:64:dc:22:1c:
         fb:5e:c5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:39:43 2025 by rpki-client