Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa
File:                     3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa (raw, json)
Hash identifier:          th2+jGFfb5c+WdONrNR7i10c0SduHcg545KxljUMaHM=
Subject key identifier:   76:42:B9:06:56:1A:30:39:55:3C:37:75:00:DB:8E:F2:7A:BC:3A:04
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       55509F432C15EC668FDE322A40374BFA66138A21
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa
Signing time:             Tue 04 Feb 2025 18:31:38 +0000
ROA not before:           Tue 04 Feb 2025 18:26:38 +0000
ROA not after:            Tue 03 Feb 2026 18:31:38 +0000
asID:                     264801
IP address blocks:        170.238.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:50:9f:43:2c:15:ec:66:8f:de:32:2a:40:37:4b:fa:66:13:8a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: Feb  4 18:26:38 2025 GMT
            Not After : Feb  3 18:31:38 2026 GMT
        Subject: CN=7642B906561A3039553C377500DB8EF27ABC3A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:fa:fe:13:db:99:b9:79:01:69:ee:55:18:3b:
                    a2:04:29:36:f0:c0:4e:11:a0:13:b2:6d:b4:94:03:
                    fd:ad:5a:a2:33:99:c7:12:84:be:91:46:c0:83:1c:
                    f9:5a:02:b4:3d:1e:be:fa:02:97:35:99:27:a9:27:
                    67:12:c1:b8:90:e2:06:bf:7a:23:04:c8:2e:27:98:
                    4a:f6:52:ee:cb:c5:9c:9b:db:6b:80:10:06:98:fe:
                    72:30:bd:dd:43:87:71:db:07:50:ea:26:c4:25:06:
                    77:03:1e:67:7d:0c:9a:50:17:ff:02:cd:3d:e4:3d:
                    6d:d5:e2:6b:70:15:28:0f:72:f0:83:a8:85:a5:87:
                    0a:d2:e2:62:2a:45:73:bd:74:27:27:bd:15:db:4c:
                    ad:d7:b5:41:33:2f:9b:96:aa:2f:73:88:1e:e0:08:
                    d8:c5:7f:ce:8c:fb:ac:7f:fb:c4:9c:d2:e3:97:6b:
                    77:5b:91:65:37:47:01:fe:d0:44:4d:4a:a9:64:2e:
                    30:3c:a5:2b:63:75:9d:4b:54:87:d3:be:f2:20:b8:
                    63:8e:cd:ee:42:49:fe:1e:73:b8:d6:03:87:77:84:
                    02:f0:bc:83:00:e8:9a:5e:85:70:0e:df:9d:71:ff:
                    27:5c:f8:2d:1b:e0:82:04:31:43:9d:f9:0a:ba:3a:
                    30:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:42:B9:06:56:1A:30:39:55:3C:37:75:00:DB:8E:F2:7A:BC:3A:04
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:4c:62:3c:50:d9:2e:92:bd:21:72:cc:95:69:6f:70:af:af:
         de:64:0c:8f:3d:94:7a:09:6e:71:e3:7d:b1:6b:e3:db:da:a7:
         31:40:c4:b8:3c:a7:e7:4d:a4:94:a9:80:9b:e2:ca:39:ec:27:
         a1:fd:27:53:02:21:a2:d0:14:bc:00:49:8d:9b:e0:80:85:e8:
         ab:77:4d:a2:7a:90:48:ba:c7:bd:62:60:3a:56:12:9e:02:ec:
         08:b3:31:e9:65:d6:1a:c8:85:c5:ba:ee:d4:05:a8:de:2e:97:
         12:6a:cf:ee:ae:df:e6:bd:a6:23:7a:26:6a:2b:4f:22:88:bb:
         a5:e1:20:6c:73:98:bc:43:bf:af:5e:77:80:98:d0:cf:84:f6:
         4e:84:ee:81:1f:35:16:81:61:5b:08:ff:42:a6:d0:ac:f8:4b:
         b8:ab:ea:55:07:40:a0:0f:5a:18:dd:b8:7b:86:6c:64:ff:36:
         68:c5:09:29:14:08:34:42:8a:e0:58:d7:b3:bc:17:2b:82:5a:
         15:75:b5:f0:30:36:06:19:da:42:66:b9:ed:02:fe:85:61:4f:
         cc:a9:17:83:ab:04:6b:b2:6a:0e:4b:b5:a6:3d:58:65:df:1c:
         31:18:78:4f:98:fb:0c:ee:c5:f9:99:00:e1:28:9b:46:51:23:
         0a:22:6d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:36:31 2025 by rpki-client