Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa
File:                     3137302e38312e33322e302f32322d3234203d3e203238313130.roa (raw, json)
Hash identifier:          JNdF7evGlp0E2yqjHrhVxtaehlFhSFJmvzXUTF9YzJc=
Subject key identifier:   AD:F7:07:EE:A7:9D:59:ED:D8:B8:44:21:07:93:89:69:58:D0:4F:29
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       27ADCFEB05020B65E182173D08140F7275EFFCCD
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa
Signing time:             Wed 18 Dec 2024 17:35:00 +0000
ROA not before:           Wed 18 Dec 2024 17:30:00 +0000
ROA not after:            Wed 17 Dec 2025 17:35:00 +0000
asID:                     28110
IP address blocks:        170.81.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 01:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ad:cf:eb:05:02:0b:65:e1:82:17:3d:08:14:0f:72:75:ef:fc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Dec 18 17:30:00 2024 GMT
            Not After : Dec 17 17:35:00 2025 GMT
        Subject: CN=ADF707EEA79D59EDD8B844210793896958D04F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:65:54:c2:2b:ec:d3:66:73:f3:9f:1e:c1:ba:
                    22:44:48:53:30:9a:0f:8c:9a:71:25:bf:53:a8:ca:
                    de:13:13:2f:b0:6b:94:43:c6:7c:81:0f:70:2a:0e:
                    7c:88:4e:1d:1d:24:d3:ba:68:49:83:65:98:12:6a:
                    aa:23:9a:ec:4a:5e:8a:09:06:83:21:17:51:35:d5:
                    1b:e5:60:97:ec:34:78:7c:1c:64:b9:7d:d5:bb:63:
                    93:4b:17:f4:d9:8e:19:15:29:3b:0a:ab:15:6d:3b:
                    d8:21:b9:9e:13:e6:52:d2:2d:ee:23:f5:83:f0:53:
                    18:5e:bd:ed:bc:b9:e3:f0:f1:d4:93:4b:d2:75:79:
                    79:ef:c6:6b:d9:ce:ea:68:cc:8e:e8:c5:d1:49:e5:
                    7f:fe:f7:fc:16:8b:8e:b0:02:4f:8a:50:f7:f7:ff:
                    89:05:4c:8c:19:f6:06:b1:81:86:07:ee:72:83:7a:
                    30:ec:5c:29:2e:02:49:f6:ac:d8:99:27:ec:7e:9d:
                    e9:6d:6c:b3:ab:fb:6b:b1:a9:cb:7c:ef:64:af:8a:
                    9e:5d:b4:25:52:c9:f3:89:b1:4f:81:d5:44:b0:10:
                    98:39:8c:71:00:26:86:b9:e3:cc:15:45:5b:ae:38:
                    ac:2f:3a:00:5d:23:62:2a:34:f2:63:59:cd:f1:81:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F7:07:EE:A7:9D:59:ED:D8:B8:44:21:07:93:89:69:58:D0:4F:29
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a5:58:58:0f:f0:f6:50:83:86:ec:1b:27:2e:f7:66:30:2b:0f:
         1c:52:d7:b6:37:7c:b5:ac:74:16:91:3c:42:d5:34:68:c0:9d:
         83:9a:42:c0:10:b4:2e:0e:d3:1c:17:04:89:8f:d4:1f:6e:2b:
         c7:20:5e:23:d8:91:b8:00:5b:ba:65:a6:89:98:88:e0:b2:c4:
         5a:f2:5d:31:be:04:32:ed:85:74:cb:12:fd:c2:c2:59:d1:8b:
         b6:ad:54:7d:9f:ba:18:be:be:0d:5d:d9:c4:58:29:b1:24:44:
         c2:f4:88:b6:96:d2:8b:21:e7:3d:51:a3:cd:d6:cc:06:9d:7d:
         2e:63:3f:ca:55:d5:24:de:6a:2b:0a:e8:d9:d0:22:83:c5:45:
         9c:2d:bb:db:74:59:0c:4e:d9:cb:f5:7c:db:6f:d1:2c:8c:2a:
         2c:69:64:b9:b8:90:11:5b:03:5d:d7:45:11:b1:d3:b0:15:8b:
         ae:61:b1:47:da:68:23:8c:a1:df:88:88:d3:3b:cf:94:3d:ad:
         b5:5b:8d:4c:48:c1:75:3f:c5:16:16:b8:96:a1:30:d3:7b:5a:
         c5:1f:16:02:85:e6:29:a6:18:00:3b:01:a1:ea:82:77:8e:0a:
         d8:45:d7:2b:6a:e3:56:db:e8:3c:38:9f:20:d6:8c:cf:e9:f0:
         a8:d0:4c:d8
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUJ63P6wUCC2Xhghc9CBQPcnXv/M0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU4ODg5MzcyNDQ2RUY2NzhFMzVFOUQzNDlDMDc4NUE4
MUI4RkJCNzAeFw0yNDEyMTgxNzMwMDBaFw0yNTEyMTcxNzM1MDBaMDMxMTAvBgNV
BAMTKEFERjcwN0VFQTc5RDU5RUREOEI4NDQyMTA3OTM4OTY5NThEMDRGMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWZVTCK+zTZnPznx7BuiJESFMw
mg+MmnElv1Ooyt4TEy+wa5RDxnyBD3AqDnyITh0dJNO6aEmDZZgSaqojmuxKXooJ
BoMhF1E11RvlYJfsNHh8HGS5fdW7Y5NLF/TZjhkVKTsKqxVtO9ghuZ4T5lLSLe4j
9YPwUxheve28uePw8dSTS9J1eXnvxmvZzupozI7oxdFJ5X/+9/wWi46wAk+KUPf3
/4kFTIwZ9gaxgYYH7nKDejDsXCkuAkn2rNiZJ+x+neltbLOr+2uxqct872Svip5d
tCVSyfOJsU+B1USwEJg5jHEAJoa548wVRVuuOKwvOgBdI2IqNPJjWc3xgZJPAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUrfcH7qedWe3YuEQhB5OJaVjQTykwHwYDVR0j
BBgwFoAUhYiJNyRG72eONenTScB4WoG4+7cwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RTgzNUM1ODE4MEIyNDQ4MkI0OEVDMkM3OTY3NTQ2MDBD
RUU2RjNCMThCNjlCQzRCQkRGRkRDMjI4NUVDNDhBLzAvODU4ODg5MzcyNDQ2RUY2
NzhFMzVFOUQzNDlDMDc4NUE4MUI4RkJCNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NTg4ODkzNzI0NDZFRjY3OEUz
NUU5RDM0OUMwNzg1QTgxQjhGQkI3LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4MzVDNTgxODBCMjQ0ODJCNDhFQzJDNzk2NzU0NjAwQ0VFNkYzQjE4
QjY5QkM0QkJERkZEQzIyODVFQzQ4QS8wLzMxMzczMDJlMzgzMTJlMzMzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzgzMTMxMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqUSAwDQYJ
KoZIhvcNAQELBQADggEBAKVYWA/w9lCDhuwbJy73ZjArDxxS17Y3fLWsdBaRPELV
NGjAnYOaQsAQtC4O0xwXBImP1B9uK8cgXiPYkbgAW7plpomYiOCyxFryXTG+BDLt
hXTLEv3CwlnRi7atVH2fuhi+vg1d2cRYKbEkRML0iLaW0osh5z1Ro83WzAadfS5j
P8pV1STeaisK6NnQIoPFRZwtu9t0WQxO2cv1fNtv0SyMKixpZLm4kBFbA13XRRGx
07AVi65hsUfaaCOMod+IiNM7z5Q9rbVbjUxIwXU/xRYWuJahMNN7WsUfFgKF5imm
GAA7AaHqgneOCthF1ytq41bb6Dw4nyDWjM/p8KjQTNg=
-----END CERTIFICATE-----
Generated at Mon Apr 14 18:55:36 2025 by rpki-client