Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa
File:                     3137302e38312e33322e302f32322d3234203d3e203238333137.roa (raw, json)
Hash identifier:          KN8OsBlSiFTneBbcquYSXTLSxKAeHNN8GZqrX4puuV4=
Subject key identifier:   6B:FE:F0:1D:1D:40:ED:EF:80:47:1A:DF:8D:CA:38:2B:2B:DA:3B:97
Certificate issuer:       /CN=858889372446EF678E35E9D349C0785A81B8FBB7
Certificate serial:       2F6758FE539F8124FF1A3A8E7CC2529DA3788B25
Authority key identifier: 85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa
Signing time:             Tue 04 Feb 2025 18:41:14 +0000
ROA not before:           Tue 04 Feb 2025 18:36:14 +0000
ROA not after:            Tue 03 Feb 2026 18:41:14 +0000
asID:                     28317
IP address blocks:        170.81.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:67:58:fe:53:9f:81:24:ff:1a:3a:8e:7c:c2:52:9d:a3:78:8b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=858889372446EF678E35E9D349C0785A81B8FBB7
        Validity
            Not Before: Feb  4 18:36:14 2025 GMT
            Not After : Feb  3 18:41:14 2026 GMT
        Subject: CN=6BFEF01D1D40EDEF80471ADF8DCA382B2BDA3B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:0f:6c:d0:9f:da:d2:42:ee:35:c0:94:15:
                    63:6d:46:aa:1a:c4:32:5d:51:0a:33:ec:48:94:3b:
                    4c:0f:55:90:b0:43:aa:c2:34:1b:5d:b9:26:bb:65:
                    8d:55:9c:60:c0:26:33:7a:d4:55:54:65:9c:1f:07:
                    70:c0:37:9d:d2:79:f5:e2:1a:90:18:83:22:42:77:
                    7d:16:57:01:53:82:42:98:5f:66:a1:bc:79:86:c6:
                    5f:0c:d2:70:20:d9:48:3e:ce:38:bf:3c:6a:53:2c:
                    69:52:0a:4d:68:8a:31:af:b5:88:85:ca:ed:f8:fb:
                    cc:eb:00:2c:bb:e3:98:19:de:ef:64:86:93:83:45:
                    20:c9:ac:13:34:b6:d2:1d:a7:56:06:01:ef:c8:0b:
                    09:8d:e9:4b:e6:c3:92:e3:00:47:60:b2:ba:41:9c:
                    e0:86:82:e2:fc:68:e9:b2:28:18:fa:f0:24:5f:84:
                    40:33:13:5d:d5:6e:cb:b9:30:33:2d:f8:ee:90:f8:
                    b8:37:79:d0:bd:5d:61:bf:02:fe:16:9d:00:0c:c6:
                    93:47:74:77:36:7a:cf:13:60:2b:43:b6:f5:82:72:
                    64:f7:c2:42:22:6a:a6:0f:d4:bc:48:be:fc:5c:5e:
                    14:af:41:a3:ae:15:85:81:fa:e6:8d:3f:43:73:06:
                    d2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:F0:1D:1D:40:ED:EF:80:47:1A:DF:8D:CA:38:2B:2B:DA:3B:97
            X509v3 Authority Key Identifier:
                keyid:85:88:89:37:24:46:EF:67:8E:35:E9:D3:49:C0:78:5A:81:B8:FB:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/858889372446EF678E35E9D349C0785A81B8FBB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/858889372446EF678E35E9D349C0785A81B8FBB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E835C58180B24482B48EC2C796754600CEE6F3B18B69BC4BBDFFDC2285EC48A/0/3137302e38312e33322e302f32322d3234203d3e203238333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         40:57:23:cf:9a:bc:83:da:17:33:cd:5c:36:53:bb:bd:a3:a7:
         87:9a:2e:36:be:5e:d1:20:2d:62:7e:74:b4:6c:c1:51:ee:66:
         46:8a:4d:be:e5:c2:e6:f5:3b:a7:0a:4a:05:13:9d:ee:9a:53:
         82:96:86:71:7b:bf:63:d1:f4:39:13:2d:06:9b:e5:f1:78:72:
         57:46:a6:c0:3a:d7:dd:05:56:60:1d:6a:36:0e:95:b1:fc:6d:
         89:8a:10:e7:04:af:33:2c:b2:8e:94:db:0b:b7:50:30:74:21:
         39:0a:6e:cb:69:93:96:96:da:f2:b7:98:76:c6:b9:04:bc:04:
         35:8a:79:7d:11:e2:90:cf:2d:52:de:96:c9:71:f5:07:ab:b0:
         3a:6d:44:41:f1:99:b8:51:b0:45:aa:37:95:10:93:3c:3d:75:
         2e:9e:44:8c:22:e0:c7:62:1f:a4:97:d4:06:62:5e:24:e9:6f:
         4a:0e:17:5f:46:9a:98:31:8c:3f:b6:fc:2d:c7:03:cd:bd:f3:
         6d:a1:8c:90:ec:45:2d:86:03:68:32:73:6e:44:9d:72:f8:6c:
         df:b9:c7:05:60:57:1f:49:d7:f8:9b:f9:00:47:96:c6:eb:a5:
         83:ce:21:4b:99:ef:4c:2d:e2:99:54:23:2b:ec:b4:34:1f:07:
         1a:fb:5f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:08:08 2025 by rpki-client