Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa
File:                     3137302e37382e3230302e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          uVENKIpXaebqLxeneE0K7QtMnUn6xshGZQ0U7EKVKwc=
Subject key identifier:   BC:1F:D0:17:7C:F2:FD:1B:83:13:58:89:4C:56:40:E6:B0:D4:6C:86
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       7AFB6AEC29CFF1B9E5697A76C3963BCFE9CB022E
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa
Signing time:             Tue 04 Feb 2025 18:29:38 +0000
ROA not before:           Tue 04 Feb 2025 18:24:38 +0000
ROA not after:            Tue 03 Feb 2026 18:29:38 +0000
asID:                     14232
IP address blocks:        170.78.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:fb:6a:ec:29:cf:f1:b9:e5:69:7a:76:c3:96:3b:cf:e9:cb:02:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Feb  4 18:24:38 2025 GMT
            Not After : Feb  3 18:29:38 2026 GMT
        Subject: CN=BC1FD0177CF2FD1B831358894C5640E6B0D46C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:7e:aa:6b:cc:5c:73:3a:d1:23:7c:bb:b2:
                    a4:f8:ef:0b:c6:56:5a:da:23:b3:f2:16:03:f9:73:
                    6b:49:64:42:17:c3:d5:8c:c4:ed:94:d4:f4:e1:95:
                    db:ad:dd:0b:ef:b0:74:97:b0:81:54:ab:ef:ad:d2:
                    0a:89:57:7a:6d:19:f6:60:60:c2:5a:a8:8c:d8:9f:
                    49:50:07:18:18:49:1b:f1:b1:80:96:d7:d6:18:4d:
                    22:52:c4:19:57:53:b8:8f:4a:25:45:7c:79:a4:2c:
                    cd:d6:16:c6:c0:5d:c7:fc:09:b9:ca:4c:8f:bc:7e:
                    9d:d1:0a:97:45:cc:b0:e6:c6:30:b1:06:22:03:40:
                    50:85:44:85:83:d9:2e:7d:19:d3:62:cd:c3:92:c3:
                    df:a1:ff:0e:9c:60:8d:0e:f2:32:76:3d:9e:ee:23:
                    2b:bd:79:c8:a6:11:8a:a7:e4:ba:5f:55:a8:08:d2:
                    6b:5e:67:c7:47:3e:c8:dd:fa:26:33:96:e3:2f:d2:
                    db:67:bf:27:37:e5:8f:11:ec:3d:2f:92:21:44:79:
                    ed:23:ce:2f:58:95:e2:14:26:4e:c2:66:36:1b:40:
                    4d:5c:9b:71:b2:df:1f:e8:e9:b2:ab:40:80:2b:8b:
                    da:24:2a:28:7d:a1:eb:da:df:f0:0c:2a:be:47:6f:
                    43:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1F:D0:17:7C:F2:FD:1B:83:13:58:89:4C:56:40:E6:B0:D4:6C:86
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         43:32:1b:48:73:28:8d:4e:f6:8d:e5:94:78:37:4d:99:ed:6c:
         37:8a:a9:52:c4:d4:1d:d9:64:43:2a:47:45:bb:bb:98:96:0b:
         6b:1c:d7:7d:c4:b6:0a:bc:1b:75:66:b0:90:51:b3:c7:bb:45:
         94:30:5f:95:e3:bc:f9:15:6d:f7:0e:7b:18:d7:9c:c4:1a:78:
         b0:c6:cd:b5:83:37:f5:5c:09:75:f5:f3:8c:a3:ee:f0:20:b1:
         7e:13:f1:d8:c6:ca:ab:a5:10:28:3f:45:84:3c:fc:1b:1e:22:
         d7:77:7d:71:22:db:7a:0f:94:5a:78:e6:ec:66:d6:59:78:88:
         1d:35:11:ab:16:96:1a:c3:13:e0:0c:02:6c:65:a5:42:dd:37:
         8b:44:96:0f:8f:4b:6c:68:95:4b:2f:d6:6e:60:0b:36:de:98:
         65:5b:9d:91:c2:28:1a:9c:e1:46:b9:b3:8e:4e:4e:fa:5d:36:
         eb:a5:b4:97:53:63:a0:e0:c6:66:25:74:25:c4:ac:7e:f8:5a:
         09:56:2c:e4:dd:67:cc:a5:1b:54:f6:e7:18:06:88:d7:ff:6d:
         54:e5:9b:85:37:83:e5:da:7c:d4:46:d4:93:35:ad:5f:b0:20:
         a6:55:ce:03:04:9a:9d:ab:89:75:c1:d7:72:a6:e4:68:7c:29:
         73:1c:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:33:35 2025 by rpki-client