Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa
File:                     3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa (raw, json)
Hash identifier:          w24R0XJx1NpaIrela5qDbpsqayILgUFQZDJ278ezpWI=
Subject key identifier:   7E:53:72:B7:DB:A9:FA:69:B5:02:1C:5C:8B:2E:6E:71:D8:44:49:E7
Certificate issuer:       /CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
Certificate serial:       1FBDD8D3ADDCE3038A14B4800500D50E325F34F6
Authority key identifier: EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa
Signing time:             Tue 04 Feb 2025 18:16:37 +0000
ROA not before:           Tue 04 Feb 2025 18:11:37 +0000
ROA not after:            Tue 03 Feb 2026 18:16:37 +0000
asID:                     264834
IP address blocks:        170.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 17:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bd:d8:d3:ad:dc:e3:03:8a:14:b4:80:05:00:d5:0e:32:5f:34:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
        Validity
            Not Before: Feb  4 18:11:37 2025 GMT
            Not After : Feb  3 18:16:37 2026 GMT
        Subject: CN=7E5372B7DBA9FA69B5021C5C8B2E6E71D84449E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:d3:25:da:cb:d9:9f:56:c6:15:09:42:dc:
                    5a:80:20:41:a4:77:cc:34:a6:81:09:e0:07:24:02:
                    a3:32:01:05:f6:8e:95:90:fb:8e:d0:41:5d:ed:07:
                    23:52:90:90:ce:ac:b2:d1:13:54:19:41:64:ed:ca:
                    09:dd:27:54:66:aa:b8:8a:b7:bd:ea:8c:22:17:b6:
                    7e:bb:48:76:6e:4e:1f:b7:90:aa:70:b9:8a:7d:2d:
                    7d:be:26:63:72:a9:ed:55:bc:6b:16:57:ad:c3:0d:
                    be:70:ca:2f:6f:f3:20:ae:46:e3:c3:cb:be:03:fb:
                    9c:24:0a:d3:ce:00:86:79:e4:1e:16:fb:28:43:4f:
                    eb:01:00:e7:48:22:a5:bd:17:76:f6:1c:ac:f0:9f:
                    5f:b1:3e:61:86:27:22:2f:be:72:31:48:40:1b:4e:
                    4d:e8:3e:86:95:8f:2f:56:b8:db:c4:79:13:26:59:
                    73:ea:a5:14:32:19:03:8e:c5:a6:3b:55:98:ba:b8:
                    b9:ce:ec:81:c9:8a:e1:7d:e7:2e:d2:19:9e:14:35:
                    d4:5c:30:52:19:dc:b2:60:96:d5:82:9c:bb:2a:c3:
                    53:9d:b3:6c:b4:e7:96:71:16:cb:4c:72:9a:c3:60:
                    c6:0f:65:1a:a7:b2:27:38:f1:98:c7:56:32:51:ea:
                    f0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:53:72:B7:DB:A9:FA:69:B5:02:1C:5C:8B:2E:6E:71:D8:44:49:E7
            X509v3 Authority Key Identifier:
                keyid:EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:fc:7c:df:dc:a7:28:a0:65:13:0a:f3:c7:a4:f2:c4:76:
         7b:51:15:b3:46:02:44:c1:3b:af:19:e0:ed:6d:b9:81:56:f4:
         b8:80:d8:62:1a:81:cb:0c:c2:b1:a5:eb:5b:36:85:53:dd:d3:
         e4:25:52:21:f3:69:00:7b:3c:bf:f5:62:e0:0e:45:3f:7a:ba:
         4b:b9:35:70:4c:61:95:9a:5f:04:cf:a4:13:84:87:23:da:aa:
         b1:e5:dd:6d:72:69:b5:5d:ea:38:fa:4f:94:f5:49:13:6e:74:
         bf:f0:33:46:81:9a:f6:8a:c1:36:a1:ea:19:3c:6e:22:c1:d4:
         ca:58:bb:d2:f6:eb:d4:18:2c:2a:8c:b9:44:a8:26:78:95:ae:
         dc:e1:ef:a1:ab:50:0e:39:59:55:ca:8b:29:b2:26:7d:c4:20:
         02:02:95:b0:a8:0c:0c:be:58:6e:26:84:4a:ab:41:39:57:7b:
         4c:27:5f:cf:e2:76:e1:5d:a7:57:92:95:91:e8:d9:b2:cf:e3:
         43:f7:5f:0a:f2:55:c2:d2:67:6a:b3:1d:5c:c9:ef:cd:0c:bd:
         93:ef:e9:53:71:c7:78:0b:15:d5:28:61:10:2d:e8:e7:7b:3b:
         58:1b:61:1f:2f:29:ca:eb:f1:be:b1:48:3c:ab:e4:fd:7b:e3:
         5f:53:e1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:34 2025 by rpki-client