Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa
File:                     3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa (raw, json)
Hash identifier:          YhXRw+Va5jTdZbO0NhF9w10p50z7YFqbLbnQTukxfiA=
Subject key identifier:   7A:74:49:64:43:B4:0B:DF:1F:8C:35:07:AB:C0:86:86:49:6D:EB:A8
Certificate issuer:       /CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
Certificate serial:       13A2BCA0B2CE3833AA517F3F276BA71866D6C707
Authority key identifier: 2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa
Signing time:             Tue 04 Feb 2025 18:33:36 +0000
ROA not before:           Tue 04 Feb 2025 18:28:36 +0000
ROA not after:            Tue 03 Feb 2026 18:33:36 +0000
asID:                     264723
IP address blocks:        170.231.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a2:bc:a0:b2:ce:38:33:aa:51:7f:3f:27:6b:a7:18:66:d6:c7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
        Validity
            Not Before: Feb  4 18:28:36 2025 GMT
            Not After : Feb  3 18:33:36 2026 GMT
        Subject: CN=7A74496443B40BDF1F8C3507ABC08686496DEBA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bd:af:19:fe:c8:5c:63:f4:bd:d0:41:19:61:
                    78:38:9d:c5:53:73:41:67:64:bd:f8:a5:58:52:6f:
                    d4:3c:e6:8a:83:84:80:b6:5f:a2:78:2b:e7:85:08:
                    b5:40:a4:89:92:66:4d:c8:43:f7:54:df:0e:24:ea:
                    74:f2:12:dd:e6:79:e9:de:b6:1a:14:c6:89:de:bb:
                    8d:7b:16:70:82:4f:18:2f:55:cc:41:f2:cd:6f:61:
                    1f:60:b5:d8:03:d3:02:bf:a3:f5:a9:89:60:c9:5d:
                    e8:fa:2e:b2:22:22:a9:ea:1d:c1:4a:fd:ca:c1:2c:
                    c8:29:6c:15:99:1b:6d:30:fc:1a:ec:4b:1c:eb:58:
                    db:ba:bc:7e:0a:e2:0a:08:42:7f:19:45:d7:f3:3d:
                    7c:ec:ed:f6:30:47:81:1f:dc:21:7d:b7:0c:e1:f1:
                    8e:e3:5b:5c:d9:b3:61:95:ce:1a:9b:b5:08:27:c1:
                    eb:14:96:51:49:d4:7a:be:e8:2d:d6:79:83:cf:4c:
                    77:31:ae:74:12:8b:31:9d:38:f1:20:44:b3:bd:61:
                    68:b6:55:04:df:90:1a:a9:c4:29:97:76:af:8f:36:
                    16:b4:e1:6f:ba:3b:f9:14:f5:8f:4f:f7:76:c2:e8:
                    ca:32:22:e2:2c:78:c0:12:d6:02:b4:0d:8a:fe:b8:
                    6f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:49:64:43:B4:0B:DF:1F:8C:35:07:AB:C0:86:86:49:6D:EB:A8
            X509v3 Authority Key Identifier:
                keyid:2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3233312e3132342e302f32322d3234203d3e20323634373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:f3:c5:65:bd:be:73:c8:df:10:cd:52:75:c4:8d:8d:3f:a6:
         be:20:9e:49:ac:f7:74:49:86:97:36:fe:13:07:fc:27:cb:1f:
         01:ad:b0:d5:de:61:3b:28:0a:de:96:37:b4:4b:1d:be:90:ad:
         c3:97:18:cf:da:02:7c:bf:81:20:06:8f:c1:fc:97:00:e6:3b:
         53:3c:29:53:3b:5a:ea:7b:00:81:2c:ba:a1:a0:c5:bd:b2:34:
         91:10:87:30:5e:1d:b3:f2:40:11:18:ac:e7:c3:4a:a5:ea:b3:
         dc:58:54:0b:1f:94:6d:e4:94:fa:2a:42:ce:e0:ae:fb:ea:e8:
         75:9c:ea:50:5c:9c:45:ed:8b:aa:0b:40:0d:b2:ba:6e:a9:38:
         bf:b8:06:12:8b:0d:02:ed:8f:8d:89:c1:33:ce:06:9c:3f:49:
         d1:e2:56:76:54:37:1b:9e:e4:2b:32:db:77:ed:f3:a6:70:7c:
         ea:d8:42:37:94:ea:70:c0:96:17:4a:2d:d2:a9:cc:98:b9:60:
         8f:54:61:69:ce:ef:45:fd:20:5f:e2:69:bd:57:3b:03:74:20:
         26:44:ae:ed:95:79:65:97:09:90:f7:df:4c:e8:a8:81:a7:c9:
         28:e0:65:3a:49:ec:c0:aa:41:b9:e2:f1:eb:31:50:ed:39:b3:
         c7:86:7a:54
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUE6K8oLLOODOqUX8/J2unGGbWxwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJDRUQyRjk1MUM5OEM4RDVGNkIyMTk4MUM2NDQ3NjZG
QUZGRDgwODAeFw0yNTAyMDQxODI4MzZaFw0yNjAyMDMxODMzMzZaMDMxMTAvBgNV
BAMTKDdBNzQ0OTY0NDNCNDBCREYxRjhDMzUwN0FCQzA4Njg2NDk2REVCQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGva8Z/shcY/S90EEZYXg4ncVT
c0FnZL34pVhSb9Q85oqDhIC2X6J4K+eFCLVApImSZk3IQ/dU3w4k6nTyEt3meene
thoUxoneu417FnCCTxgvVcxB8s1vYR9gtdgD0wK/o/WpiWDJXej6LrIiIqnqHcFK
/crBLMgpbBWZG20w/BrsSxzrWNu6vH4K4goIQn8ZRdfzPXzs7fYwR4Ef3CF9twzh
8Y7jW1zZs2GVzhqbtQgnwesUllFJ1Hq+6C3WeYPPTHcxrnQSizGdOPEgRLO9YWi2
VQTfkBqpxCmXdq+PNha04W+6O/kU9Y9P93bC6MoyIuIseMAS1gK0DYr+uG/BAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUenRJZEO0C98fjDUHq8CGhklt66gwHwYDVR0j
BBgwFoAUK87S+VHJjI1fayGYHGRHZvr/2AgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NTQ0RkVEQjgxNEUyRDJCMEVFRUYwRDNGQkNFQzA0MTE4
RDc3QzhCRkM1QTY2QUZBRTU3NkQwNTI2NjY4MzAxLzAvMkJDRUQyRjk1MUM5OEM4
RDVGNkIyMTk4MUM2NDQ3NjZGQUZGRDgwOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQkNFRDJGOTUxQzk4QzhENUY2
QjIxOTgxQzY0NDc2NkZBRkZEODA4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODU0NEZFREI4MTRFMkQyQjBFRUVGMEQzRkJDRUMwNDExOEQ3N0M4QkZD
NUE2NkFGQUU1NzZEMDUyNjY2ODMwMS8wLzMxMzczMDJlMzIzMzMxMmUzMTMyMzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMyMzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
53wwDQYJKoZIhvcNAQELBQADggEBADXzxWW9vnPI3xDNUnXEjY0/pr4gnkms93RJ
hpc2/hMH/CfLHwGtsNXeYTsoCt6WN7RLHb6QrcOXGM/aAny/gSAGj8H8lwDmO1M8
KVM7Wup7AIEsuqGgxb2yNJEQhzBeHbPyQBEYrOfDSqXqs9xYVAsflG3klPoqQs7g
rvvq6HWc6lBcnEXti6oLQA2yum6pOL+4BhKLDQLtj42JwTPOBpw/SdHiVnZUNxue
5Csy23ft86ZwfOrYQjeU6nDAlhdKLdKpzJi5YI9UYWnO70X9IF/iab1XOwN0ICZE
ru2VeWWXCZD330zoqIGnySjgZTpJ7MCqQbni8esxUO05s8eGelQ=
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:27 2025 by rpki-client