Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3234342e3138342e302f32322d3234203d3e20323634373233.roa
File:                     3137302e3234342e3138342e302f32322d3234203d3e20323634373233.roa (raw, json)
Hash identifier:          ZqCVkmq64giQx8njntOQWnEf90WHGkzqg+IMcL+74ao=
Subject key identifier:   1D:66:BD:8E:E1:6A:C5:68:9B:47:E4:A5:0D:84:3C:0A:5A:2A:9F:A5
Certificate issuer:       /CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
Certificate serial:       6AF8EB656BA6DBF63D9B7CE716F2AA49C43FF191
Authority key identifier: 2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3234342e3138342e302f32322d3234203d3e20323634373233.roa
Signing time:             Tue 04 Feb 2025 18:33:36 +0000
ROA not before:           Tue 04 Feb 2025 18:28:36 +0000
ROA not after:            Tue 03 Feb 2026 18:33:36 +0000
asID:                     264723
IP address blocks:        170.244.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:f8:eb:65:6b:a6:db:f6:3d:9b:7c:e7:16:f2:aa:49:c4:3f:f1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BCED2F951C98C8D5F6B21981C644766FAFFD808
        Validity
            Not Before: Feb  4 18:28:36 2025 GMT
            Not After : Feb  3 18:33:36 2026 GMT
        Subject: CN=1D66BD8EE16AC5689B47E4A50D843C0A5A2A9FA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c3:b9:0d:69:03:6a:c6:ea:af:67:17:a3:09:
                    3a:72:36:62:47:c7:2a:a7:3a:20:bb:fb:5e:13:5e:
                    a9:f7:c8:1c:67:26:31:f0:9e:d2:89:f2:f4:cf:9f:
                    61:49:cd:c2:6d:cf:41:8a:db:48:ed:93:d1:70:12:
                    7c:aa:52:33:cd:d1:86:ca:e0:19:25:61:bc:9e:91:
                    26:b7:20:ad:bd:67:90:6b:e1:82:fe:5d:c6:6c:97:
                    9e:22:fe:33:31:04:82:e1:3e:a0:08:ad:7c:a9:12:
                    6d:62:72:ac:75:6b:bb:0c:0d:c5:c7:a2:b2:84:db:
                    fc:1b:44:f1:05:f5:86:1b:6f:54:fd:f6:c4:62:13:
                    24:78:e8:86:f5:86:0f:9d:bb:79:df:cb:39:1f:ad:
                    33:1c:33:76:f7:88:6b:b1:b6:8f:4d:18:79:8f:5f:
                    af:07:a5:8f:16:df:04:78:aa:9a:42:76:2a:20:88:
                    a7:51:99:c7:76:74:f2:a1:fa:aa:61:c3:94:d2:77:
                    d9:d3:71:94:d5:13:c2:74:0c:f8:41:4f:8c:32:e0:
                    7a:7b:6b:2c:90:10:b3:6b:a0:38:59:e7:97:6a:16:
                    22:8d:c7:53:1a:bb:0f:54:c9:99:c2:5a:0f:72:1e:
                    bf:08:02:15:61:40:87:29:b8:69:3c:95:ef:37:70:
                    74:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:66:BD:8E:E1:6A:C5:68:9B:47:E4:A5:0D:84:3C:0A:5A:2A:9F:A5
            X509v3 Authority Key Identifier:
                keyid:2B:CE:D2:F9:51:C9:8C:8D:5F:6B:21:98:1C:64:47:66:FA:FF:D8:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BCED2F951C98C8D5F6B21981C644766FAFFD808.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8544FEDB814E2D2B0EEEF0D3FBCEC04118D77C8BFC5A66AFAE576D0526668301/0/3137302e3234342e3138342e302f32322d3234203d3e20323634373233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:19:64:a0:31:75:a9:09:b6:d7:26:7a:73:77:8c:cb:3f:c3:
         1d:3e:d5:cf:f2:64:17:25:bf:81:b1:2e:11:af:d5:e2:6f:3c:
         a5:b6:b0:ee:80:eb:12:60:f7:0a:d4:4b:e2:85:33:b3:1f:64:
         92:d8:f8:ba:7e:94:29:2e:ea:68:71:49:cb:5d:b4:09:66:44:
         29:3d:43:d2:71:a5:08:34:9d:c7:de:ff:4c:cb:c6:1c:df:69:
         ed:b3:62:cf:a0:b7:b7:40:60:68:93:ed:ad:af:70:7c:87:23:
         e9:dd:c1:65:20:6c:41:5e:9d:81:d6:36:7d:dd:82:cb:47:cd:
         c0:29:59:05:1a:ac:c0:72:95:67:fb:69:7f:72:e7:01:3d:59:
         29:30:d9:ae:9c:84:82:2b:39:bb:15:20:84:27:a3:24:f5:9c:
         23:ca:9c:26:7c:63:fc:22:9b:b3:bc:c4:5a:f9:fb:fb:cb:a9:
         7a:14:43:87:58:d7:11:18:9d:82:5c:45:74:4c:d6:b9:04:d8:
         7c:d8:98:8c:bc:f7:8a:14:7a:54:88:d0:86:e0:04:ea:ae:ad:
         42:b3:77:15:d0:33:6c:c0:a3:24:b8:51:85:27:9c:a9:7b:f1:
         0e:55:7a:61:38:9a:2f:0c:38:65:fc:53:61:9c:42:77:6a:fe:
         cd:70:76:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 22:31:28 2025 by rpki-client