Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa
File:                     3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa (raw, json)
Hash identifier:          wOGVkXRU03xfKVfDrCwmRVxDLlgVMZA4aclMfWAftr8=
Subject key identifier:   61:7D:66:4E:A0:EF:08:A4:24:B1:8A:A2:7A:05:1A:79:9C:62:F5:36
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       10FA8FD554BECE16B0EB85997D014D42C8D60E80
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa
Signing time:             Tue 04 Feb 2025 18:08:49 +0000
ROA not before:           Tue 04 Feb 2025 18:03:49 +0000
ROA not after:            Tue 03 Feb 2026 18:08:49 +0000
asID:                     264729
IP address blocks:        170.233.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 20 Feb 2025 17:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:fa:8f:d5:54:be:ce:16:b0:eb:85:99:7d:01:4d:42:c8:d6:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Feb  4 18:03:49 2025 GMT
            Not After : Feb  3 18:08:49 2026 GMT
        Subject: CN=617D664EA0EF08A424B18AA27A051A799C62F536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:da:b8:23:86:7a:9b:95:7a:2c:ce:e8:8d:2c:
                    2e:8c:38:f2:d9:8a:39:85:63:f1:24:b1:c2:bb:d8:
                    07:19:35:28:71:c8:01:1f:cf:0a:7f:b6:0a:5f:d9:
                    e5:f0:6e:df:21:42:1f:8b:a4:30:17:76:c3:c7:62:
                    4d:54:12:96:a8:65:c8:fa:44:df:00:06:56:29:d7:
                    e6:68:8e:3b:82:e9:1d:41:54:f4:bb:ce:67:4e:9a:
                    93:60:43:35:8b:59:82:6a:d6:ae:77:f8:eb:6d:fd:
                    af:94:c3:eb:73:2c:4d:57:55:1c:26:be:c6:52:0c:
                    d9:a9:d3:b7:7e:cc:a8:32:ec:82:ab:0c:d9:0b:de:
                    9d:f5:aa:bc:2f:d4:0b:02:b4:1f:67:70:a5:4f:77:
                    1a:b1:14:4e:53:8e:fa:65:f2:5b:3f:c5:46:ac:43:
                    33:1d:d6:ef:63:b0:ed:fa:d9:a9:d0:0e:e1:36:9e:
                    4c:42:67:1c:ef:e8:87:b5:14:8d:d8:56:ce:52:49:
                    b8:38:ba:61:e7:ae:66:c9:33:54:42:b4:85:fa:7e:
                    3c:6e:ce:22:b1:60:41:fe:2f:44:75:a7:9a:2a:16:
                    3e:e3:c2:8d:a8:6f:2f:a6:64:95:2e:16:07:94:04:
                    50:6b:18:42:30:e6:b7:27:d6:f7:26:c3:e4:98:34:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7D:66:4E:A0:EF:08:A4:24:B1:8A:A2:7A:05:1A:79:9C:62:F5:36
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:cd:aa:66:f9:ab:3b:86:07:2d:9a:3f:2c:4d:29:54:23:b6:
         50:53:8d:23:f8:95:41:52:76:b2:04:ca:8b:2b:c3:cf:3a:b3:
         c2:46:71:e6:24:f3:6c:28:7a:34:29:5b:17:ca:93:02:45:84:
         68:a4:91:7b:76:26:93:6d:09:25:d5:b9:71:96:df:a3:eb:48:
         39:5e:38:c8:df:74:49:0b:f7:2f:40:33:ed:99:7a:a6:af:f0:
         18:0c:8c:3b:bc:d8:73:fc:b5:71:0f:9d:be:f9:67:8a:14:3a:
         a6:da:13:b9:9c:c9:d7:0d:76:88:68:00:9f:71:e4:9b:87:dc:
         e6:40:11:f3:e0:27:83:b5:c2:9b:31:8c:97:9b:59:6f:75:00:
         8a:50:0d:2d:4f:a0:0b:a3:0c:2e:99:96:a7:63:d6:22:71:86:
         d9:be:8c:c8:01:25:0b:91:16:85:38:50:78:98:82:33:f1:01:
         26:fa:dc:2f:d9:c8:1b:36:64:91:00:9e:ac:d5:9a:d2:57:40:
         03:f7:b4:34:f4:5f:8f:85:fd:d9:d7:7f:a7:62:9a:cf:c1:90:
         13:41:ad:9f:34:91:54:7b:17:38:0e:6c:b5:63:92:b3:f7:71:
         b9:47:b7:95:5e:1d:0c:d5:b1:50:05:52:c0:b4:ca:09:52:07:
         74:1b:2b:a8
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUEPqP1VS+zhaw64WZfQFNQsjWDoAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkVENDdDMkZCNzVEMjM2N0UwMUM3NkVGNUJEOTM2NDJG
RTU2RjA1MTAeFw0yNTAyMDQxODAzNDlaFw0yNjAyMDMxODA4NDlaMDMxMTAvBgNV
BAMTKDYxN0Q2NjRFQTBFRjA4QTQyNEIxOEFBMjdBMDUxQTc5OUM2MkY1MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv2rgjhnqblXoszuiNLC6MOPLZ
ijmFY/EkscK72AcZNShxyAEfzwp/tgpf2eXwbt8hQh+LpDAXdsPHYk1UEpaoZcj6
RN8ABlYp1+ZojjuC6R1BVPS7zmdOmpNgQzWLWYJq1q53+Ott/a+Uw+tzLE1XVRwm
vsZSDNmp07d+zKgy7IKrDNkL3p31qrwv1AsCtB9ncKVPdxqxFE5Tjvpl8ls/xUas
QzMd1u9jsO362anQDuE2nkxCZxzv6Ie1FI3YVs5SSbg4umHnrmbJM1RCtIX6fjxu
ziKxYEH+L0R1p5oqFj7jwo2oby+mZJUuFgeUBFBrGEIw5rcn1vcmw+SYNG87AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUYX1mTqDvCKQksYqiegUaeZxi9TYwHwYDVR0j
BBgwFoAULtR8L7ddI2fgHHbvW9k2Qv5W8FEwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QjE4MTVFQUI1RkI0RTk1QjM2MUUwQjE2RTAxMjc2N0I3
RDg4NDRGOEY2QTQ4MEQ1N0VDMjhBQUVEMTU0NUI3LzAvMkVENDdDMkZCNzVEMjM2
N0UwMUM3NkVGNUJEOTM2NDJGRTU2RjA1MS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yRUQ0N0MyRkI3NUQyMzY3RTAx
Qzc2RUY1QkQ5MzY0MkZFNTZGMDUxLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEIxODE1RUFCNUZCNEU5NUIzNjFFMEIxNkUwMTI3NjdCN0Q4ODQ0RjhG
NkE0ODBENTdFQzI4QUFFRDE1NDVCNy8wLzMxMzczMDJlMzIzMzMzMmUzMTM1MzIy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMyMzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
6ZgwDQYJKoZIhvcNAQELBQADggEBAJfNqmb5qzuGBy2aPyxNKVQjtlBTjSP4lUFS
drIEyosrw886s8JGceYk82woejQpWxfKkwJFhGikkXt2JpNtCSXVuXGW36PrSDle
OMjfdEkL9y9AM+2Zeqav8BgMjDu82HP8tXEPnb75Z4oUOqbaE7mcydcNdohoAJ9x
5JuH3OZAEfPgJ4O1wpsxjJebWW91AIpQDS1PoAujDC6Zlqdj1iJxhtm+jMgBJQuR
FoU4UHiYgjPxASb63C/ZyBs2ZJEAnqzVmtJXQAP3tDT0X4+F/dnXf6dims/BkBNB
rZ80kVR7FzgObLVjkrP3cblHt5VeHQzVsVAFUsC0yglSB3QbK6g=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:07:16 2025 by rpki-client