Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32342d3234203d3e20323730303838.roa
File:                     3137302e302e31302e302f32342d3234203d3e20323730303838.roa (raw, json)
Hash identifier:          cV+WgbMrL9gpVsd+f4IKaHxwfH26k/rD8TJHa0Z67vA=
Subject key identifier:   3A:E5:28:78:85:37:EF:B3:E8:A3:4E:4A:E0:E1:0D:22:6D:14:5D:9D
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       7CA169E3C995CC5149E4EA11A5B30F398E8C83BF
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32342d3234203d3e20323730303838.roa
Signing time:             Sat 31 May 2025 14:35:00 +0000
ROA not before:           Sat 31 May 2025 14:30:00 +0000
ROA not after:            Sat 30 May 2026 14:35:00 +0000
asID:                     270088
IP address blocks:        170.0.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 13 Jun 2025 08:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a1:69:e3:c9:95:cc:51:49:e4:ea:11:a5:b3:0f:39:8e:8c:83:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: May 31 14:30:00 2025 GMT
            Not After : May 30 14:35:00 2026 GMT
        Subject: CN=3AE528788537EFB3E8A34E4AE0E10D226D145D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d7:95:0f:5c:49:0a:1e:88:48:75:5e:6d:60:
                    a1:40:90:5e:4b:03:d3:46:7b:bf:4f:ff:60:70:d1:
                    ee:6a:49:1e:f4:a3:51:d4:45:70:30:8e:31:53:16:
                    36:a0:90:8a:7e:b3:8a:08:76:9a:11:19:45:c3:c4:
                    a9:d0:b1:1c:76:92:a4:36:7a:41:fe:aa:b0:81:61:
                    7c:a0:ff:a2:6c:1a:31:95:67:79:09:aa:62:92:ad:
                    f0:2a:d2:4a:ea:71:60:fc:e4:eb:d0:74:f2:91:b6:
                    6b:b5:8a:d0:0c:aa:ce:15:31:7a:b5:dd:cd:c2:16:
                    18:69:4f:ec:a1:a1:56:c3:32:35:ea:3d:61:a0:85:
                    46:69:ff:85:c0:86:1d:9e:b7:6d:e1:75:eb:67:9c:
                    ac:67:88:e0:48:9c:d4:f0:6b:58:cd:4d:a9:2c:68:
                    8f:8b:15:8f:9f:f6:93:37:cf:ae:48:ee:6d:51:55:
                    d2:97:69:02:1a:53:f8:d5:ff:ae:09:dc:ab:c6:e5:
                    48:94:03:34:e6:9b:48:2e:48:c5:f8:66:45:5c:df:
                    9d:df:bd:97:71:90:12:f0:a2:94:40:d9:96:ae:12:
                    ed:6b:34:3c:4f:3c:7e:1d:8d:8a:30:a9:90:8d:d5:
                    5c:ca:fb:8a:2f:fd:fc:30:9c:26:25:6b:d9:37:a8:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:E5:28:78:85:37:EF:B3:E8:A3:4E:4A:E0:E1:0D:22:6D:14:5D:9D
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/3137302e302e31302e302f32342d3234203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:ef:96:f6:3a:7f:a3:02:ce:1c:9e:b4:23:28:e3:14:7e:
         16:4c:6f:20:d3:75:5b:e6:33:cb:c7:de:9a:79:9a:7a:7a:75:
         7a:31:a0:8e:bc:60:50:63:ee:0b:ff:4a:17:b8:7f:8f:4b:2d:
         ba:3c:00:02:38:38:fd:89:fb:4c:e6:69:c1:46:95:7f:48:fd:
         21:b2:84:84:54:54:67:17:2f:48:92:82:4b:ac:7f:c5:dd:d8:
         55:82:7d:cd:2f:15:38:79:0b:52:98:30:b9:fd:a1:32:11:a4:
         45:fd:e0:31:61:f4:d5:cc:e6:54:6f:24:6a:df:9f:0d:4d:22:
         b3:88:0d:62:32:cd:c3:f1:75:ca:0b:37:af:c0:34:4d:c1:bb:
         03:c0:5a:c1:86:40:ce:20:da:27:28:70:2f:ec:19:75:46:6c:
         b4:e6:08:06:23:f3:13:be:16:46:d1:92:ed:7b:69:66:4d:4b:
         49:c1:40:d7:04:07:8b:0e:e2:f4:d3:06:7a:71:27:fa:14:ab:
         3b:0d:6d:c9:a8:24:4d:cf:16:3c:45:c2:dd:47:4f:7c:4e:38:
         ea:3b:ab:eb:cb:c1:a7:bc:35:93:91:99:66:fc:32:31:9b:ea:
         99:c6:87:e8:76:fc:96:11:72:0c:bd:2f:33:d4:d0:a2:5d:75:
         72:e0:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 04:56:01 2025 by rpki-client