Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa
File:                     3137302e37382e3138392e302f32342d3234203d3e203132363834.roa (raw, json)
Hash identifier:          NAHgBzNK993JbaIuFotMUys3NTrml0xvlxI450IRl0s=
Subject key identifier:   08:97:CF:28:35:2D:FC:B2:1D:B3:64:8B:75:10:FB:3F:27:FA:40:5B
Certificate issuer:       /CN=CE9B6041658E7187B06A984F435470A36286EB73
Certificate serial:       621A6ED740CBF159B871DD0F586D9B781C33B0BD
Authority key identifier: CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa
Signing time:             Tue 04 Feb 2025 18:34:48 +0000
ROA not before:           Tue 04 Feb 2025 18:29:48 +0000
ROA not after:            Tue 03 Feb 2026 18:34:48 +0000
asID:                     12684
IP address blocks:        170.78.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 25 Apr 2025 20:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1a:6e:d7:40:cb:f1:59:b8:71:dd:0f:58:6d:9b:78:1c:33:b0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE9B6041658E7187B06A984F435470A36286EB73
        Validity
            Not Before: Feb  4 18:29:48 2025 GMT
            Not After : Feb  3 18:34:48 2026 GMT
        Subject: CN=0897CF28352DFCB21DB3648B7510FB3F27FA405B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:df:00:49:2a:82:e9:d3:62:c8:14:41:c2:f8:
                    2c:e4:6b:62:04:f8:9f:bd:94:5f:b1:3f:f4:a6:77:
                    5f:78:b2:3e:66:42:c4:21:d4:92:d2:80:77:9f:f6:
                    29:41:25:db:80:9a:8b:4a:c6:0e:fc:05:66:aa:7a:
                    a8:6e:0a:db:72:70:46:ed:34:05:e4:b5:d3:56:46:
                    b2:4b:66:31:09:34:65:5d:d0:0d:70:73:77:8c:7e:
                    9b:6f:5f:86:87:4b:72:79:f9:da:7b:b9:f4:ee:0b:
                    9a:45:52:11:f6:9f:7a:71:ab:a2:36:6d:11:ae:b3:
                    bf:7b:8b:13:66:c1:5b:e1:f1:5a:d6:c9:49:dc:3d:
                    46:c1:b6:9a:38:ca:81:ae:48:8c:8a:a3:c6:f6:2d:
                    4f:17:a5:91:d6:a5:74:ad:15:98:34:a9:80:da:0f:
                    68:6b:9a:7b:11:e7:39:33:69:dc:65:aa:1b:cb:01:
                    fe:3e:2a:b0:c4:dc:6a:34:1d:75:a4:d6:76:16:23:
                    d9:4c:37:c4:e9:1a:61:1e:56:19:e7:e9:4e:4c:74:
                    70:00:fe:6b:2a:e8:3f:b1:d5:e4:62:90:f7:b5:90:
                    d3:93:aa:fa:83:d5:ed:72:70:6d:68:d7:e6:9f:f9:
                    8a:1f:3e:cf:82:61:89:30:bd:a8:86:90:21:04:8f:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:97:CF:28:35:2D:FC:B2:1D:B3:64:8B:75:10:FB:3F:27:FA:40:5B
            X509v3 Authority Key Identifier:
                keyid:CE:9B:60:41:65:8E:71:87:B0:6A:98:4F:43:54:70:A3:62:86:EB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/CE9B6041658E7187B06A984F435470A36286EB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CE9B6041658E7187B06A984F435470A36286EB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8DC20F63D08ABDD92FBEF39DCB3D5C0DB29ABED46603EBDE93F27842AF97FD22/0/3137302e37382e3138392e302f32342d3234203d3e203132363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:26:f6:fd:8c:1c:5d:2b:ed:1e:a5:b2:3b:3a:a9:ac:1e:4a:
         2d:e0:f4:b1:f3:4b:63:4b:53:29:9c:0a:0c:d6:e8:34:b1:7b:
         1a:b7:12:7f:2e:d9:8a:2d:29:56:55:3a:a4:30:31:ae:b3:4a:
         d7:fe:19:34:76:45:e4:1c:c3:41:9c:78:9c:ab:30:82:ee:99:
         2e:3b:e0:24:58:b0:01:d3:c5:68:cd:61:a0:b2:00:1a:c1:44:
         a4:35:82:95:25:d4:8c:25:b6:07:1d:95:24:88:55:37:aa:36:
         8c:86:ae:93:db:15:cb:19:6c:60:94:27:26:59:52:bb:3b:96:
         ee:49:8e:04:7f:df:8e:10:0b:be:6e:f1:f5:3b:5e:96:9f:d1:
         40:d3:bd:67:4e:a9:46:de:e9:bc:8d:03:24:c3:21:d2:8d:f0:
         fc:21:50:12:a0:d7:fd:dc:ec:94:18:1b:57:76:bc:42:35:3c:
         5e:0d:cb:53:a5:42:5b:c5:e5:ba:e9:41:63:39:4c:90:dc:93:
         dc:a2:57:d6:de:30:78:26:37:69:4a:1c:90:d3:19:48:6b:7a:
         d5:76:dd:54:78:7b:fb:f0:52:7b:0e:eb:59:f0:bc:42:d9:2b:
         2f:f2:bf:d8:95:04:c8:df:41:c8:92:02:bc:22:39:db:d6:38:
         da:a4:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:04:18 2025 by rpki-client