Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3137302e37382e37322e302f32322d3234203d3e203631343933.roa
File:                     3137302e37382e37322e302f32322d3234203d3e203631343933.roa (raw, json)
Hash identifier:          qUDlir2aTwMnJKGdt1FfbDAzB49DQINp1n4ASNftbHs=
Subject key identifier:   32:27:B3:4E:6E:3A:04:E9:4A:3E:2A:B2:5F:2D:B6:72:96:D6:11:60
Certificate issuer:       /CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
Certificate serial:       694751132B66BFD6145B9632BB966395F5751E88
Authority key identifier: 1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3137302e37382e37322e302f32322d3234203d3e203631343933.roa
Signing time:             Tue 04 Feb 2025 18:50:43 +0000
ROA not before:           Tue 04 Feb 2025 18:45:43 +0000
ROA not after:            Tue 03 Feb 2026 18:50:43 +0000
asID:                     61493
IP address blocks:        170.78.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 01:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:47:51:13:2b:66:bf:d6:14:5b:96:32:bb:96:63:95:f5:75:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF
        Validity
            Not Before: Feb  4 18:45:43 2025 GMT
            Not After : Feb  3 18:50:43 2026 GMT
        Subject: CN=3227B34E6E3A04E94A3E2AB25F2DB67296D61160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d1:46:10:bb:f6:38:c1:97:c2:ce:06:a6:e6:
                    ce:6f:54:e6:bd:81:d8:d9:42:62:67:ac:71:d2:03:
                    6f:49:55:b6:3b:f6:f1:67:05:4d:8f:e8:32:c0:e8:
                    70:44:2c:c5:31:89:5d:e3:dc:3e:f3:19:ee:e0:3b:
                    4a:0c:2b:dc:6f:0c:67:e5:2a:85:47:98:4e:c1:2c:
                    16:0e:50:f0:9f:3c:4e:a4:80:74:a9:76:55:80:cf:
                    28:86:d0:a4:3f:fd:4f:c3:7f:67:aa:61:89:b5:77:
                    ac:f2:63:6e:02:1a:fd:b7:ef:ed:41:b5:52:e0:b0:
                    e1:01:70:1f:95:18:af:71:6a:6a:6a:9c:20:a4:36:
                    ae:e4:4e:c4:60:02:71:c4:c5:71:a5:7d:95:66:cb:
                    c7:4c:34:30:70:43:17:aa:b8:f0:a8:c9:51:fe:4b:
                    21:8b:5b:69:f8:17:9f:de:99:6c:0b:ff:9d:e6:78:
                    1f:9c:08:8f:da:9a:b9:02:a0:0a:15:cc:fe:56:9b:
                    9d:b5:30:93:86:11:28:ad:ff:bd:ce:1b:9a:a9:73:
                    91:eb:c2:80:55:bc:4a:ce:7a:d6:2c:53:e5:f4:cc:
                    0f:21:5c:fc:32:2a:f6:64:67:35:19:01:68:3b:b1:
                    75:4b:42:02:5d:13:de:c8:4b:ba:bb:dc:f1:88:fa:
                    ed:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:27:B3:4E:6E:3A:04:E9:4A:3E:2A:B2:5F:2D:B6:72:96:D6:11:60
            X509v3 Authority Key Identifier:
                keyid:1B:0F:9F:6A:DE:61:46:F8:6A:FF:A5:5E:79:F8:5D:04:B0:C1:3E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B0F9F6ADE6146F86AFFA55E79F85D04B0C13EEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FC2692E9603D23AF02853DC75D35F465BF61721FEEA8F1D965544177D2F9846/0/3137302e37382e37322e302f32322d3234203d3e203631343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:88:3f:d0:63:a2:94:5c:18:4f:7f:71:2b:53:6b:0f:25:f0:
         a8:b5:57:a3:aa:cc:dc:3e:6e:de:9a:61:00:4d:ee:2b:4c:41:
         4c:2d:61:c6:39:67:38:80:ee:62:d4:ff:e8:31:c5:d9:75:37:
         d6:1c:25:b5:a8:09:b3:73:f8:85:66:af:3e:0e:b7:e5:d6:54:
         92:70:10:20:45:e0:74:82:e5:44:aa:a3:25:45:79:6f:3b:98:
         56:58:c9:c4:76:d6:0a:75:b1:85:c9:b1:57:fb:6b:b1:60:f6:
         b3:56:cd:cf:12:d2:b4:a9:05:0d:5f:b1:a3:b4:ba:88:dc:f8:
         d6:7d:ac:3b:9a:88:e5:4d:25:eb:7a:d0:b7:1d:d3:99:21:46:
         1b:79:ae:bd:c6:16:c6:02:88:11:36:3d:96:e8:4f:f9:da:7a:
         8b:f6:63:27:d5:92:66:d4:c2:9f:7e:1e:12:8c:be:1f:27:91:
         c3:10:77:17:39:77:79:88:c3:2f:ca:ad:eb:98:bd:a2:7d:b0:
         38:05:60:45:9a:95:6a:4e:40:e6:76:77:a5:ca:a7:ae:3b:f2:
         20:66:ec:02:1e:2e:a6:aa:eb:a4:c4:ce:7e:82:ed:89:27:46:
         7a:50:c0:7d:62:2a:ad:67:64:df:fa:38:d5:66:31:0a:0e:a6:
         0e:7a:69:3f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUaUdREytmv9YUW5Yyu5ZjlfV1HogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIwRjlGNkFERTYxNDZGODZBRkZBNTVFNzlGODVEMDRC
MEMxM0VFRjAeFw0yNTAyMDQxODQ1NDNaFw0yNjAyMDMxODUwNDNaMDMxMTAvBgNV
BAMTKDMyMjdCMzRFNkUzQTA0RTk0QTNFMkFCMjVGMkRCNjcyOTZENjExNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg0UYQu/Y4wZfCzgam5s5vVOa9
gdjZQmJnrHHSA29JVbY79vFnBU2P6DLA6HBELMUxiV3j3D7zGe7gO0oMK9xvDGfl
KoVHmE7BLBYOUPCfPE6kgHSpdlWAzyiG0KQ//U/Df2eqYYm1d6zyY24CGv237+1B
tVLgsOEBcB+VGK9xampqnCCkNq7kTsRgAnHExXGlfZVmy8dMNDBwQxequPCoyVH+
SyGLW2n4F5/emWwL/53meB+cCI/amrkCoAoVzP5Wm521MJOGESit/73OG5qpc5Hr
woBVvErOetYsU+X0zA8hXPwyKvZkZzUZAWg7sXVLQgJdE97IS7q73PGI+u0jAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUMiezTm46BOlKPiqyXy22cpbWEWAwHwYDVR0j
BBgwFoAUGw+fat5hRvhq/6VeefhdBLDBPu8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkMyNjkyRTk2MDNEMjNBRjAyODUzREM3NUQzNUY0NjVC
RjYxNzIxRkVFQThGMUQ5NjU1NDQxNzdEMkY5ODQ2LzAvMUIwRjlGNkFERTYxNDZG
ODZBRkZBNTVFNzlGODVEMDRCMEMxM0VFRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xQjBGOUY2QURFNjE0NkY4NkFG
RkE1NUU3OUY4NUQwNEIwQzEzRUVGLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZDMjY5MkU5NjAzRDIzQUYwMjg1M0RDNzVEMzVGNDY1QkY2MTcyMUZF
RUE4RjFEOTY1NTQ0MTc3RDJGOTg0Ni8wLzMxMzczMDJlMzczODJlMzczMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDM2MzEzNDM5MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKqTkgwDQYJ
KoZIhvcNAQELBQADggEBAGyIP9BjopRcGE9/cStTaw8l8Ki1V6OqzNw+bt6aYQBN
7itMQUwtYcY5ZziA7mLU/+gxxdl1N9YcJbWoCbNz+IVmrz4Ot+XWVJJwECBF4HSC
5USqoyVFeW87mFZYycR21gp1sYXJsVf7a7Fg9rNWzc8S0rSpBQ1fsaO0uojc+NZ9
rDuaiOVNJet60Lcd05khRht5rr3GFsYCiBE2PZboT/naeov2YyfVkmbUwp9+HhKM
vh8nkcMQdxc5d3mIwy/KreuYvaJ9sDgFYEWalWpOQOZ2d6XKp6478iBm7AIeLqaq
66TEzn6C7YknRnpQwH1iKq1nZN/6ONVmMQoOpg56aT8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:20 2025 by rpki-client