Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
File:                     3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa (raw, json)
Hash identifier:          CxyC19RS8J/MTnYRR9C6aVmIdLgxU79j7lftqMQXxKI=
Subject key identifier:   34:DC:81:0E:61:C0:B8:C5:73:5B:19:29:39:2D:02:C2:A7:66:02:DE
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       3FEB17D366E181888642A27A5CFCCDAC99446542
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
Signing time:             Tue 04 Feb 2025 18:26:58 +0000
ROA not before:           Tue 04 Feb 2025 18:21:58 +0000
ROA not after:            Tue 03 Feb 2026 18:26:58 +0000
asID:                     265700
IP address blocks:        170.210.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:29:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:17:d3:66:e1:81:88:86:42:a2:7a:5c:fc:cd:ac:99:44:65:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Feb  4 18:21:58 2025 GMT
            Not After : Feb  3 18:26:58 2026 GMT
        Subject: CN=34DC810E61C0B8C5735B1929392D02C2A76602DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:94:ca:ed:42:80:b1:d3:ed:73:e0:86:9c:
                    d9:3b:e1:e6:2e:70:e8:ab:3c:de:b0:eb:81:96:2f:
                    8f:d4:0d:46:54:99:56:1c:29:9c:e6:aa:28:22:f5:
                    bb:da:a0:3a:d8:fe:72:2d:03:b7:52:06:72:f2:f2:
                    aa:d8:70:8a:7a:49:8e:ee:a6:20:96:07:dd:f6:09:
                    9b:62:25:7a:2b:2d:25:9c:af:38:80:8c:bc:07:2a:
                    41:af:0c:48:96:4b:8a:fe:b6:90:c6:be:e7:f2:a6:
                    1a:87:3f:61:38:4f:b1:9c:2d:07:13:36:2d:fc:40:
                    8f:69:d0:03:8d:2b:62:29:87:58:0a:08:53:0a:36:
                    a1:ac:9f:e5:fd:27:78:c9:b8:a0:85:ff:be:60:46:
                    4f:54:81:14:81:90:84:77:06:5f:6d:9d:3e:dc:ed:
                    0e:c2:8b:a9:ed:66:3e:5d:80:3f:32:c5:d1:ae:67:
                    93:31:91:77:6d:dc:56:a6:94:33:ac:16:da:d6:7d:
                    7a:d1:ae:a7:11:ab:3c:d3:51:bd:52:29:80:67:98:
                    2a:3f:6f:fb:9d:63:6f:9e:19:cf:d9:8a:cc:75:96:
                    82:dd:31:11:ad:d8:7a:6e:5a:67:49:ff:7f:87:86:
                    b2:37:80:34:59:3c:23:13:7c:2d:89:5a:3c:5c:f7:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DC:81:0E:61:C0:B8:C5:73:5B:19:29:39:2D:02:C2:A7:66:02:DE
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:80:ed:51:d0:13:63:50:7e:10:da:f7:6e:79:b5:ac:b6:9e:
         27:57:2d:79:1c:17:2a:d2:c6:9e:df:71:c3:61:ab:76:44:1f:
         3d:67:46:8f:81:86:ca:fc:47:e6:2c:1e:d2:b2:e1:c8:5c:88:
         ae:ad:e5:8e:b5:87:df:35:b3:23:3d:8b:56:4e:03:87:8d:5a:
         c5:00:42:db:1a:83:99:b9:b9:c4:3f:37:3d:c1:04:15:75:f7:
         9a:5c:1d:74:8f:06:5d:81:ae:88:38:14:72:07:54:9f:5d:2f:
         0d:91:8f:a4:70:a9:91:d5:19:c2:80:47:d4:ee:98:af:8b:8d:
         9f:9d:8b:3a:6a:97:1f:45:e0:e3:bb:79:57:75:0b:7e:40:06:
         f7:b2:50:65:9f:99:09:a7:ee:65:cf:4c:50:68:b2:59:74:db:
         f6:aa:30:b4:49:35:6b:a7:33:31:95:54:6d:d8:28:70:c1:09:
         df:dd:94:e2:dc:50:5a:76:e2:54:63:c2:5a:7e:c2:95:79:6b:
         0f:7e:42:3a:3f:19:8f:4e:20:65:1b:fd:5a:05:15:df:2e:f5:
         5a:23:1a:8f:f9:66:33:ef:3d:66:d2:55:e8:1b:45:51:47:be:
         0e:89:f4:17:ba:a9:52:dd:1a:a1:d2:0d:c8:4b:a7:cc:c2:05:
         31:d2:e7:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:14:18 2025 by rpki-client