Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3234352e3136342e302f32322d3234203d3e20323634363035.roa
File:                     3137302e3234352e3136342e302f32322d3234203d3e20323634363035.roa (raw, json)
Hash identifier:          I72DqmX0m5nqCggMdeJQ4KdYzMURJMtBITpYunv7qso=
Subject key identifier:   72:54:E8:E4:6B:46:6E:88:B8:90:92:92:7E:D7:A0:D6:D1:46:23:82
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       7B933CAEED0E7EDA06527CD6F0C55B37BBB7844B
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3234352e3136342e302f32322d3234203d3e20323634363035.roa
Signing time:             Tue 04 Feb 2025 18:48:38 +0000
ROA not before:           Tue 04 Feb 2025 18:43:38 +0000
ROA not after:            Tue 03 Feb 2026 18:48:38 +0000
asID:                     264605
IP address blocks:        170.245.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 22:16:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:93:3c:ae:ed:0e:7e:da:06:52:7c:d6:f0:c5:5b:37:bb:b7:84:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Feb  4 18:43:38 2025 GMT
            Not After : Feb  3 18:48:38 2026 GMT
        Subject: CN=7254E8E46B466E88B89092927ED7A0D6D1462382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bd:f6:a8:af:b3:ba:fc:bf:3e:60:fa:6e:78:
                    ec:8d:20:df:95:40:de:e7:13:9d:95:11:fe:24:e0:
                    1e:d0:ee:d1:36:f2:10:70:68:5a:92:b7:d5:f5:af:
                    e3:73:e7:cd:44:7a:6d:cc:b4:ef:91:be:9c:8c:5f:
                    42:23:ad:90:39:38:da:60:52:8f:fb:20:d4:e0:22:
                    f6:79:a7:a7:5d:1a:75:61:df:96:a5:e6:9d:d9:bd:
                    9f:a0:7a:89:11:53:77:95:08:2c:0c:1f:66:f1:c0:
                    74:46:b0:3c:d6:e0:62:bc:a1:7a:eb:a8:64:56:78:
                    d6:32:18:f2:b1:69:a2:3d:70:82:91:dd:0a:d5:db:
                    38:78:4b:43:92:aa:a1:58:82:ab:6a:46:9b:e4:aa:
                    26:b9:78:ca:de:06:1c:bf:25:92:b0:3e:80:1e:cc:
                    7e:c3:e8:fa:d5:80:6f:16:61:7a:7d:cc:d9:a2:8b:
                    a8:2b:18:a4:cc:5a:9a:99:b7:9b:13:15:4f:00:1d:
                    6b:2a:f7:3c:34:c3:d7:89:67:11:b0:f1:52:4e:ff:
                    de:3a:cb:ea:11:f7:ad:8f:95:9b:7c:51:21:a5:bb:
                    a4:61:19:88:e5:d5:5e:b1:c8:cb:b2:6b:25:30:64:
                    54:36:10:9a:ec:c1:3d:61:e4:3b:d8:7d:dc:83:a8:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:54:E8:E4:6B:46:6E:88:B8:90:92:92:7E:D7:A0:D6:D1:46:23:82
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3234352e3136342e302f32322d3234203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:22:7d:b7:db:1e:3f:68:aa:e1:c4:5f:aa:af:0f:90:aa:ea:
         f8:a2:ab:e6:68:27:76:c5:94:db:8c:78:22:a5:fc:0b:74:b2:
         6e:e7:a6:85:0e:24:87:ce:4f:3d:1e:7d:ae:93:dd:56:9e:eb:
         63:b7:8a:43:9f:f7:f4:22:17:8f:f9:bd:cc:cc:58:86:eb:84:
         c5:3a:f1:5d:3f:fe:c1:cb:a2:7c:7f:d0:60:d4:c8:0d:cd:8a:
         0d:e8:4a:a2:e4:1e:27:6f:8e:fa:91:8e:d5:7c:ab:e7:d1:8a:
         c9:6e:c4:45:66:5a:0c:85:36:f1:c3:07:d3:71:d9:46:fd:69:
         8e:71:26:48:75:03:4b:8f:45:22:2d:0e:c2:6e:9b:55:85:0c:
         1b:51:50:77:36:7c:5b:03:68:46:1c:4e:09:37:cc:c4:23:f9:
         30:c6:54:7a:90:42:63:8e:1a:7e:72:6d:83:bb:48:5d:c1:33:
         c7:68:01:30:39:aa:10:6a:c4:5d:4b:52:42:69:08:e8:e7:e1:
         6c:65:a6:6f:28:2a:89:11:a2:d6:93:48:5a:49:86:08:2d:b1:
         be:32:4c:1b:77:01:dd:b0:64:be:0d:26:26:71:f7:97:16:f3:
         ac:4f:2d:da:7c:dd:0d:b2:a6:fb:d2:03:8f:bd:33:20:c4:e4:
         99:1c:69:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:30:33 2025 by rpki-client