Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa
File:                     3137302e302e3233322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          Gu0N6JZPQzw/xDiZuMJWwtcqbt4VanTkWPzj1RSpxqM=
Subject key identifier:   6C:C9:B0:C8:67:F7:D0:46:C9:93:5B:B7:8B:B1:4D:BF:E4:B0:0C:2F
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       1A6AC93293B70EF997742FA535A5B5176BEE8074
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 04 Feb 2025 18:06:06 +0000
ROA not before:           Tue 04 Feb 2025 18:01:06 +0000
ROA not after:            Tue 03 Feb 2026 18:06:06 +0000
asID:                     27843
IP address blocks:        170.0.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 12 Apr 2025 00:47:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:6a:c9:32:93:b7:0e:f9:97:74:2f:a5:35:a5:b5:17:6b:ee:80:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Feb  4 18:01:06 2025 GMT
            Not After : Feb  3 18:06:06 2026 GMT
        Subject: CN=6CC9B0C867F7D046C9935BB78BB14DBFE4B00C2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:54:92:be:85:bc:73:8b:e1:c7:32:f3:3f:
                    ad:c7:0f:f6:80:d2:65:12:0c:09:28:2b:72:b2:1e:
                    1c:b9:07:16:49:ec:75:e2:0d:e4:17:31:71:88:f3:
                    1b:84:77:8a:36:0a:5e:fe:b9:1f:7d:fe:56:e6:e7:
                    d0:2c:92:d9:e1:4a:24:a9:98:1e:9e:0f:92:05:b9:
                    82:d1:3d:6f:a9:31:d5:f8:bd:7d:e4:5a:4e:f4:96:
                    a8:ef:74:b2:e5:e8:45:fa:9b:25:60:4f:bd:28:98:
                    39:d8:01:8a:37:51:5f:75:a8:d3:ef:39:a0:92:a0:
                    fa:d8:cd:2a:8e:8e:13:ca:a2:d6:81:d3:4c:2c:79:
                    67:1d:e3:22:44:0e:a0:19:77:fe:0e:a8:7f:da:00:
                    da:a7:b6:42:81:df:50:d7:57:4e:20:17:4f:cf:05:
                    be:c5:db:84:51:39:94:2b:46:0f:6c:b5:1e:71:97:
                    c7:52:8d:50:fa:61:75:b2:62:84:88:7e:8b:ec:63:
                    c1:ca:8b:49:18:57:ec:4a:54:33:ee:51:10:e5:61:
                    fe:e4:20:f3:23:4b:d4:c6:65:cb:21:4b:90:32:39:
                    b4:bf:3a:12:9b:8a:c6:87:8b:8c:c3:42:b6:07:73:
                    6e:77:05:78:08:73:96:81:bf:4f:be:06:7f:83:ac:
                    52:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C9:B0:C8:67:F7:D0:46:C9:93:5B:B7:8B:B1:4D:BF:E4:B0:0C:2F
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e302e3233322e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:b6:a1:87:d7:4a:96:8f:86:f1:94:82:1a:7e:2d:73:f9:5e:
         ac:a4:7f:f6:85:55:92:10:b3:f6:f8:88:1d:a7:0f:52:4f:aa:
         36:39:f3:b6:c0:91:2e:b1:a7:c9:a7:70:90:6d:0e:33:fe:66:
         f5:95:06:39:a6:ac:61:66:86:de:f1:5d:59:48:fc:05:a1:15:
         55:99:a6:db:c4:2b:0f:4c:9d:75:f1:f9:66:a8:f4:2a:d0:d4:
         ff:b5:dd:39:83:4c:50:0a:ae:98:af:5c:40:54:81:cb:d4:48:
         77:bb:e9:ff:9a:5a:f7:5a:96:1c:b6:52:d9:33:9d:db:5f:57:
         1e:ff:34:a9:06:01:4a:65:fa:01:76:dd:25:9c:ef:69:79:ff:
         26:ca:41:4c:28:a4:90:ae:c5:50:18:18:e4:ae:e5:10:f7:8a:
         a9:93:58:fd:bf:2c:a3:22:4b:9c:45:f9:2a:be:72:e1:ec:33:
         20:3a:13:a5:27:74:55:f9:e2:f1:31:00:35:e8:15:fa:f0:ab:
         9a:e4:5a:b4:df:cf:27:92:cc:72:89:17:1a:6f:6f:42:f1:ee:
         c6:eb:9b:df:d0:c4:8c:6f:74:b8:6b:51:11:5c:17:0d:48:ac:
         55:06:ff:50:81:bf:8e:70:24:0f:f1:48:b5:f4:74:81:fc:dd:
         f2:53:fa:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:19:56 2025 by rpki-client