Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
File:                     3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          gBJonLpm850/MioMMSniIu7oe+IdUUueUSXf/irAAdU=
Subject key identifier:   E1:2F:F1:06:D7:C0:5A:42:DC:C7:2D:C7:42:2F:1B:EF:55:93:3F:C4
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       1BBF783E9B65E93D255DC8E93C631C54B23C5B60
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
Signing time:             Tue 20 May 2025 18:19:54 +0000
ROA not before:           Tue 20 May 2025 18:14:54 +0000
ROA not after:            Tue 19 May 2026 18:19:54 +0000
asID:                     264842
IP address blocks:        170.81.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Jun 2025 08:22:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:bf:78:3e:9b:65:e9:3d:25:5d:c8:e9:3c:63:1c:54:b2:3c:5b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: May 20 18:14:54 2025 GMT
            Not After : May 19 18:19:54 2026 GMT
        Subject: CN=E12FF106D7C05A42DCC72DC7422F1BEF55933FC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:e3:ab:3b:a3:9f:5c:5d:4b:43:de:24:cb:
                    34:0c:67:29:35:69:ec:3b:1d:3f:90:cf:f7:62:26:
                    ca:41:24:1b:6e:e2:68:74:53:3a:a8:76:b7:1e:aa:
                    08:b7:7a:36:25:f6:52:df:c8:4a:8e:de:ea:c6:27:
                    3a:91:5a:fc:f9:8e:00:e3:a1:5a:92:9d:4d:86:4c:
                    b5:5f:09:95:b2:00:0a:4a:64:7f:ca:75:30:4c:c9:
                    98:10:30:9d:13:6c:39:30:91:38:e6:b7:65:c5:6d:
                    cf:0e:1a:a4:5a:a3:bb:f9:af:d9:c9:b5:7d:4b:16:
                    f5:9f:5b:cd:69:ee:6c:24:29:96:65:84:f5:a1:ae:
                    0d:78:e7:3e:95:77:67:05:f3:45:e7:1d:08:43:e9:
                    1c:cf:2d:63:b7:53:09:96:c4:84:f8:e1:fd:5a:25:
                    68:75:36:d1:72:8b:00:55:78:c8:26:d1:ff:f1:d7:
                    88:8f:32:51:b5:bd:a4:b8:ee:d2:ca:90:0f:a1:6c:
                    0e:91:fe:75:cc:9f:c6:d7:31:79:22:ab:6b:7b:ab:
                    20:95:f6:76:ff:f8:05:fe:e3:96:e3:cd:12:dc:6e:
                    17:e4:b5:44:4b:15:5f:15:90:a5:ca:22:34:95:97:
                    65:4f:09:37:3f:85:9f:a4:f4:49:11:42:d3:31:1c:
                    09:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2F:F1:06:D7:C0:5A:42:DC:C7:2D:C7:42:2F:1B:EF:55:93:3F:C4
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:8c:23:fe:d8:15:87:2a:fe:f3:8d:27:58:dd:88:52:1b:ae:
         8d:2f:f8:a6:85:20:2f:b3:72:da:62:02:44:bf:76:29:ad:aa:
         44:25:72:48:ce:7f:e2:68:58:53:74:c5:6e:63:2d:c2:17:ad:
         5a:a8:12:f7:b7:d0:ca:60:be:25:5f:30:eb:cd:a4:35:a9:ec:
         4d:e6:3d:c1:6c:e0:5d:dc:dc:6f:a9:6d:18:19:3d:2b:99:83:
         9b:cc:db:bf:4d:05:77:b0:b3:d6:10:92:25:56:41:44:d7:54:
         96:ad:20:40:cd:4b:2c:35:d6:04:b3:fe:06:e8:4e:30:de:d2:
         36:9e:ed:9c:f0:10:b4:99:d5:68:bc:61:32:06:4d:5d:6a:01:
         8e:61:d2:13:2b:26:02:35:5a:8e:8d:64:c6:95:fe:73:eb:70:
         91:68:44:b1:e7:d1:25:92:fa:8c:cf:27:2e:7d:81:90:46:cd:
         d2:58:83:cc:68:5a:43:3b:55:4d:be:21:33:4b:3d:b8:07:c5:
         0d:87:a5:7a:5b:15:13:ee:df:cb:c9:5e:ab:7e:be:96:7f:1b:
         f6:dd:95:04:db:b4:59:58:93:db:32:aa:d0:f2:85:54:5d:62:
         fc:50:42:36:97:f8:d1:92:28:5e:2d:5d:aa:70:70:d2:40:e7:
         c1:14:02:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 06:02:43 2025 by rpki-client