Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa
File:                     3137302e302e3137362e302f32322d3234203d3e203237393033.roa (raw, json)
Hash identifier:          KuS4uocwq7CC1bzagqCum2blivp4+7bOMYfskgg5uno=
Subject key identifier:   13:44:E6:42:48:EE:FD:00:D3:85:D4:A2:C1:FD:14:E5:AF:85:B6:C7
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       05F80E4724B79C131F87F2CC5573011470067547
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa
Signing time:             Tue 04 Feb 2025 18:22:05 +0000
ROA not before:           Tue 04 Feb 2025 18:17:05 +0000
ROA not after:            Tue 03 Feb 2026 18:22:05 +0000
asID:                     27903
IP address blocks:        170.0.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f8:0e:47:24:b7:9c:13:1f:87:f2:cc:55:73:01:14:70:06:75:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Feb  4 18:17:05 2025 GMT
            Not After : Feb  3 18:22:05 2026 GMT
        Subject: CN=1344E64248EEFD00D385D4A2C1FD14E5AF85B6C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5b:b3:f8:44:9e:1b:5b:d2:96:aa:7a:94:d3:
                    48:61:04:67:26:97:13:ca:e7:85:e3:ea:0c:73:80:
                    95:8e:dc:1d:fa:b8:a0:fb:70:61:c7:cd:6b:09:e5:
                    58:a6:03:f7:9b:33:85:60:3f:a0:40:85:53:8c:a3:
                    c0:e1:08:d9:a8:81:b8:4b:ca:bd:bb:db:c0:bf:7f:
                    73:9b:ee:0f:40:ee:e0:ed:0b:7b:9f:da:76:41:1f:
                    28:ae:44:4b:2b:7e:4c:23:3c:b1:05:23:dc:c5:a5:
                    ac:d3:f5:13:7e:91:13:1f:2c:5b:a3:2d:51:d3:7c:
                    4a:d2:6e:e0:01:cb:14:e0:23:16:eb:a8:99:5d:db:
                    3e:61:c8:ad:d9:9b:a3:5b:7b:96:b0:eb:50:af:39:
                    31:f2:74:8f:e8:79:5c:c7:06:2f:86:2d:97:57:85:
                    76:a1:01:b8:97:90:69:82:28:08:97:c4:06:5c:50:
                    ad:db:20:42:43:e6:1c:53:e3:5b:fa:2f:64:c4:6a:
                    34:61:1b:e4:1f:5c:a1:f1:af:91:0f:1a:9c:8c:aa:
                    65:92:68:cd:71:a8:91:46:c4:b9:0e:85:0e:9f:3e:
                    18:f0:b6:a2:97:16:a1:3d:f7:40:9d:f2:bf:90:6a:
                    6f:72:68:99:5c:12:30:ce:2c:d9:bc:1d:ed:4d:77:
                    ce:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:44:E6:42:48:EE:FD:00:D3:85:D4:A2:C1:FD:14:E5:AF:85:B6:C7
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:f5:a9:a0:8b:2c:d6:9f:e9:3f:36:1e:c2:d5:70:32:86:8d:
         9c:ad:44:d4:7c:54:21:21:08:26:74:a8:e0:19:3d:61:55:bd:
         ba:60:e1:d8:0f:fb:b8:e8:c9:36:9c:d0:74:70:e3:7d:9f:d7:
         5f:13:0c:58:b2:05:7d:d6:30:dd:a6:34:a2:a0:76:c2:51:f1:
         4d:aa:95:21:10:09:de:45:4a:42:22:13:8f:c3:fd:f3:72:52:
         f8:b7:06:76:74:c3:ae:1f:a8:c8:60:08:3b:e3:ed:ff:ca:38:
         69:f3:81:2c:da:72:32:6d:82:55:56:59:28:53:c9:22:51:73:
         af:d3:40:10:6c:25:2e:9d:27:fe:4d:13:3e:be:40:b8:ce:c7:
         90:23:96:3a:68:0d:d0:f3:f9:cd:d8:d5:ec:c4:4a:29:e0:82:
         ae:a7:ee:14:87:1a:2c:39:90:89:b2:34:ff:87:3e:49:2c:00:
         8e:d8:b8:47:ee:29:28:53:59:4a:53:9c:bd:97:a0:20:e7:14:
         bb:85:e0:7c:3f:87:ec:6c:a8:1f:bd:50:52:49:31:b7:04:13:
         43:5f:07:3d:5d:8e:52:b8:eb:4f:af:35:44:97:a0:b1:5b:f2:
         0a:4c:e7:59:16:b4:3d:a1:23:14:72:86:87:03:13:fa:b4:e0:
         11:f7:1d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:23:15 2025 by rpki-client