Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa
File:                     3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa (raw, json)
Hash identifier:          M6ORRmOjHmMsQNf1kdyef1dJN1SWSdh126U+iO1IFbI=
Subject key identifier:   E5:36:FA:BF:37:75:B0:90:BA:B1:F8:24:A6:8D:51:6A:5A:7E:A8:B2
Certificate issuer:       /CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
Certificate serial:       5C3933895BA3E80E46931FDE70ECF9A0A240B10F
Authority key identifier: 42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa
Signing time:             Tue 04 Feb 2025 18:00:31 +0000
ROA not before:           Tue 04 Feb 2025 17:55:31 +0000
ROA not after:            Tue 03 Feb 2026 18:00:31 +0000
asID:                     262231
IP address blocks:        170.245.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 19 Feb 2025 22:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:39:33:89:5b:a3:e8:0e:46:93:1f:de:70:ec:f9:a0:a2:40:b1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4233B5C9FB05032EE4D323F58984C9BB2353F9AE
        Validity
            Not Before: Feb  4 17:55:31 2025 GMT
            Not After : Feb  3 18:00:31 2026 GMT
        Subject: CN=E536FABF3775B090BAB1F824A68D516A5A7EA8B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:43:c0:ad:7b:f0:19:e8:eb:a4:b5:c1:e9:
                    f8:e4:a3:92:f3:89:64:8f:7b:46:de:5f:9b:d0:b6:
                    b6:2e:27:a8:72:10:1b:39:de:cb:6c:67:73:34:67:
                    fa:bd:b4:2d:58:7e:b6:bc:0a:ea:09:fa:08:ea:7c:
                    c1:af:27:99:29:41:70:16:2c:4a:67:7d:12:2d:70:
                    21:b2:6c:97:65:f7:05:e2:1c:68:9f:81:fe:89:5b:
                    49:a8:c1:5c:6b:bb:85:fb:3f:b3:96:ef:83:5f:a1:
                    5d:ba:e5:90:a3:17:cc:f2:68:a7:c0:db:ed:96:aa:
                    1c:4e:43:f6:33:05:9b:ce:39:ae:f8:84:fb:2e:65:
                    77:82:ac:cb:04:3c:bb:98:8a:90:41:65:1c:e3:8f:
                    00:0a:16:32:a5:9b:f4:de:69:1a:94:91:de:78:5e:
                    83:31:e3:37:e6:20:f9:db:dd:8b:1a:7d:52:e8:d6:
                    08:3c:44:56:38:6a:d0:f9:15:5f:4e:27:b7:1d:49:
                    bc:b0:d2:f5:44:2a:04:17:62:84:54:f9:c5:af:ee:
                    be:2b:9c:bf:0c:61:33:57:40:b2:92:42:83:02:da:
                    fc:da:71:b9:26:93:db:00:ec:5c:d1:7f:f3:1a:5f:
                    11:7d:1d:ea:a6:55:66:91:14:96:4d:c6:e4:a9:43:
                    48:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:36:FA:BF:37:75:B0:90:BA:B1:F8:24:A6:8D:51:6A:5A:7E:A8:B2
            X509v3 Authority Key Identifier:
                keyid:42:33:B5:C9:FB:05:03:2E:E4:D3:23:F5:89:84:C9:BB:23:53:F9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4233B5C9FB05032EE4D323F58984C9BB2353F9AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BAF02E822514644D30EB9C6335075620AFEC893BDB9940FA1EA2568FBDD8CB17/0/3137302e3234352e3136382e302f32322d3234203d3e20323632323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:29:3a:0a:4e:4b:30:8a:70:81:19:16:1f:8e:a9:bb:e1:85:
         e8:b2:a7:ab:26:90:a0:72:43:f1:a8:6e:f5:7d:8d:4b:47:12:
         4a:09:94:96:6e:29:94:3c:bd:17:74:dc:17:11:af:8f:91:6b:
         fe:13:07:c6:63:57:c0:84:36:b5:a9:ed:a8:6d:ab:0f:6c:89:
         20:7e:3e:b1:18:a8:32:d9:94:24:6a:f8:18:16:0f:16:a6:f0:
         10:a6:a3:f4:31:cf:df:8a:a5:0e:f1:90:02:b7:9b:ce:c3:5a:
         24:85:5c:a6:56:40:d7:52:2b:b9:dc:c1:5f:7d:3d:09:44:3b:
         35:7c:dc:c5:a1:02:2f:6c:10:5b:9c:07:cb:fc:51:ab:b1:f7:
         8a:74:b3:dc:f4:97:34:28:57:af:a6:6d:a4:d2:c1:27:d9:a0:
         16:77:ee:b7:ff:a3:2a:57:2f:00:6c:67:9c:58:10:c7:95:d7:
         88:bd:9e:80:23:d8:ed:d1:bc:5d:2c:bb:f5:3d:e1:31:00:4b:
         c1:2e:e9:1f:90:c7:b7:fa:cb:b0:a2:22:d0:09:86:0d:ce:aa:
         f3:4d:65:a1:4c:05:e7:d7:b3:2c:3b:ad:ef:e5:f4:6e:42:b0:
         04:47:49:de:85:9d:4d:76:b3:25:0d:f5:a8:a9:ff:b3:bd:6c:
         d4:71:a6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:19 2025 by rpki-client