Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa
File:                     3137302e3233382e33322e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          cXDAP1RI02E6hhaO/X/Pgtoq+t+YoIn0r6KlcWOKA68=
Subject key identifier:   93:41:D8:07:AD:DB:4F:6F:B2:82:CF:F9:2C:89:E8:2B:9A:B9:DC:67
Certificate issuer:       /CN=05A27166426FE2603E20613021874022CADAB030
Certificate serial:       2AD7A9055C6AF1C3436746053956A4C5868E6780
Authority key identifier: 05:A2:71:66:42:6F:E2:60:3E:20:61:30:21:87:40:22:CA:DA:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 04 Feb 2025 18:39:42 +0000
ROA not before:           Tue 04 Feb 2025 18:34:42 +0000
ROA not after:            Tue 03 Feb 2026 18:39:42 +0000
asID:                     61466
IP address blocks:        170.238.32.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 18 Feb 2025 07:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d7:a9:05:5c:6a:f1:c3:43:67:46:05:39:56:a4:c5:86:8e:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A27166426FE2603E20613021874022CADAB030
        Validity
            Not Before: Feb  4 18:34:42 2025 GMT
            Not After : Feb  3 18:39:42 2026 GMT
        Subject: CN=9341D807ADDB4F6FB282CFF92C89E82B9AB9DC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:74:de:2f:9d:01:c8:e8:f8:3b:83:61:23:fb:
                    c4:7d:87:7c:e0:d4:51:3b:5d:a1:a5:1c:bf:11:31:
                    11:a8:34:ef:07:15:c2:2b:b9:5f:b0:50:44:8d:0a:
                    08:54:0c:d9:10:5d:03:3a:0f:88:58:39:18:ec:a5:
                    17:c5:c4:88:1e:8b:0b:19:dd:3f:3e:fe:0a:e6:03:
                    cb:10:90:f0:02:de:e0:b4:c1:b5:e2:c4:b0:4d:54:
                    8b:67:fa:c5:f7:06:4f:2d:c6:4e:6e:6f:e5:83:90:
                    41:a6:be:08:dc:f3:e5:30:87:a7:06:64:67:8b:f6:
                    2e:33:a8:54:75:f1:19:a7:c9:20:37:1f:de:bf:98:
                    88:2e:d9:f0:9f:2a:70:90:65:46:b7:10:84:51:79:
                    76:b2:fd:b0:00:43:b5:56:20:c6:8d:0d:5e:f8:57:
                    48:d5:21:97:12:89:55:ab:22:0f:9b:20:b6:6d:22:
                    55:4e:d4:42:c4:95:39:45:c6:5b:b6:e1:60:11:4c:
                    eb:d0:51:16:d9:38:f0:61:98:39:cd:b2:10:a4:95:
                    cc:6f:e8:58:f5:43:82:4f:22:aa:10:9e:1e:31:7f:
                    a1:36:92:31:52:b0:25:f5:1a:28:e6:76:5f:ca:0c:
                    fe:3e:ca:00:47:b3:95:dc:2e:66:3e:9d:7f:15:92:
                    da:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:41:D8:07:AD:DB:4F:6F:B2:82:CF:F9:2C:89:E8:2B:9A:B9:DC:67
            X509v3 Authority Key Identifier:
                keyid:05:A2:71:66:42:6F:E2:60:3E:20:61:30:21:87:40:22:CA:DA:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:1f:8e:e9:6c:70:17:16:37:18:ae:01:4c:12:5f:87:92:57:
         a8:4f:7b:22:37:d5:9e:a7:30:9d:59:7e:dc:73:de:a4:05:d7:
         aa:a3:44:09:24:ae:b8:3a:2c:ca:b6:6d:7e:cc:23:f8:8c:46:
         4f:1f:0a:8c:38:9d:8b:ab:5e:24:a5:fa:1f:d1:d6:ef:94:33:
         29:5d:2c:98:ad:eb:d9:f8:29:33:fc:f1:44:a3:c3:1f:35:31:
         fe:16:28:bb:31:9e:c7:70:ea:f1:05:19:3f:22:9b:70:50:1a:
         6a:47:d0:b0:b1:f0:38:db:f0:6d:7a:b9:32:84:85:07:64:8b:
         4b:13:4e:9c:71:c1:e8:5d:66:b2:8b:ff:d1:d7:bb:29:68:87:
         4e:32:11:31:a5:b7:af:3e:e0:4b:58:ee:94:19:36:5e:70:40:
         f6:44:31:68:26:af:44:56:c8:4d:7a:ec:4c:7e:f9:95:fd:52:
         76:d5:97:9c:89:5f:b1:24:69:c7:6c:dd:27:aa:14:fa:23:a9:
         ab:8a:10:01:cb:ac:36:30:c1:c7:47:b1:33:63:e0:d0:f9:73:
         8c:35:5c:b9:47:8b:f7:06:9a:ff:16:2f:4a:a6:c0:76:dc:d7:
         da:27:3f:92:72:a5:21:05:8f:4b:ff:a2:42:4e:73:ff:87:a8:
         5c:56:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 13 19:36:54 2025 by rpki-client