Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
File:                     3137302e38342e3137322e302f32322d3234203d3e203631353132.roa (raw, json)
Hash identifier:          TflG4o/REJ8GI6HEecn2ia7jQKl+ED7UzGU24GMe0FM=
Subject key identifier:   09:8C:D5:F4:ED:06:3C:AD:9E:70:03:F2:C9:38:8B:8C:53:CC:2E:A6
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       6D4A5BCEC58FD32FAB5DD04692B35A4137EEF042
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa
Signing time:             Thu 03 Apr 2025 16:45:00 +0000
ROA not before:           Thu 03 Apr 2025 16:40:00 +0000
ROA not after:            Thu 02 Apr 2026 16:45:00 +0000
asID:                     61512
IP address blocks:        170.84.172.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4a:5b:ce:c5:8f:d3:2f:ab:5d:d0:46:92:b3:5a:41:37:ee:f0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:40:00 2025 GMT
            Not After : Apr  2 16:45:00 2026 GMT
        Subject: CN=098CD5F4ED063CAD9E7003F2C9388B8C53CC2EA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:6b:a3:ee:92:88:ff:cf:35:5e:a5:d8:9a:
                    40:8d:9c:ae:ac:ab:c2:95:25:fc:b7:ef:54:41:fa:
                    01:b4:78:94:60:9e:99:ae:65:24:3c:3d:ff:65:31:
                    1d:da:5a:02:4c:f7:5d:c0:7e:7d:2b:ba:fc:55:2c:
                    49:69:15:1b:30:36:18:d7:47:67:3a:11:f4:45:05:
                    95:e9:77:ea:7e:f0:fc:ca:48:ac:bc:17:1b:e1:d8:
                    4d:80:d5:1c:1a:a3:73:80:b3:bf:f1:49:e1:fd:86:
                    7b:b5:06:b2:98:06:1d:69:8f:30:e8:2e:e1:d3:1f:
                    7a:f4:42:56:70:7b:a4:2f:00:80:8c:db:8d:3d:ce:
                    18:fd:08:89:e6:fa:1a:58:c7:b7:78:9c:e9:81:56:
                    d0:74:a8:f4:c3:ac:3f:e8:d3:c8:d6:f5:d8:09:45:
                    35:09:de:01:7e:59:9b:9b:b7:11:e3:d9:62:79:2b:
                    f8:80:2c:e2:9e:18:b2:c9:ca:31:2c:23:53:80:2a:
                    1b:ad:f4:64:95:7a:a2:d2:cc:0f:b5:96:4a:0d:65:
                    10:f5:04:3e:48:a8:62:8f:de:36:b6:b6:ea:7c:70:
                    ba:a7:da:6a:99:a4:ab:02:08:02:b1:60:f7:22:e3:
                    ef:bb:26:35:4d:ab:8d:d0:38:9e:cc:68:52:d0:24:
                    4d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8C:D5:F4:ED:06:3C:AD:9E:70:03:F2:C9:38:8B:8C:53:CC:2E:A6
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203631353132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:ab:3e:28:96:c0:fd:65:c6:f5:42:65:38:ee:56:a0:75:de:
         e6:b4:63:b6:32:0e:bf:87:50:45:01:71:af:0d:00:3f:44:ee:
         71:14:51:d3:35:0c:e9:2a:c6:9d:d8:85:67:26:e0:f0:50:2c:
         d7:a9:44:85:3a:61:cf:3f:56:22:df:54:dc:58:41:c3:4b:b6:
         0c:7a:41:a4:95:dd:b4:3a:ac:89:d3:5f:6c:b9:70:e9:dc:66:
         1d:e6:a5:9c:01:92:a3:be:ce:28:30:be:1e:06:a7:b7:33:b5:
         f9:f9:0c:7b:70:40:83:0d:0d:82:9f:40:16:17:34:89:b6:5d:
         cb:17:05:fb:b5:90:f9:44:28:ad:42:fb:08:70:14:00:97:fd:
         ce:4d:69:50:75:d3:11:01:46:a3:c0:4f:07:77:d9:5e:b1:74:
         d0:ea:79:63:89:d4:6d:42:22:e5:63:39:fb:25:39:0d:4b:ff:
         8b:85:8e:3a:a7:04:90:ce:65:3a:fa:27:33:9f:29:2f:aa:04:
         7f:c6:3c:88:d0:f9:7e:f7:c3:45:95:2b:a2:c2:ae:5d:c9:ae:
         da:af:e5:60:61:a5:4a:87:cc:82:27:f8:70:63:2d:19:04:b7:
         02:81:7e:1f:50:90:e5:15:69:8a:3f:dc:43:29:cf:b5:bb:29:
         1f:44:8d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:02 2025 by rpki-client