Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa
File:                     3137302e38302e32382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          Aqj5al/mp8lwFazjVEY2PEBwBnUVFv0HtRGs0coaJwg=
Subject key identifier:   7D:8C:20:CB:19:A0:83:64:13:CC:58:B4:7C:EB:63:AB:3B:34:B2:AC
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       0CE56E9DF20C08954B7EAAB2B21F30B9F73F090C
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 05 Feb 2025 07:09:03 +0000
ROA not before:           Wed 05 Feb 2025 07:04:03 +0000
ROA not after:            Wed 04 Feb 2026 07:09:03 +0000
asID:                     265524
IP address blocks:        170.80.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 15:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:e5:6e:9d:f2:0c:08:95:4b:7e:aa:b2:b2:1f:30:b9:f7:3f:09:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Feb  5 07:04:03 2025 GMT
            Not After : Feb  4 07:09:03 2026 GMT
        Subject: CN=7D8C20CB19A0836413CC58B47CEB63AB3B34B2AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:28:bb:31:5d:67:00:fd:53:3b:a6:16:41:04:
                    64:20:a6:7d:48:c2:60:4a:a7:54:11:2a:51:0f:1f:
                    ff:09:6e:59:7d:3e:61:1c:67:74:5a:e0:63:23:75:
                    af:2d:32:eb:8d:35:5d:fa:2c:69:e9:18:a2:5e:4f:
                    ab:3f:00:4e:31:96:be:c3:00:84:0e:4f:17:0e:e3:
                    5c:6a:e1:74:47:1e:df:c3:d1:31:ca:00:c8:cd:ce:
                    03:46:17:54:9a:b5:31:24:ea:a7:8b:63:38:f0:c7:
                    4f:2f:98:32:ab:13:26:1a:64:3d:f3:ab:5b:aa:4e:
                    01:fe:75:00:1a:5d:0f:77:f4:91:ae:ec:6a:10:ad:
                    9f:68:33:07:d6:a6:f6:89:2a:41:25:63:2e:13:8f:
                    49:80:61:ce:90:76:62:e1:90:cd:30:57:95:b4:a2:
                    22:85:5b:e3:3d:0f:2c:4e:22:e9:f6:2b:b3:a0:94:
                    7d:42:76:0e:79:46:d5:c3:23:44:64:92:c0:0c:fa:
                    90:73:b0:fc:3a:9e:b2:c0:3a:1f:40:ed:66:f0:ee:
                    37:8e:83:32:18:ef:e7:ed:4f:ec:c0:d5:08:13:40:
                    fa:92:fd:47:c1:78:6b:98:47:da:22:78:d1:b6:14:
                    52:fa:dd:4b:8d:c2:bc:d1:5e:26:36:42:e7:f9:6c:
                    3e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8C:20:CB:19:A0:83:64:13:CC:58:B4:7C:EB:63:AB:3B:34:B2:AC
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:b8:14:d6:61:3d:7f:bf:29:6b:31:cf:b1:be:be:e7:2d:
         57:f7:99:06:12:b1:e1:eb:5b:96:b5:a4:6c:e1:b6:2e:82:99:
         90:36:be:d1:b4:0c:5f:9b:d7:98:93:b5:5e:9d:11:f1:8b:e0:
         61:c6:17:27:af:c5:16:1a:6d:a9:b8:ab:22:44:f5:7c:1e:89:
         38:fc:1d:6a:8d:67:32:47:11:7c:ba:7e:1f:78:0d:aa:7e:94:
         da:0c:17:3d:31:71:4e:8f:52:b4:89:10:5d:e5:d2:83:b1:12:
         0f:4f:eb:14:54:b3:2c:3d:5d:1c:66:a5:e4:c9:5b:42:ae:d8:
         50:69:96:c5:c9:6b:ad:58:80:d7:d8:b3:df:c3:11:e6:9b:3d:
         d3:80:19:41:8b:36:54:13:3a:0e:f2:74:8d:a0:ff:15:54:45:
         a5:a7:cb:09:10:a9:63:68:3c:77:56:cd:c5:e2:e2:c2:8a:5c:
         14:1d:5f:0e:55:d3:9b:74:d7:02:0d:cc:1a:e9:84:0a:6b:b4:
         55:0e:56:b5:28:f8:6f:1d:a6:2c:ec:a7:25:ad:60:de:e4:6a:
         05:49:03:52:4d:d1:46:bc:ba:8c:2f:e0:74:47:b3:85:a0:dc:
         80:3a:84:72:0a:38:5b:92:27:08:67:72:2f:fe:96:b8:ea:04:
         ac:8e:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:50:26 2025 by rpki-client