Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137302e37382e3130382e302f32322d3234203d3e203237393535.roa
File:                     3137302e37382e3130382e302f32322d3234203d3e203237393535.roa (raw, json)
Hash identifier:          SpFeC1tUlXpvwVyRQvzm4ypCrUtpNDCuKrU7+T+nYlg=
Subject key identifier:   18:13:1B:0F:7C:F1:1F:0A:12:B8:13:05:64:98:D7:EB:77:B4:60:4D
Certificate issuer:       /CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
Certificate serial:       35C40EC7C29E76E902E536567B329202E7D9B001
Authority key identifier: 93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137302e37382e3130382e302f32322d3234203d3e203237393535.roa
Signing time:             Tue 04 Feb 2025 18:44:07 +0000
ROA not before:           Tue 04 Feb 2025 18:39:07 +0000
ROA not after:            Tue 03 Feb 2026 18:44:07 +0000
asID:                     27955
IP address blocks:        170.78.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:c4:0e:c7:c2:9e:76:e9:02:e5:36:56:7b:32:92:02:e7:d9:b0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF
        Validity
            Not Before: Feb  4 18:39:07 2025 GMT
            Not After : Feb  3 18:44:07 2026 GMT
        Subject: CN=18131B0F7CF11F0A12B813056498D7EB77B4604D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:cb:13:df:e0:d1:76:90:61:1e:a2:c5:2e:
                    2a:e7:d9:12:15:7a:06:c2:05:df:22:ee:b5:53:bb:
                    21:d8:f9:be:44:39:25:ba:0a:5a:a5:ca:e5:1b:43:
                    9b:ed:cb:a6:40:67:2b:d5:e3:4b:f2:91:40:83:43:
                    05:c2:9c:d8:8f:73:e6:8a:04:56:13:5a:ed:f6:5d:
                    01:2e:ce:2e:da:24:ce:c9:ee:e6:90:0e:8a:2f:5b:
                    6d:22:46:d8:5f:be:d9:a3:fa:e3:0c:88:a6:3f:a0:
                    be:22:05:cf:dc:15:d0:7f:50:bd:ad:2c:e7:5c:1d:
                    44:a0:21:42:ad:23:10:ca:12:0e:e7:ba:ee:b1:64:
                    b4:50:e4:5c:80:ba:a8:5d:51:6c:22:52:39:1d:84:
                    fc:7d:e0:ed:b8:85:ae:d9:d1:9b:24:4b:19:00:3b:
                    90:d0:2a:bd:60:9b:c9:65:19:dc:1c:0e:e8:7f:be:
                    8e:59:a7:c7:3d:e5:f2:a2:09:e2:13:6b:a7:e8:86:
                    e4:e0:75:c4:f8:f6:58:94:ba:fe:03:84:d9:b2:94:
                    26:84:13:fd:ad:7e:47:e5:25:2b:38:fa:97:b1:82:
                    b1:41:35:f3:45:dc:09:a4:42:8b:66:ca:15:16:29:
                    2f:54:f2:f5:53:e2:dd:a2:f7:17:90:99:d5:10:48:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:13:1B:0F:7C:F1:1F:0A:12:B8:13:05:64:98:D7:EB:77:B4:60:4D
            X509v3 Authority Key Identifier:
                keyid:93:B7:4A:06:A1:C4:2F:54:A9:33:B7:0E:1A:98:A7:FF:FD:7D:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93B74A06A1C42F54A933B70E1A98A7FFFD7D8DCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C82A08B9FC1AC118692DD0F3F1AB1B4748C25BDA8551D63C2E8946A37B2B996C/0/3137302e37382e3130382e302f32322d3234203d3e203237393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:88:97:f3:c7:30:ed:ef:1a:c5:3a:70:8f:2b:37:db:b1:39:
         9c:5b:87:49:02:f9:36:20:e6:01:22:da:f6:8a:2b:31:ba:d8:
         7e:53:4a:ea:65:d7:ae:26:33:ef:9f:93:6e:0f:77:28:95:c8:
         a7:bb:27:21:50:f4:cf:b5:a3:a9:b6:ff:89:f3:e3:5b:f0:46:
         6a:b3:64:79:2d:e2:2c:5f:3e:21:a5:a7:a1:45:76:01:eb:15:
         43:80:c5:d2:ba:35:c1:28:0c:d5:f0:77:e2:ae:70:8d:6e:af:
         7f:e9:dd:af:c8:0c:30:c9:47:22:2f:91:99:31:99:c0:2f:03:
         03:18:89:1d:8d:bc:a4:06:c9:14:2e:b8:f1:0b:67:bd:15:80:
         51:79:83:e6:f4:c4:ff:a6:66:8a:22:79:9f:46:3d:f3:20:f4:
         d2:d5:96:9e:0b:4f:6f:26:75:6a:64:2f:18:e2:fc:e8:3d:1b:
         ce:18:2a:27:73:7b:b3:fd:d8:2e:35:8f:a6:81:92:69:65:6d:
         e3:32:09:04:fc:1b:1d:82:fa:ca:a1:cf:3b:a8:ea:69:60:5b:
         a8:98:d5:0e:ba:c9:b5:b1:35:4d:3e:46:88:be:7f:bd:d7:2f:
         57:7e:2c:59:27:66:50:a5:b7:e2:15:51:04:6a:c5:04:65:8b:
         71:68:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 14:44:58 2025 by rpki-client