Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/3137302e3234362e37362e302f32342d3234203d3e20323731383030.roa
File:                     3137302e3234362e37362e302f32342d3234203d3e20323731383030.roa (raw, json)
Hash identifier:          P85Uh2fyvHQSNkOGRG6nIAViKSi+o/5aK3OZvjE9Ob0=
Subject key identifier:   6B:BA:6C:6E:11:3E:59:52:BC:96:E3:8A:85:74:7A:96:85:11:C4:2D
Certificate issuer:       /CN=EFEC1F71901093BE10F8A9C43178E450092636F0
Certificate serial:       7A450A5E6F919B822E0F83672B2556986A7B828A
Authority key identifier: EF:EC:1F:71:90:10:93:BE:10:F8:A9:C4:31:78:E4:50:09:26:36:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFEC1F71901093BE10F8A9C43178E450092636F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/3137302e3234362e37362e302f32342d3234203d3e20323731383030.roa
Signing time:             Tue 04 Feb 2025 18:35:26 +0000
ROA not before:           Tue 04 Feb 2025 18:30:26 +0000
ROA not after:            Tue 03 Feb 2026 18:35:26 +0000
asID:                     271800
IP address blocks:        170.246.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/EFEC1F71901093BE10F8A9C43178E450092636F0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/EFEC1F71901093BE10F8A9C43178E450092636F0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFEC1F71901093BE10F8A9C43178E450092636F0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:44:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:45:0a:5e:6f:91:9b:82:2e:0f:83:67:2b:25:56:98:6a:7b:82:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFEC1F71901093BE10F8A9C43178E450092636F0
        Validity
            Not Before: Feb  4 18:30:26 2025 GMT
            Not After : Feb  3 18:35:26 2026 GMT
        Subject: CN=6BBA6C6E113E5952BC96E38A85747A968511C42D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:60:67:d7:7f:47:16:fd:cc:95:ad:9e:dd:e4:
                    39:1a:e2:d9:ae:80:51:54:7c:a0:75:df:35:34:3e:
                    1a:d4:89:b7:12:c2:af:3a:b7:f3:0e:1c:9d:eb:3e:
                    d8:4c:f3:c6:e1:50:4a:e1:d7:59:2d:9f:a1:7d:75:
                    de:b6:52:66:bc:d4:d2:66:c8:2c:47:71:11:6b:81:
                    c4:a0:de:02:28:6f:fe:6e:f2:b5:7f:4a:7b:a1:aa:
                    98:8e:c2:d6:9a:00:22:58:0a:32:f8:51:b5:9d:26:
                    ea:cb:a1:fa:7c:3d:8a:6e:d3:0e:07:fd:8b:01:ed:
                    c3:3e:9d:2a:51:ac:f7:5a:48:2c:aa:b6:d9:0b:db:
                    33:34:b8:79:0f:ec:68:cc:6d:f4:76:47:97:e9:5e:
                    b2:7a:f2:a9:11:09:1d:22:a3:44:06:36:74:b2:e5:
                    39:9b:01:e7:11:13:43:e0:19:fe:77:c8:ac:07:70:
                    2f:82:db:54:d6:38:ae:b3:3c:70:f5:ea:44:b8:a6:
                    e2:f6:76:38:bd:f1:9c:85:d1:31:c7:ff:b8:6f:c6:
                    a8:fd:56:0d:11:a9:bd:e8:ca:f3:e2:67:11:6b:4c:
                    b4:7d:34:f4:e6:15:f4:85:bd:0f:47:ef:cf:6e:8f:
                    fa:16:0a:27:5d:ae:f6:90:a5:91:bc:7e:d5:4c:cb:
                    96:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:BA:6C:6E:11:3E:59:52:BC:96:E3:8A:85:74:7A:96:85:11:C4:2D
            X509v3 Authority Key Identifier:
                keyid:EF:EC:1F:71:90:10:93:BE:10:F8:A9:C4:31:78:E4:50:09:26:36:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/EFEC1F71901093BE10F8A9C43178E450092636F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EFEC1F71901093BE10F8A9C43178E450092636F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CEC22043EF7603BCBCC7C1892A9D6F43489EE3AC66E77385CC83853E78C61778/0/3137302e3234362e37362e302f32342d3234203d3e20323731383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:15:5f:a5:28:b3:9c:66:65:30:6a:0d:71:e1:a3:b3:d6:
         f1:76:22:32:6a:8f:9c:fe:4d:09:71:ef:3b:95:05:17:8f:21:
         73:ac:f7:00:10:5c:7c:2a:7f:08:d9:e4:d8:07:43:b0:6e:4f:
         9d:76:68:34:3e:9c:51:69:8f:38:79:a0:5b:fc:2d:86:b1:65:
         da:18:b5:bf:58:18:6e:d1:65:62:a1:41:2b:f6:fd:73:5c:d3:
         0f:db:16:84:09:95:e0:56:4a:a9:34:37:fb:cd:d0:56:40:84:
         ee:ee:ee:d5:6a:6b:2a:db:4b:fb:e3:12:a3:e4:e7:66:4c:dd:
         e6:84:ca:83:cf:cf:8c:59:65:05:df:07:49:78:38:a4:bf:c7:
         f3:b5:e8:a4:fc:d7:ce:db:7d:f7:d5:1e:8d:ed:9b:92:89:bd:
         c9:21:ad:36:8e:85:76:7f:12:a5:be:59:91:37:fd:9c:8f:7d:
         78:b5:0e:1c:dd:f4:b2:3a:a7:0d:71:1f:4e:ab:32:ff:82:f8:
         8a:70:b5:ca:0b:aa:52:eb:93:cc:64:2f:00:f6:04:66:5c:ab:
         72:67:b7:2f:0f:0f:bf:89:e9:ee:6d:61:88:72:17:2b:6e:73:
         af:43:3e:f8:07:37:bc:27:27:30:51:c5:bd:90:d8:bd:64:70:
         9a:dc:af:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:07:30 2025 by rpki-client