Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32362e302f32342d3234203d3e203237393831.roa
File:                     3137302e38302e32362e302f32342d3234203d3e203237393831.roa (raw, json)
Hash identifier:          4tmxWgje/NssD+wMjdRqU4gBrg30gFk5YFsKou8Il4o=
Subject key identifier:   62:B6:13:3C:75:F9:AD:19:25:43:6D:06:B3:10:52:BE:3C:17:70:E9
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       45CD5621735AD6853E472ADA09C50DC061C75687
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32362e302f32342d3234203d3e203237393831.roa
Signing time:             Tue 04 Feb 2025 18:28:57 +0000
ROA not before:           Tue 04 Feb 2025 18:23:57 +0000
ROA not after:            Tue 03 Feb 2026 18:28:57 +0000
asID:                     27981
IP address blocks:        170.80.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:cd:56:21:73:5a:d6:85:3e:47:2a:da:09:c5:0d:c0:61:c7:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Feb  4 18:23:57 2025 GMT
            Not After : Feb  3 18:28:57 2026 GMT
        Subject: CN=62B6133C75F9AD1925436D06B31052BE3C1770E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:39:4b:e0:d0:81:2b:6f:89:58:29:ce:13:
                    e4:4e:a4:62:47:c6:1e:86:09:5d:8f:b7:2f:ea:d2:
                    78:b8:ed:96:9e:d6:4f:22:e4:b2:0c:cd:51:50:5e:
                    4a:cd:62:e9:11:f0:d4:1b:52:d0:92:06:c0:f2:f1:
                    b8:c3:ba:70:33:17:84:44:cc:64:2f:5d:3a:06:47:
                    57:ba:07:0c:2c:dd:3b:f6:57:17:f6:9c:11:89:b5:
                    f2:1d:52:ac:53:f5:75:93:68:6e:03:e6:74:45:ca:
                    ca:02:fa:08:1a:f6:0a:92:83:bb:54:48:95:7c:f1:
                    8a:28:38:94:1b:0f:8d:5f:16:7a:cb:12:f9:36:5d:
                    91:56:68:1c:9e:04:15:62:a3:9f:58:4b:7b:52:00:
                    de:d1:c1:53:87:ec:62:d4:45:e7:24:d8:74:18:54:
                    63:16:86:8f:79:a0:18:57:13:58:be:1b:10:85:2e:
                    2f:fa:a5:bd:de:05:bf:6c:68:12:04:e7:ad:ed:bc:
                    ed:d8:7a:b6:a6:20:af:9d:10:f8:4b:c8:41:c8:93:
                    e1:da:2f:38:09:a4:7d:8a:8e:d2:70:b6:6b:65:1c:
                    e3:d0:52:0a:02:93:db:0a:db:07:c1:22:48:23:c2:
                    56:71:5e:75:05:7f:9f:92:b9:ff:6e:ae:95:f4:b1:
                    f7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B6:13:3C:75:F9:AD:19:25:43:6D:06:B3:10:52:BE:3C:17:70:E9
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32362e302f32342d3234203d3e203237393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:24:94:5a:0a:c7:c4:f1:90:18:e0:9f:9d:e1:0a:60:6e:bb:
         38:13:9d:89:41:9a:4e:20:cd:af:f4:3d:82:5e:18:2d:82:44:
         e6:55:df:a0:bc:c5:a6:24:de:ab:a4:4a:5e:91:84:0d:fb:ff:
         06:2b:53:cc:a2:e4:56:9c:18:eb:88:77:26:0e:b4:f7:e8:2f:
         c2:08:50:36:18:0a:98:ef:11:7b:e4:06:16:c4:0f:67:75:eb:
         2f:97:5e:1e:41:47:79:b1:50:8d:c1:c5:09:55:f0:25:8e:ac:
         d6:db:e8:60:bd:05:d8:f5:35:43:50:0b:70:b7:8f:86:66:e8:
         4b:03:8d:4f:71:6e:f7:1f:2c:78:1f:20:9b:b0:9b:06:c7:23:
         b8:40:93:48:f8:a1:4c:db:4f:1f:72:7f:ec:4d:2c:1b:31:d8:
         83:9a:45:94:08:a6:96:aa:53:31:3e:8c:a6:74:57:ad:27:9d:
         4f:2c:e3:a3:22:01:24:c8:9b:3c:73:db:c3:25:f6:54:d7:45:
         33:41:84:3a:93:5d:be:f4:cf:ae:da:52:5b:9d:f2:38:90:80:
         4e:d6:57:93:37:87:62:78:eb:91:af:9f:18:ad:db:f8:a1:64:
         c4:2c:49:84:cc:1a:f4:b9:1d:9b:e8:0c:94:54:b0:f8:5a:f6:
         21:c2:f6:6f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIURc1WIXNa1oU+RyraCcUNwGHHVocwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3RjJFQjc2QTA1QTk1MjYyNUNCOTJFQTQwRDIzOENB
MzQ4RjcxODAeFw0yNTAyMDQxODIzNTdaFw0yNjAyMDMxODI4NTdaMDMxMTAvBgNV
BAMTKDYyQjYxMzNDNzVGOUFEMTkyNTQzNkQwNkIzMTA1MkJFM0MxNzcwRTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ujlL4NCBK2+JWCnOE+ROpGJH
xh6GCV2Pty/q0ni47Zae1k8i5LIMzVFQXkrNYukR8NQbUtCSBsDy8bjDunAzF4RE
zGQvXToGR1e6Bwws3Tv2Vxf2nBGJtfIdUqxT9XWTaG4D5nRFysoC+gga9gqSg7tU
SJV88YooOJQbD41fFnrLEvk2XZFWaByeBBVio59YS3tSAN7RwVOH7GLUReck2HQY
VGMWho95oBhXE1i+GxCFLi/6pb3eBb9saBIE563tvO3YeramIK+dEPhLyEHIk+Ha
LzgJpH2KjtJwtmtlHOPQUgoCk9sK2wfBIkgjwlZxXnUFf5+Suf9urpX0sfcLAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUYrYTPHX5rRklQ20GsxBSvjwXcOkwHwYDVR0j
BBgwFoAUnn8ut2oFqVJiXLkupA0jjKNI9xgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjdCOEI0QjRFNkU4QzQzNzIyRTk1OEYwMzcwNDZCODlF
OUUyN0YwREYyQUEwOEVCM0RGRDlEQ0NFQ0YxMjQ3LzAvOUU3RjJFQjc2QTA1QTk1
MjYyNUNCOTJFQTQwRDIzOENBMzQ4RjcxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTdGMkVCNzZBMDVBOTUyNjI1
Q0I5MkVBNDBEMjM4Q0EzNDhGNzE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI3QjhCNEI0RTZFOEM0MzcyMkU5NThGMDM3MDQ2Qjg5RTlFMjdGMERG
MkFBMDhFQjNERkQ5RENDRUNGMTI0Ny8wLzMxMzczMDJlMzgzMDJlMzIzNjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACqUBowDQYJ
KoZIhvcNAQELBQADggEBACUklFoKx8TxkBjgn53hCmBuuzgTnYlBmk4gza/0PYJe
GC2CROZV36C8xaYk3qukSl6RhA37/wYrU8yi5FacGOuIdyYOtPfoL8IIUDYYCpjv
EXvkBhbED2d16y+XXh5BR3mxUI3BxQlV8CWOrNbb6GC9Bdj1NUNQC3C3j4Zm6EsD
jU9xbvcfLHgfIJuwmwbHI7hAk0j4oUzbTx9yf+xNLBsx2IOaRZQIppaqUzE+jKZ0
V60nnU8s46MiASTImzxz28Ml9lTXRTNBhDqTXb70z67aUlud8jiQgE7WV5M3h2J4
65Gvnxit2/ihZMQsSYTMGvS5HZvoDJRUsPha9iHC9m8=
-----END CERTIFICATE-----
Generated at Thu Apr 17 17:10:31 2025 by rpki-client