Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
File:                     3137302e38302e32372e302f32342d3234203d3e203237393831.roa (raw, json)
Hash identifier:          aYAvg8k10aW9dP7Fj9v8BXd2e7qGtU+OWOAIdESdQlk=
Subject key identifier:   84:71:13:AC:F6:19:DA:F2:F8:EF:E5:40:7A:02:34:95:E7:E4:B4:02
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       11A09C91EF5A33CF2F293050CB96604045DACE4F
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
Signing time:             Tue 04 Feb 2025 18:28:58 +0000
ROA not before:           Tue 04 Feb 2025 18:23:58 +0000
ROA not after:            Tue 03 Feb 2026 18:28:58 +0000
asID:                     27981
IP address blocks:        170.80.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 21 Apr 2025 06:57:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a0:9c:91:ef:5a:33:cf:2f:29:30:50:cb:96:60:40:45:da:ce:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Feb  4 18:23:58 2025 GMT
            Not After : Feb  3 18:28:58 2026 GMT
        Subject: CN=847113ACF619DAF2F8EFE5407A023495E7E4B402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1a:71:20:69:75:c4:f6:34:5c:2a:70:e6:22:
                    4e:87:c3:ed:77:48:f6:7d:1a:3d:c0:73:e7:8e:21:
                    1b:8b:be:cf:c1:96:79:7a:44:c8:21:57:36:87:4d:
                    24:88:19:e6:4b:d8:3b:da:0f:38:69:bd:77:69:70:
                    9f:f7:dc:66:f9:cd:9a:07:19:95:7f:dc:c3:e3:b5:
                    df:21:3f:20:04:ab:d6:00:db:9c:b5:d7:1e:8a:42:
                    39:07:9d:86:7c:b8:81:ec:69:13:4d:5c:06:a4:38:
                    36:87:03:77:50:43:61:98:0d:61:b6:10:6a:a0:b3:
                    ce:07:69:5f:93:45:b9:d9:cb:84:e5:bf:c2:57:c9:
                    ef:84:ea:1e:ca:29:e6:bf:00:fc:5b:51:2a:d2:d0:
                    92:2a:7d:03:d1:ad:07:4f:9b:7d:16:fa:e9:67:f0:
                    06:26:a0:75:94:aa:8a:94:d7:5a:19:8c:83:05:e3:
                    7c:59:b8:50:da:ec:d1:5c:49:f2:04:0d:29:54:9d:
                    4d:9d:91:62:92:80:0c:b2:4e:28:ba:19:86:2b:45:
                    f3:13:06:7d:27:cd:e4:a6:b4:68:bb:f8:8c:db:5b:
                    b8:66:30:67:60:71:38:3e:b6:3a:53:94:81:39:3c:
                    46:71:6c:4f:2a:cb:2b:24:4b:f0:3f:e2:66:73:a7:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:71:13:AC:F6:19:DA:F2:F8:EF:E5:40:7A:02:34:95:E7:E4:B4:02
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:aa:87:e8:5f:5e:a2:51:4c:30:35:10:37:85:ac:d3:7c:89:
         a3:ac:5b:58:10:e2:8c:24:89:2b:3a:a1:04:5e:cb:72:57:89:
         14:2b:11:b0:d7:da:ef:4f:bb:c7:ed:83:d3:fa:9b:06:2a:40:
         cc:04:7d:d4:b9:ff:61:93:c8:fe:19:9e:83:e2:fa:17:02:a2:
         ff:04:96:76:d7:2b:6e:27:fe:b4:6c:06:04:ef:1f:7b:73:48:
         98:ea:6f:57:91:6c:c7:70:c3:85:6c:d6:0e:78:21:5e:6c:bc:
         19:0a:ed:b8:09:b4:82:01:50:0d:80:54:63:af:98:78:33:04:
         cf:cc:6c:13:66:8b:91:20:0e:94:30:40:be:d9:99:6b:aa:f5:
         08:d6:69:23:72:34:d3:31:4c:83:0c:47:cb:46:e9:30:e6:77:
         44:a5:0e:f1:56:0b:6d:78:3a:6c:0f:ff:5f:b9:be:ae:da:b8:
         f1:47:5f:41:44:1f:1c:6f:72:84:00:9c:77:33:c7:1d:95:e9:
         1c:fc:2f:49:af:10:82:99:d7:4e:d6:1f:90:9a:b3:d4:99:8a:
         93:12:90:e0:30:c6:9b:bb:b7:df:a7:09:49:be:15:16:31:a2:
         82:54:f1:c7:08:83:4e:41:40:51:c2:cc:05:b2:39:a2:32:d3:
         33:32:5d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:10:32 2025 by rpki-client