Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
File:                     3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa (raw, json)
Hash identifier:          huxnklGUCNvAXIg/+A3qeLshDML+/JtK62hQSFyFuZM=
Subject key identifier:   4C:8F:A9:83:BB:18:A2:3A:C1:07:3B:29:44:27:44:47:76:99:83:9F
Certificate issuer:       /CN=642B1C614F26920467439813FA812417800268E7
Certificate serial:       4A1C2AC63F3A602E0D48BA808170AAF8329C154D
Authority key identifier: 64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
Signing time:             Tue 04 Feb 2025 19:57:49 +0000
ROA not before:           Tue 04 Feb 2025 19:52:49 +0000
ROA not after:            Tue 03 Feb 2026 19:57:49 +0000
asID:                     269803
IP address blocks:        170.81.240.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1c:2a:c6:3f:3a:60:2e:0d:48:ba:80:81:70:aa:f8:32:9c:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642B1C614F26920467439813FA812417800268E7
        Validity
            Not Before: Feb  4 19:52:49 2025 GMT
            Not After : Feb  3 19:57:49 2026 GMT
        Subject: CN=4C8FA983BB18A23AC1073B29442744477699839F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:61:cc:15:fb:a4:3c:a1:bd:32:d7:7e:70:
                    31:7c:fc:7d:34:44:a9:66:e3:a9:65:61:9a:c2:b5:
                    5f:9c:15:68:83:a0:bc:cb:0c:d7:4d:ff:4b:be:94:
                    bd:42:14:68:91:b6:90:c1:cf:8e:f5:b9:9d:20:fa:
                    0d:8a:96:4b:1b:92:39:53:14:c8:bb:3d:50:07:08:
                    05:6f:e3:10:a4:63:24:58:4b:f0:c7:84:2c:b4:25:
                    a5:24:e2:30:2c:32:c2:db:94:08:5f:7f:2c:63:c6:
                    17:70:4b:f0:46:10:61:84:2e:22:f0:21:63:e3:84:
                    20:23:fe:ad:a0:82:d6:ea:64:a6:45:c3:67:0f:e5:
                    04:a4:57:dd:e5:22:cc:af:11:3d:fc:6c:8c:34:c7:
                    03:4a:ac:06:db:8d:e3:05:4e:ca:b2:52:71:df:83:
                    20:68:6e:d6:82:f2:dd:ef:98:8d:9f:21:e2:9b:bd:
                    91:4e:6a:0d:db:03:a1:a5:bd:e3:36:55:46:22:37:
                    f4:af:a2:2d:4c:50:5f:8f:9d:e1:e5:2c:94:dd:4b:
                    b2:63:fb:d1:fd:0d:a4:57:57:71:02:d3:a5:17:b0:
                    9b:88:ab:11:62:68:f5:d0:95:89:2a:bf:dd:a0:87:
                    31:d8:23:d5:51:c6:9a:29:f1:5a:e4:ff:e0:d2:3a:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:8F:A9:83:BB:18:A2:3A:C1:07:3B:29:44:27:44:47:76:99:83:9F
            X509v3 Authority Key Identifier:
                keyid:64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:d3:99:b7:4f:6e:f4:90:63:26:5e:bb:cc:95:54:97:2f:d7:
         70:0a:db:78:41:ed:c9:aa:64:02:68:05:ca:60:c4:6e:cf:0f:
         0e:29:6e:cd:4e:da:74:f7:03:c0:1f:92:80:ba:12:0c:e2:61:
         88:78:96:09:88:2a:bc:56:3a:e8:44:9b:d2:cb:a1:77:f0:d9:
         c9:dd:5b:f9:58:f8:73:b8:7b:91:ec:dc:1a:ad:3b:fb:26:f3:
         b1:46:15:c2:fe:97:bf:6d:f5:5f:f0:3f:b8:20:f8:70:14:35:
         92:b3:bf:6a:ff:60:82:0e:fc:b9:72:cf:16:06:e3:41:0d:4a:
         5b:ea:20:39:0e:fe:6f:5c:0f:18:80:8f:41:96:e7:c8:93:93:
         8e:78:e6:4b:ce:9f:ce:02:71:6b:85:ea:c8:b2:25:02:3c:9f:
         a2:8f:aa:82:df:e3:77:4f:e0:1a:99:bf:46:58:de:08:ea:ae:
         5b:12:b0:89:6f:03:02:f5:96:86:78:67:01:d0:fb:70:10:34:
         18:25:64:68:4a:65:42:af:83:de:2a:db:20:1e:b4:5f:f2:70:
         e2:03:8f:9e:d0:f3:1b:39:a9:06:2e:dd:c0:49:cf:11:91:cb:
         db:e0:d8:21:9d:5c:45:bf:17:20:2d:7c:8e:dc:01:b1:17:44:
         66:08:f9:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:42:51 2025 by rpki-client