Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa
File:                     3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa (raw, json)
Hash identifier:          vfz3Kgwczk830jKezY7y6SkOl/KZJQIvFagjuHlm78M=
Subject key identifier:   9F:E7:D0:C3:32:C4:21:D0:8A:6A:38:65:9B:D7:4F:4E:7F:B7:87:E7
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       2B87F7505F66FC6E2CB7017F658E7F27D2CDC673
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa
Signing time:             Tue 04 Feb 2025 20:04:48 +0000
ROA not before:           Tue 04 Feb 2025 19:59:48 +0000
ROA not after:            Tue 03 Feb 2026 20:04:48 +0000
asID:                     264746
IP address blocks:        170.254.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 18:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:87:f7:50:5f:66:fc:6e:2c:b7:01:7f:65:8e:7f:27:d2:cd:c6:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Feb  4 19:59:48 2025 GMT
            Not After : Feb  3 20:04:48 2026 GMT
        Subject: CN=9FE7D0C332C421D08A6A38659BD74F4E7FB787E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:83:3f:ed:2d:d4:a3:6e:30:b9:ac:30:12:
                    0e:fe:dc:ae:85:7a:91:26:ad:ba:63:fd:7e:ce:f3:
                    93:a9:9c:d7:52:97:b0:37:80:ce:7e:41:da:c4:a1:
                    c0:fa:9f:bf:ac:a9:ff:02:78:f5:ef:d7:b8:d4:ff:
                    c4:3c:0d:e9:08:f4:a5:f9:9f:c7:ba:ba:f5:ca:f3:
                    75:d4:3c:95:3b:0f:9e:2a:88:f1:87:9b:f9:16:7f:
                    14:39:ec:ff:ac:c7:b1:81:2d:0f:13:db:71:98:05:
                    cf:64:e3:84:04:e2:fd:00:61:c4:24:5d:2a:05:5d:
                    e7:ba:7b:20:8c:f7:9d:2c:77:f2:be:ba:fa:8d:fe:
                    80:52:eb:cd:3e:a1:e8:07:5e:67:00:c2:44:31:22:
                    a5:e6:d2:b2:6c:9b:6a:c3:de:e2:76:c3:38:3d:f5:
                    d0:d5:c8:04:82:56:52:a3:e5:7e:14:c0:39:9c:9d:
                    c5:90:bc:e1:59:c4:6b:f0:fc:15:16:c3:b3:e0:6e:
                    66:56:27:95:e9:54:e1:bf:95:b3:ee:88:66:81:37:
                    8e:72:0e:86:bb:85:31:e4:f5:98:46:e9:67:64:07:
                    3f:6a:cf:95:24:8b:aa:5f:aa:d0:1c:02:2b:0d:83:
                    eb:54:72:4d:9d:b8:ed:6b:b5:12:9e:ef:81:2c:97:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E7:D0:C3:32:C4:21:D0:8A:6A:38:65:9B:D7:4F:4E:7F:B7:87:E7
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33302e302f32342d3234203d3e20323634373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:3f:26:50:87:f0:00:92:97:f5:72:cd:8c:4b:5e:54:8b:
         28:e9:5f:73:fb:bd:2f:d2:e3:b4:b9:64:b1:9b:92:43:c0:05:
         98:d4:17:59:dd:dc:f6:94:5e:28:6e:e2:c6:1c:ac:2a:87:ce:
         6b:c7:28:9e:99:3e:0b:b5:15:b1:f3:47:24:c2:dd:da:59:7a:
         be:c8:f7:43:fe:61:e5:91:40:9f:a0:a1:25:64:49:32:17:26:
         10:15:53:ed:98:84:96:a1:33:15:dc:24:c9:bd:aa:b7:fb:6d:
         05:17:58:c3:65:65:3e:59:98:48:4c:32:61:d1:8e:5f:76:4a:
         aa:fe:87:f8:49:71:81:54:73:ea:83:d0:4a:b5:ab:e9:37:8e:
         7f:63:7c:7a:9d:1c:0e:5b:5f:a5:a7:39:31:e0:d5:b8:c3:8b:
         2d:6c:9d:ea:d4:e7:34:80:50:05:fc:aa:9c:aa:91:ea:70:36:
         42:47:b6:07:8f:a6:5b:9d:1f:11:f4:46:2d:fe:a1:57:e8:73:
         77:b5:a4:ac:a7:eb:aa:2d:84:5e:00:73:a7:47:ea:79:8e:a9:
         3e:51:3d:6e:b9:39:28:62:59:91:2a:e1:f2:09:2e:61:58:64:
         8a:cc:40:1a:bb:0a:e1:05:cc:03:60:63:c2:ac:e8:10:ea:6d:
         46:19:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:57:56 2025 by rpki-client