Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33312e302f32342d3234203d3e20323634373436.roa
File:                     3137302e3235342e33312e302f32342d3234203d3e20323634373436.roa (raw, json)
Hash identifier:          Xcvwb5C69wd8+cTFP+REo049hKFB8tFmN8QdUqKJu5s=
Subject key identifier:   D1:3E:73:93:48:AE:1B:D1:E8:26:FA:49:D0:FE:44:0F:56:42:7F:24
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       6445DED473723B098EE8DB675E8FE5A412D9B0DE
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33312e302f32342d3234203d3e20323634373436.roa
Signing time:             Tue 04 Feb 2025 20:04:51 +0000
ROA not before:           Tue 04 Feb 2025 19:59:51 +0000
ROA not after:            Tue 03 Feb 2026 20:04:51 +0000
asID:                     264746
IP address blocks:        170.254.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:45:de:d4:73:72:3b:09:8e:e8:db:67:5e:8f:e5:a4:12:d9:b0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Feb  4 19:59:51 2025 GMT
            Not After : Feb  3 20:04:51 2026 GMT
        Subject: CN=D13E739348AE1BD1E826FA49D0FE440F56427F24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:24:3c:ad:94:c7:fd:26:64:e3:3c:cf:c5:
                    8c:77:b3:b1:d4:f8:8e:61:f9:16:19:82:0d:8f:83:
                    e7:86:28:c6:a9:a5:58:78:b1:54:f5:e0:4e:c4:72:
                    ed:6b:24:71:8e:7d:e9:4b:77:f7:9d:a5:91:42:a3:
                    77:1a:39:af:1d:cc:e2:00:be:52:f0:8e:b5:5c:d8:
                    5b:95:92:a9:e8:f7:20:1c:fe:09:f9:b9:bc:73:1a:
                    2b:89:19:00:f6:38:8c:15:c2:91:2e:93:2d:ab:77:
                    7b:16:a0:96:c4:db:70:d9:52:24:96:a8:30:56:cd:
                    a0:ea:f0:de:f8:0d:d8:63:e4:7f:29:f3:72:98:5d:
                    ae:69:a8:b7:08:77:c7:ff:7e:18:42:7e:6a:df:fc:
                    49:96:15:f4:a5:57:a0:b8:74:2a:ca:66:e7:c8:5f:
                    f7:8b:f6:b3:45:31:f5:27:39:5b:a3:04:07:d6:cb:
                    59:8e:02:db:89:2e:de:88:62:87:04:3b:6c:3a:09:
                    86:b0:10:4d:ac:63:71:96:61:1f:eb:d1:35:83:08:
                    93:f7:77:7d:4a:3c:ee:43:69:7b:0a:c5:c5:58:c0:
                    41:2f:c8:83:e0:76:42:38:17:5c:cd:95:b7:b8:47:
                    bd:ec:f1:3e:43:8b:26:72:6f:2a:4f:d4:d7:60:5d:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3E:73:93:48:AE:1B:D1:E8:26:FA:49:D0:FE:44:0F:56:42:7F:24
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e33312e302f32342d3234203d3e20323634373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d1:0c:de:94:4d:ae:b4:33:53:72:01:fe:40:71:bf:01:3d:
         8e:4c:5d:51:ba:cb:d9:12:f5:f8:87:a8:5b:b3:df:01:c6:f2:
         d9:9c:e7:e4:df:fc:a2:d5:89:ec:3f:70:a2:41:77:8b:4c:95:
         70:b1:9a:23:18:b0:15:30:e7:6a:80:ba:ed:02:90:21:bb:e3:
         2b:3a:0c:c7:f8:ea:b8:5e:cd:e2:f6:4d:37:e5:5a:69:ee:9c:
         70:c1:77:06:da:b4:43:8c:87:a6:dd:ea:2e:45:a7:81:ce:7d:
         ae:1f:8c:ac:3f:d7:05:db:1f:2b:37:5c:09:c7:ed:e9:b1:2f:
         e1:29:1a:13:7f:bd:f7:09:0b:cc:d1:5e:ee:72:ac:3d:4b:f5:
         f9:bc:e6:ad:84:fa:b3:44:f3:8c:a9:60:14:32:8f:f7:4d:60:
         10:d3:37:1d:45:0b:9e:f7:1f:c2:50:4f:3e:1f:d5:b3:00:c2:
         de:9d:27:03:43:95:ed:a2:02:2f:e6:32:e2:54:7f:c5:73:a4:
         ef:db:1f:c2:8d:f8:3f:0c:f8:33:56:8a:a8:e9:68:4a:f2:a1:
         7f:1b:cc:95:9e:3e:0d:18:f7:c9:a2:6f:fb:37:f7:b0:1f:27:
         d7:21:48:a0:d2:78:bf:e4:cd:a9:60:cf:a5:ad:ef:75:a7:91:
         d7:94:7c:4a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZEXe1HNyOwmO6NtnXo/lpBLZsN4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0RjAzQzU3NzBDN0JBMzk5MTI4MTMzNjdCNUU4Njgw
MDVDQ0Q5OTAeFw0yNTAyMDQxOTU5NTFaFw0yNjAyMDMyMDA0NTFaMDMxMTAvBgNV
BAMTKEQxM0U3MzkzNDhBRTFCRDFFODI2RkE0OUQwRkU0NDBGNTY0MjdGMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNpiQ8rZTH/SZk4zzPxYx3s7HU
+I5h+RYZgg2Pg+eGKMappVh4sVT14E7Ecu1rJHGOfelLd/edpZFCo3caOa8dzOIA
vlLwjrVc2FuVkqno9yAc/gn5ubxzGiuJGQD2OIwVwpEuky2rd3sWoJbE23DZUiSW
qDBWzaDq8N74Ddhj5H8p83KYXa5pqLcId8f/fhhCfmrf/EmWFfSlV6C4dCrKZufI
X/eL9rNFMfUnOVujBAfWy1mOAtuJLt6IYocEO2w6CYawEE2sY3GWYR/r0TWDCJP3
d31KPO5DaXsKxcVYwEEvyIPgdkI4F1zNlbe4R73s8T5DiyZybypP1NdgXfoPAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU0T5zk0iuG9HoJvpJ0P5ED1ZCfyQwHwYDVR0j
BBgwFoAU308DxXcMe6OZEoEzZ7XoaABczZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDhEOTMzNjgyRjY4OEVEOEMzNkQwRkMxRjM0QjY4MzE1
MDUzRDNGMzcxRjY4NEI5QTM4N0E1RkE2NzA5RjE3LzAvREY0RjAzQzU3NzBDN0JB
Mzk5MTI4MTMzNjdCNUU4NjgwMDVDQ0Q5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjRGMDNDNTc3MEM3QkEzOTkx
MjgxMzM2N0I1RTg2ODAwNUNDRDk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTA4RDkzMzY4MkY2ODhFRDhDMzZEMEZDMUYzNEI2ODMxNTA1M0QzRjM3
MUY2ODRCOUEzODdBNUZBNjcwOUYxNy8wLzMxMzczMDJlMzIzNTM0MmUzMzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczNDM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqv4f
MA0GCSqGSIb3DQEBCwUAA4IBAQAD0QzelE2utDNTcgH+QHG/AT2OTF1RusvZEvX4
h6hbs98BxvLZnOfk3/yi1YnsP3CiQXeLTJVwsZojGLAVMOdqgLrtApAhu+MrOgzH
+Oq4Xs3i9k035Vpp7pxwwXcG2rRDjIem3eouRaeBzn2uH4ysP9cF2x8rN1wJx+3p
sS/hKRoTf733CQvM0V7ucqw9S/X5vOathPqzRPOMqWAUMo/3TWAQ0zcdRQue9x/C
UE8+H9WzAMLenScDQ5XtogIv5jLiVH/Fc6Tv2x/Cjfg/DPgzVoqo6WhK8qF/G8yV
nj4NGPfJom/7N/ewHyfXIUig0ni/5M2pYM+lre91p5HXlHxK
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:05:58 2025 by rpki-client