Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
File:                     3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          4JaT4IVQIsJAwHuzNbTqGO1u70fsXURJIdgM8ORJP80=
Subject key identifier:   AF:4D:76:18:B2:D7:23:EF:EC:F4:28:04:CE:26:02:42:49:B9:5E:9D
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       6C4EF1A408741EAC8772007A0D2BF133DA6102F2
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
Signing time:             Tue 04 Feb 2025 18:33:40 +0000
ROA not before:           Tue 04 Feb 2025 18:28:40 +0000
ROA not after:            Tue 03 Feb 2026 18:33:40 +0000
asID:                     262262
IP address blocks:        170.231.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:4e:f1:a4:08:74:1e:ac:87:72:00:7a:0d:2b:f1:33:da:61:02:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Feb  4 18:28:40 2025 GMT
            Not After : Feb  3 18:33:40 2026 GMT
        Subject: CN=AF4D7618B2D723EFECF42804CE26024249B95E9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f7:94:c4:5d:f0:47:e1:3a:39:6c:dd:b9:ca:
                    5f:2f:10:fa:43:b5:3f:9d:56:f8:90:f3:2c:62:ff:
                    bd:f5:3d:b2:d3:5f:eb:42:41:ff:c2:fe:da:25:45:
                    4b:5e:9c:e0:bc:76:2d:c4:15:a1:a6:ff:b3:2b:0d:
                    3a:cd:1d:b3:9c:0d:5a:5e:f8:01:30:43:6c:8a:4d:
                    b6:63:d8:99:57:9d:8b:0d:20:58:56:ea:9a:c3:81:
                    98:74:51:bc:e1:8b:ab:45:83:47:61:62:aa:ef:c3:
                    9f:6a:b8:86:cb:2b:7b:1b:82:65:2e:1a:83:53:c1:
                    db:9f:83:9f:74:8b:71:7d:fb:a2:2d:8e:74:9c:db:
                    48:38:1a:2f:a1:cf:99:1b:fa:e8:33:6e:fc:da:b9:
                    99:e4:a4:96:a8:af:9c:3f:60:e1:fd:de:69:62:5e:
                    7e:f5:99:97:c2:8b:e0:a5:2b:50:75:45:d9:a3:4f:
                    8d:3c:d5:fe:e2:83:8a:aa:10:ab:f8:35:1d:6c:65:
                    06:2b:fa:e3:79:50:7e:81:fb:82:0a:56:34:8b:0c:
                    7a:b0:84:94:a7:c6:fe:1f:a6:d4:16:b6:ff:af:ce:
                    82:72:ec:b8:c2:0f:1b:59:0f:c2:26:94:dc:a6:3e:
                    37:db:b8:82:97:55:02:2c:88:23:eb:ae:ea:f8:46:
                    c4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4D:76:18:B2:D7:23:EF:EC:F4:28:04:CE:26:02:42:49:B9:5E:9D
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:ed:ac:2f:1f:85:d7:3f:c6:7d:07:90:b0:a0:97:e4:36:c3:
         7f:71:47:29:c5:b4:de:0c:a0:cb:af:79:cb:08:23:b3:aa:47:
         9b:a2:17:00:86:04:7d:5a:d6:1c:4d:a3:65:bb:ea:4b:6b:bb:
         b4:ae:de:e0:d8:c2:8b:95:da:f7:4e:3a:60:a6:98:a7:db:e8:
         fb:b0:fd:32:1a:81:93:75:a6:b5:76:d6:38:e8:25:b4:a5:e7:
         c1:52:6a:20:10:24:48:b6:5b:64:be:97:14:04:b4:39:a5:49:
         e2:7a:09:ea:58:1c:4e:b9:28:58:3f:f7:87:f8:df:9c:de:d2:
         96:1e:ff:9c:0c:43:30:a7:9c:e9:c9:53:1a:ed:c1:7c:e9:c1:
         d5:75:2c:de:86:59:5b:d9:05:db:a0:e6:19:79:2d:bd:47:b0:
         76:ea:60:7b:d5:e0:7d:34:29:bf:d3:79:28:df:a9:b0:11:7f:
         c4:0f:ef:5c:24:54:81:24:24:69:57:96:6f:b5:84:f6:0c:5c:
         3a:e6:70:a4:a2:ea:85:c8:44:ef:ea:a6:21:b0:4d:0f:45:02:
         0d:a0:c4:85:6a:ac:51:ff:74:ae:dd:ee:ef:ff:66:47:95:34:
         10:c9:23:bd:75:f5:b6:81:93:0b:67:e3:3f:f6:eb:95:f3:75:
         e0:c0:ad:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:21:25 2025 by rpki-client