Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa
File:                     3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          64IJB5afnLl+Z4UblsPCFPfffvGcDgDr+IjYchEkZxs=
Subject key identifier:   BA:04:BF:6D:94:29:E6:16:5E:92:CF:99:D3:3E:A2:0E:9C:DE:7E:FE
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       321A053F5788DF704C119E855AFC33EF0F55D0CB
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa
Signing time:             Tue 04 Feb 2025 18:33:38 +0000
ROA not before:           Tue 04 Feb 2025 18:28:38 +0000
ROA not after:            Tue 03 Feb 2026 18:33:38 +0000
asID:                     262262
IP address blocks:        170.247.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 10 Apr 2025 04:49:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:1a:05:3f:57:88:df:70:4c:11:9e:85:5a:fc:33:ef:0f:55:d0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Feb  4 18:28:38 2025 GMT
            Not After : Feb  3 18:33:38 2026 GMT
        Subject: CN=BA04BF6D9429E6165E92CF99D33EA20E9CDE7EFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:0b:9b:fd:39:17:3d:3a:d3:f1:47:70:fa:
                    cd:bc:00:42:43:38:7a:28:b1:03:ab:a9:47:67:04:
                    c9:ad:1f:76:69:d0:6f:4e:07:0e:a1:60:3b:0a:49:
                    f5:7b:45:45:a8:2c:0c:3b:a9:2c:2a:2e:44:af:bb:
                    cb:2b:42:f9:6b:c7:f5:c1:12:9e:32:d9:ec:dd:a3:
                    6d:37:a8:cf:dd:e6:b1:8e:0b:3b:00:07:c1:5a:8a:
                    c9:d3:6f:3c:16:f1:48:b4:3d:9f:18:e0:8a:22:6c:
                    9c:8c:68:7b:53:a1:4f:72:4b:12:90:c8:c2:33:22:
                    84:9e:8b:18:8e:96:30:c3:53:d1:2f:88:b5:07:28:
                    64:25:2f:8e:51:3f:7d:5c:74:2f:f9:3a:c9:58:29:
                    d6:fe:59:f0:09:f0:c2:51:f1:da:6c:1a:78:2b:46:
                    90:54:0a:05:49:1b:28:a7:17:84:9d:9c:3a:dc:81:
                    96:fc:bf:09:d4:5b:d6:3d:1e:21:78:e3:16:c4:f2:
                    23:27:4c:c5:76:fa:9c:15:ea:79:e8:3a:29:f5:0d:
                    bf:86:42:ab:6a:91:37:be:42:52:e8:ba:5a:f6:d1:
                    8a:b1:d1:2c:2e:f9:55:92:37:a0:fa:0b:64:00:96:
                    6e:15:82:c3:b3:46:af:c5:40:3c:ea:be:d3:34:da:
                    c7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:04:BF:6D:94:29:E6:16:5E:92:CF:99:D3:3E:A2:0E:9C:DE:7E:FE
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:ae:4d:2b:65:9d:f3:05:ec:a6:2b:0d:c2:61:b7:39:27:f3:
         da:29:2a:0b:3c:0d:03:8d:03:ed:90:b3:e6:2e:05:a7:9f:d5:
         04:d5:a0:d4:14:2f:5a:96:a9:e2:02:d1:19:3d:36:68:fd:95:
         61:d2:ec:9f:f5:7b:74:6a:fe:62:4a:ce:00:1e:87:e5:df:af:
         79:39:10:d5:af:47:8a:a0:08:90:97:d1:9e:12:69:91:fb:24:
         4f:09:68:df:02:2d:53:2a:56:7c:de:d1:9b:88:10:d1:f1:8b:
         9a:d8:9b:46:7b:e2:55:b8:bc:0e:98:b4:dc:dc:1e:27:59:91:
         b1:86:06:b6:7e:27:b2:3c:4b:54:b1:9b:c2:ba:d2:fd:a9:06:
         af:56:10:15:95:e4:7c:30:5e:30:f9:75:85:06:ae:c8:a5:be:
         fb:ed:bf:b6:05:80:ff:de:2f:b1:ae:bd:33:26:cb:a8:7a:c7:
         8c:a6:ee:9d:79:cf:e3:c6:15:4d:fd:59:b1:29:01:45:cd:9a:
         ee:d7:df:42:07:c0:9f:31:e5:6c:b6:c2:f1:9c:ec:2a:3a:95:
         91:52:58:1c:37:bc:0e:13:c1:61:1a:73:fd:a1:9a:22:6e:0e:
         d1:50:d1:88:27:53:e7:3b:4a:89:0c:f9:89:09:fc:4e:cb:a6:
         f6:49:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:20:18 2025 by rpki-client