Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
File:                     3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa (raw, json)
Hash identifier:          3ymxSBexA/LUtGIrYwOhO5wbt8sIa+H4/HA9ePyU42A=
Subject key identifier:   5B:5B:B7:7B:43:C7:FA:9D:5C:A8:D8:13:65:2A:4D:2E:0A:43:20:EA
Certificate issuer:       /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
Certificate serial:       4ADA205E7E8CC741F152850FA7FA2E7FC8A896B3
Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
Signing time:             Tue 04 Feb 2025 18:19:25 +0000
ROA not before:           Tue 04 Feb 2025 18:14:25 +0000
ROA not after:            Tue 03 Feb 2026 18:19:25 +0000
asID:                     265656
IP address blocks:        170.246.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:da:20:5e:7e:8c:c7:41:f1:52:85:0f:a7:fa:2e:7f:c8:a8:96:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
        Validity
            Not Before: Feb  4 18:14:25 2025 GMT
            Not After : Feb  3 18:19:25 2026 GMT
        Subject: CN=5B5BB77B43C7FA9D5CA8D813652A4D2E0A4320EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:f0:11:87:f2:27:cf:bf:82:7e:9e:67:c9:
                    b2:26:01:26:b1:12:2f:d0:46:76:a7:42:f1:1b:49:
                    bc:4b:a2:32:a7:ba:e9:8a:df:68:5f:d2:0e:cd:d3:
                    f6:49:0b:9c:d9:46:66:cb:a7:91:30:d0:04:a9:30:
                    fb:ad:bf:d6:f9:be:31:2e:a3:94:a1:5b:e9:27:bb:
                    b8:a2:33:8d:94:db:ea:1e:23:06:d3:6a:22:e5:b7:
                    b7:62:ef:52:0f:ec:e3:39:52:79:2a:77:43:ba:d2:
                    e0:90:38:1f:55:1c:8b:68:ba:a6:99:0f:ba:9a:d3:
                    2f:a5:dd:79:fd:2e:38:2c:da:d0:39:4e:42:d9:3b:
                    10:a7:e6:a8:81:c9:e9:ab:f4:5e:25:fe:a6:24:7e:
                    f8:1d:de:5f:2f:34:12:a4:51:b0:60:23:62:cb:31:
                    83:5d:a0:59:bd:77:75:ac:48:61:db:2f:48:8c:ea:
                    08:ec:7a:c0:24:e2:65:55:7f:c4:3d:9f:47:bd:4a:
                    7c:cc:94:16:31:68:78:53:48:a4:1e:5e:9d:93:22:
                    87:83:d8:88:e3:4d:f6:8c:c9:b5:75:c3:89:24:96:
                    7e:34:4a:2f:a7:b1:05:fb:1a:f4:2b:91:a6:e2:0e:
                    39:78:16:eb:de:83:99:ee:8f:6f:8e:08:16:98:59:
                    7c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5B:B7:7B:43:C7:FA:9D:5C:A8:D8:13:65:2A:4D:2E:0A:43:20:EA
            X509v3 Authority Key Identifier:
                keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:c4:4c:5c:ca:6b:30:e4:3a:a4:5b:eb:68:03:e5:02:a6:67:
         7f:bf:a2:1c:f8:ac:dd:19:bc:91:ab:e2:8a:20:d4:97:9f:3c:
         fd:e0:be:28:83:9f:0b:2d:78:16:28:5a:83:39:11:e8:eb:a2:
         25:29:01:c9:72:19:6f:62:72:e0:35:87:0a:73:3b:62:f6:0c:
         b7:52:6d:8e:a4:a0:68:fe:f3:df:c3:a8:80:4d:cd:3f:bd:de:
         60:fd:b2:ae:23:5d:54:e1:5f:75:c2:7c:ad:00:a0:d2:b6:b3:
         7e:dd:24:ef:f3:7f:66:4e:56:7b:45:a3:da:1e:f7:66:cc:ba:
         5f:41:89:3a:61:29:40:3e:1b:82:65:3f:cc:7a:7a:e7:18:b2:
         f0:87:57:2a:98:76:2f:58:9c:c8:77:f1:4f:2c:55:78:7b:fc:
         ac:c5:28:d2:13:4e:ab:54:20:0c:56:f8:e8:82:fb:d0:ea:6f:
         3a:2b:c9:ec:ef:7d:1f:f1:84:6c:ef:67:2b:81:a1:1b:b4:f3:
         20:02:cc:c4:c6:ba:e0:ad:0c:e7:01:2c:83:d8:da:78:a6:df:
         37:0a:f2:8b:12:e8:c2:07:f5:75:d1:bc:9f:9f:c8:6f:57:61:
         c7:89:bc:d1:36:6f:ec:cf:15:00:00:5a:42:05:dd:2d:6b:00:
         8a:77:a8:be
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUStogXn6Mx0HxUoUPp/ouf8iolrMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc0OUYwQzlGOThCNjgzOTJFMkRCMEYzRUMyNUI5RTIy
RTg5QkJCODAeFw0yNTAyMDQxODE0MjVaFw0yNjAyMDMxODE5MjVaMDMxMTAvBgNV
BAMTKDVCNUJCNzdCNDNDN0ZBOUQ1Q0E4RDgxMzY1MkE0RDJFMEE0MzIwRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqfARh/Inz7+Cfp5nybImASax
Ei/QRnanQvEbSbxLojKnuumK32hf0g7N0/ZJC5zZRmbLp5Ew0ASpMPutv9b5vjEu
o5ShW+knu7iiM42U2+oeIwbTaiLlt7di71IP7OM5Unkqd0O60uCQOB9VHItouqaZ
D7qa0y+l3Xn9Ljgs2tA5TkLZOxCn5qiByemr9F4l/qYkfvgd3l8vNBKkUbBgI2LL
MYNdoFm9d3WsSGHbL0iM6gjsesAk4mVVf8Q9n0e9SnzMlBYxaHhTSKQeXp2TIoeD
2IjjTfaMybV1w4kkln40Si+nsQX7GvQrkabiDjl4Fuveg5nuj2+OCBaYWXwBAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUW1u3e0PH+p1cqNgTZSpNLgpDIOowHwYDVR0j
BBgwFoAUB0nwyfmLaDkuLbDz7CW54i6Ju7gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FNzhGRDZCNkE4NTg2NzNDOTlEODcxRTlGQUQ0NjlGQ0FG
RUQzNzAzMkZCRjQzQzBGM0NERDRCQTM3Qzg2NjAyLzAvMDc0OUYwQzlGOThCNjgz
OTJFMkRCMEYzRUMyNUI5RTIyRTg5QkJCOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNzQ5RjBDOUY5OEI2ODM5MkUy
REIwRjNFQzI1QjlFMjJFODlCQkI4LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTc4RkQ2QjZBODU4NjczQzk5RDg3MUU5RkFENDY5RkNBRkVEMzcwMzJG
QkY0M0MwRjNDREQ0QkEzN0M4NjYwMi8wLzMxMzczMDJlMzIzNDM2MmUzMTM3MzIy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzUzNjM1MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
9qwwDQYJKoZIhvcNAQELBQADggEBAHXETFzKazDkOqRb62gD5QKmZ3+/ohz4rN0Z
vJGr4oog1JefPP3gviiDnwsteBYoWoM5EejroiUpAclyGW9icuA1hwpzO2L2DLdS
bY6koGj+89/DqIBNzT+93mD9sq4jXVThX3XCfK0AoNK2s37dJO/zf2ZOVntFo9oe
92bMul9BiTphKUA+G4JlP8x6eucYsvCHVyqYdi9YnMh38U8sVXh7/KzFKNITTqtU
IAxW+OiC+9DqbzoryezvfR/xhGzvZyuBoRu08yACzMTGuuCtDOcBLIPY2nim3zcK
8osS6MIH9XXRvJ+fyG9XYceJvNE2b+zPFQAAWkIF3S1rAIp3qL4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:30:48 2025 by rpki-client