Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa
File:                     3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa (raw, json)
Hash identifier:          k3x+/+qnc3p/C8zEjc7reHTeuwF1ISg8gxm/WK/MqhE=
Subject key identifier:   47:D8:7C:0D:AE:52:40:80:9A:46:43:03:01:43:AD:49:41:2D:B1:35
Certificate issuer:       /CN=BAB763D78A27788C4136E1E1F000F960EF242B72
Certificate serial:       57C9F287B6FA65771D85FC3E5D63E403F446ED05
Authority key identifier: BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa
Signing time:             Tue 04 Feb 2025 19:58:02 +0000
ROA not before:           Tue 04 Feb 2025 19:53:02 +0000
ROA not after:            Tue 03 Feb 2026 19:58:02 +0000
asID:                     262242
IP address blocks:        170.246.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 06:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:c9:f2:87:b6:fa:65:77:1d:85:fc:3e:5d:63:e4:03:f4:46:ed:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB763D78A27788C4136E1E1F000F960EF242B72
        Validity
            Not Before: Feb  4 19:53:02 2025 GMT
            Not After : Feb  3 19:58:02 2026 GMT
        Subject: CN=47D87C0DAE5240809A4643030143AD49412DB135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:c6:af:09:bf:25:e4:05:87:2e:ab:1c:66:
                    ae:ee:65:c4:99:03:23:7e:19:31:bd:4e:6b:33:5d:
                    26:cf:b8:72:ab:a2:3d:22:44:10:ad:ca:0c:2a:bf:
                    82:57:ac:3a:0c:3d:eb:9c:4c:10:37:d2:92:cf:75:
                    c2:87:d2:29:1a:ad:2f:e6:3f:b4:90:ff:71:6b:e6:
                    6a:53:1b:ac:d1:95:87:bf:7c:87:9b:63:28:d3:21:
                    b3:8d:35:9c:ae:3e:9b:99:4a:a2:20:e4:c5:c5:de:
                    27:4b:d6:19:2e:c9:cf:98:f8:f0:34:27:cc:19:c9:
                    4a:aa:a2:f3:81:1f:11:43:d2:a7:c8:db:5c:14:e8:
                    03:2e:ad:86:e9:6e:37:66:13:91:f1:66:c7:81:73:
                    34:33:9a:36:63:b1:5c:5f:7f:75:be:33:9e:c9:b8:
                    8e:1b:f8:d5:9b:1d:19:5a:96:01:bf:91:cd:ff:55:
                    c7:c0:b3:9b:22:81:91:7e:6f:12:af:20:21:a0:3b:
                    6d:40:c5:0f:9d:68:d3:81:6d:c1:bf:80:d8:eb:94:
                    b1:30:fe:4d:de:74:e4:d7:7b:08:1b:d1:d3:b6:b8:
                    e8:7c:1c:a8:af:fe:c8:f3:ee:a2:e9:12:a1:94:6a:
                    03:13:8f:38:69:c4:0d:76:7c:d3:8b:5f:7b:4e:ed:
                    2b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D8:7C:0D:AE:52:40:80:9A:46:43:03:01:43:AD:49:41:2D:B1:35
            X509v3 Authority Key Identifier:
                keyid:BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d9:8f:aa:7f:04:bc:94:0b:32:69:dd:23:7d:4a:eb:3c:fd:cb:
         cf:fd:01:e3:3e:1e:70:00:08:59:5f:96:f7:35:a3:6e:06:71:
         19:36:1a:01:4d:70:0c:c7:30:e6:0d:65:aa:5f:82:f4:64:9f:
         75:5a:8d:15:77:4c:f5:03:3d:7f:fe:18:09:15:66:fc:ef:32:
         83:ee:f6:09:de:ca:95:d2:7b:12:a9:9b:57:b6:88:41:e2:fa:
         57:38:12:d1:99:12:98:54:f1:74:3f:d6:b6:d4:6a:fd:d5:95:
         68:bf:ee:14:e6:6a:89:c1:37:35:9c:41:23:64:db:4b:7d:86:
         fe:89:ca:1e:77:57:9a:39:73:85:e9:00:e3:9b:99:6b:9e:dd:
         7d:20:7c:be:fe:91:8b:6a:39:7f:90:b7:33:00:38:cb:a3:3f:
         b6:35:bf:e9:4d:ce:3b:a9:e8:69:89:1f:03:8f:52:e0:ce:35:
         60:ab:1a:33:5a:2c:ba:7a:cb:df:be:4b:8b:fe:f5:37:9e:38:
         5e:f7:36:01:96:f7:92:a9:38:23:51:b3:60:06:6e:98:f9:e4:
         28:86:b6:f1:f0:07:4f:76:29:b4:4e:3b:7b:1d:c1:ea:47:83:
         15:68:a0:28:11:73:bb:63:40:af:11:a3:08:46:e5:56:fb:84:
         fe:a3:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:15:25 2025 by rpki-client