Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa
File:                     3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa (raw, json)
Hash identifier:          F/0dM1qH1Z+k15gJjvQqWz82vZ2N1lfenex3mjZ+ipU=
Subject key identifier:   5E:C1:C9:8B:53:59:6F:B5:46:E9:B8:DE:CB:92:EF:48:FD:0D:BC:E5
Certificate issuer:       /CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
Certificate serial:       7819B76B3FA05E28D7E7AD5BF4515A776FB4AAD9
Authority key identifier: 5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa
Signing time:             Tue 04 Feb 2025 18:49:56 +0000
ROA not before:           Tue 04 Feb 2025 18:44:56 +0000
ROA not after:            Tue 03 Feb 2026 18:49:56 +0000
asID:                     264828
IP address blocks:        170.80.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:b7:6b:3f:a0:5e:28:d7:e7:ad:5b:f4:51:5a:77:6f:b4:aa:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
        Validity
            Not Before: Feb  4 18:44:56 2025 GMT
            Not After : Feb  3 18:49:56 2026 GMT
        Subject: CN=5EC1C98B53596FB546E9B8DECB92EF48FD0DBCE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:69:2b:31:51:64:f1:e1:2e:8b:7c:e2:7d:
                    75:4c:b5:34:9a:88:94:53:b1:1e:5b:83:3a:8f:b7:
                    da:0e:95:03:a2:64:e0:51:8e:54:e2:34:c2:c8:03:
                    48:d7:12:ea:24:ee:c4:0b:24:97:d5:86:e5:50:c0:
                    32:97:ae:db:80:66:60:bd:92:8d:43:ca:3a:19:0d:
                    c8:50:67:87:ab:f6:a4:8d:4b:49:0e:38:07:cd:0a:
                    dd:93:2c:d9:23:cc:08:e2:92:f0:58:60:33:47:0d:
                    ad:e6:d9:be:cd:51:5d:6f:7c:6e:31:ca:9d:6f:2a:
                    6a:b6:95:24:15:c2:5d:f5:9d:9a:ba:de:11:6c:cf:
                    ac:b3:80:1e:39:b7:7d:05:15:ab:64:09:f0:9e:c2:
                    de:88:3a:08:75:e3:f6:a5:3a:6f:95:fc:c6:88:45:
                    b2:31:d6:ee:e5:d2:10:4d:3f:61:aa:da:19:c9:b8:
                    81:bb:35:4d:0d:c6:32:b5:d0:39:a1:8e:0b:91:a3:
                    48:56:d7:10:06:14:28:a2:2c:e8:d0:2c:a7:6d:e8:
                    9b:72:5e:6c:2a:3e:ad:c0:bc:06:ec:2c:a5:ef:4a:
                    8b:cd:f2:4e:76:02:45:4e:35:f6:95:70:3e:8a:76:
                    11:90:5b:1b:7b:c9:8a:11:9d:e0:ef:6f:c6:88:fa:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C1:C9:8B:53:59:6F:B5:46:E9:B8:DE:CB:92:EF:48:FD:0D:BC:E5
            X509v3 Authority Key Identifier:
                keyid:5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:81:b4:ea:4e:f8:91:6b:1c:b2:fe:53:13:73:8a:08:1c:37:
         4a:bc:64:58:3f:1a:bd:6d:56:fe:e3:2d:66:84:ef:36:b9:8b:
         18:63:be:3c:00:20:9b:b9:1d:88:8f:35:3d:cd:f3:45:2d:de:
         77:de:47:31:19:e9:b6:1b:64:80:0e:8b:f0:ce:11:75:d2:58:
         67:15:a8:0f:aa:11:19:b4:a8:98:b0:a2:08:6a:aa:80:48:ee:
         84:6d:b9:e3:80:1b:2a:c9:d5:0f:32:4e:fb:f6:ed:22:12:c7:
         c3:78:73:0d:e6:c3:a8:07:a9:58:30:2d:d5:69:c6:05:b5:da:
         76:5e:b7:5f:a2:89:3e:9f:6e:01:a7:1e:26:48:b4:ba:8b:e2:
         d3:c5:5f:b0:ab:0d:41:df:9e:10:0d:27:5f:7c:a1:2d:de:72:
         57:cb:4b:2e:62:2f:fb:a2:9a:31:76:7b:3a:d0:14:88:3e:b4:
         22:b5:1d:35:26:23:e8:96:97:d6:13:37:f8:4a:f9:eb:6c:ee:
         52:82:0e:58:a5:bb:b7:e9:af:51:69:04:56:14:67:63:d8:67:
         cd:3d:be:22:34:00:62:b9:0f:25:44:a9:db:74:6b:fd:4c:10:
         02:d0:92:73:e5:a8:12:fb:32:db:b1:9b:f1:dc:9c:75:34:7d:
         b1:06:98:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:55 2025 by rpki-client