Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3137302e38302e382e302f32322d3233203d3e203232333638.roa
File:                     3137302e38302e382e302f32322d3233203d3e203232333638.roa (raw, json)
Hash identifier:          OZ60ErdSiskaxRVrkD2SrFinHUn/zWmtr2v3xK1noYE=
Subject key identifier:   52:69:7B:65:A5:A0:A8:E3:91:39:EB:23:93:DC:10:2D:D2:85:42:26
Certificate issuer:       /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial:       4602CF9614112840E6E99FF50C207F778E41038A
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3137302e38302e382e302f32322d3233203d3e203232333638.roa
Signing time:             Tue 04 Feb 2025 18:22:18 +0000
ROA not before:           Tue 04 Feb 2025 18:17:18 +0000
ROA not after:            Tue 03 Feb 2026 18:22:18 +0000
asID:                     22368
IP address blocks:        170.80.8.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 18 Apr 2025 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:02:cf:96:14:11:28:40:e6:e9:9f:f5:0c:20:7f:77:8e:41:03:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
        Validity
            Not Before: Feb  4 18:17:18 2025 GMT
            Not After : Feb  3 18:22:18 2026 GMT
        Subject: CN=52697B65A5A0A8E39139EB2393DC102DD2854226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0e:f1:97:0b:df:13:15:74:51:81:c4:98:bf:
                    42:36:30:7b:51:24:39:99:dd:37:5f:7a:ba:d2:d6:
                    06:0c:98:d8:1b:e4:77:58:c2:fe:05:a0:47:c3:dc:
                    71:ed:24:54:3e:0f:f9:39:f2:58:c8:92:33:e7:a7:
                    61:36:a7:7f:cc:7c:0e:f3:17:c4:9e:0b:8a:5a:c2:
                    19:81:dd:49:d6:26:1e:0b:5c:44:f2:8d:55:09:d6:
                    aa:1f:da:20:7d:d1:ae:37:7e:5b:d9:6d:e7:0b:15:
                    39:44:07:2a:58:be:94:35:18:26:58:0a:fc:c1:f7:
                    1e:8c:3d:45:63:ce:4f:dc:27:03:c5:e8:e6:76:d5:
                    52:56:14:b8:a4:27:88:0d:0f:cc:48:b7:9e:e1:e3:
                    7c:ce:56:f8:66:c0:b7:62:4a:3c:e4:9c:9b:c0:7a:
                    b0:5b:80:5c:2d:94:35:3a:eb:d5:59:46:27:48:42:
                    ee:27:6e:12:4f:5d:10:29:86:76:77:05:e5:00:1d:
                    87:85:6d:ef:3c:65:70:a4:e8:47:9d:83:6a:e6:0b:
                    ec:ca:12:8a:b1:1c:f6:97:81:72:06:87:68:7b:03:
                    4a:c3:9e:ed:71:29:b2:4f:8f:c1:0e:d5:77:7b:3d:
                    1d:e2:96:f3:f6:0a:62:3c:26:08:dc:4f:7e:96:dd:
                    34:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:69:7B:65:A5:A0:A8:E3:91:39:EB:23:93:DC:10:2D:D2:85:42:26
            X509v3 Authority Key Identifier:
                keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3137302e38302e382e302f32322d3233203d3e203232333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:d9:ae:03:91:12:c4:6e:54:dc:72:5e:4e:81:c0:ea:66:
         54:a2:b8:11:6e:44:7a:f2:fe:92:63:40:93:fc:36:c2:8c:88:
         2a:be:42:20:7d:f9:b7:56:e5:39:eb:2f:71:d7:51:53:50:8f:
         1d:5f:4f:6c:1b:e5:25:f0:0b:bc:43:42:2e:c5:4a:ef:ee:bf:
         e8:16:2d:24:ef:fd:52:b8:b1:44:b3:27:dc:86:f5:63:f4:09:
         c0:74:d4:da:b5:73:59:6e:b0:c0:51:bb:d3:2e:1f:f8:c7:41:
         3a:ae:57:5f:32:50:96:70:8f:1a:4d:5f:5a:31:d1:fe:e4:74:
         5e:94:21:c8:93:6a:6c:6b:39:b8:0a:f9:62:79:88:c7:1b:46:
         1d:38:ba:65:d5:f3:63:1a:45:71:5f:87:01:7a:9b:f8:cd:e8:
         a0:4f:00:e1:30:6d:83:7b:f6:f9:ff:ec:f6:b2:fc:8c:d8:da:
         ee:85:13:c4:07:fb:f5:34:5d:15:9b:18:94:c4:a8:9d:8e:3d:
         b8:0c:e2:c6:3e:53:69:a2:52:e9:e3:b9:4f:5d:3c:ea:8b:89:
         2e:f3:01:14:3d:b8:e3:c3:56:3b:db:5f:75:be:2e:b5:76:96:
         4d:6b:8e:a9:85:ca:56:85:84:54:93:2f:2f:fb:4d:bc:5c:46:
         6b:ec:89:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 05:53:12 2025 by rpki-client