Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
File:                     3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (raw, json)
Hash identifier:          w4u7sn4Br/SzlJWc1j5+t+BwDZV8XqI+m7Q7xmgOGGk=
Subject key identifier:   14:E2:AB:B8:F4:88:28:76:D5:9A:9B:51:F3:29:D2:42:77:95:8D:BB
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       54FAF16904ED7F5BF9652DAB83CE9B0F14C608A6
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
Signing time:             Tue 04 Feb 2025 18:19:50 +0000
ROA not before:           Tue 04 Feb 2025 18:14:50 +0000
ROA not after:            Tue 03 Feb 2026 18:19:50 +0000
asID:                     27792
IP address blocks:        170.84.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 08 Apr 2025 12:14:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:f1:69:04:ed:7f:5b:f9:65:2d:ab:83:ce:9b:0f:14:c6:08:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Feb  4 18:14:50 2025 GMT
            Not After : Feb  3 18:19:50 2026 GMT
        Subject: CN=14E2ABB8F4882876D59A9B51F329D24277958DBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:15:d0:e1:29:93:a4:91:f9:88:9f:75:84:
                    8e:58:d3:f3:7d:a9:e4:1f:9f:98:a6:97:31:1f:35:
                    1b:70:be:24:9e:43:3c:b8:a6:d6:1c:f3:d3:20:31:
                    46:47:13:3d:67:8a:0f:1f:17:63:8e:b4:06:4b:9b:
                    87:e4:4f:18:1d:a5:97:e7:d7:38:06:ca:e4:95:58:
                    56:a4:67:78:a8:14:22:34:69:ba:8a:28:15:c7:9d:
                    67:26:5e:c4:ed:f1:fd:42:a3:53:88:8c:49:b9:dc:
                    d2:f6:c2:64:45:a0:a4:65:6c:7a:06:cd:e0:a9:4f:
                    ae:9a:ea:42:36:af:9a:85:d0:2b:47:1b:8e:e5:d1:
                    a6:e7:5d:4b:67:e1:b2:35:4c:77:19:67:57:72:8c:
                    fb:c8:1d:6b:36:4d:ee:56:a7:1a:6b:21:6d:6c:03:
                    93:6a:f4:31:f8:61:c3:f3:7f:13:2c:ad:c3:d8:63:
                    ad:8d:df:ca:8e:6d:1a:38:75:2b:ac:71:51:a5:4f:
                    58:0e:8b:4c:d1:3b:5b:3f:78:0c:39:01:15:5a:71:
                    04:e7:6a:2c:bf:06:02:8a:c4:41:19:c0:30:0d:b0:
                    a8:c8:87:83:b3:d2:01:81:f4:fa:81:33:18:84:e7:
                    a5:5e:99:32:fb:e0:61:96:3c:5e:e8:d8:84:4a:f1:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:AB:B8:F4:88:28:76:D5:9A:9B:51:F3:29:D2:42:77:95:8D:BB
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:0d:39:d7:38:80:65:d4:80:91:94:51:53:65:3f:13:f0:
         fa:3f:16:93:35:ba:19:96:dc:ab:6f:79:b6:9d:d7:ba:ad:e1:
         f2:fa:98:56:3e:57:90:24:7c:34:80:7a:64:a0:b5:c1:ba:74:
         2d:ae:e2:04:11:55:76:00:c0:07:91:0f:f5:c2:bb:57:11:70:
         5d:d0:0b:0e:12:20:07:3e:ed:9b:a2:30:99:d5:d9:ea:aa:00:
         f8:60:78:52:fc:c8:6e:b0:95:d2:6d:09:63:da:ec:8c:d2:ad:
         d7:a4:2c:f5:86:59:85:91:bc:28:80:4b:f9:8d:b7:f6:94:c1:
         b7:8e:5b:b7:5d:8f:6b:88:1c:ef:53:80:e1:7a:2d:ca:62:51:
         7a:4c:e0:32:b0:44:ef:93:e9:fa:f0:89:50:89:00:5e:2b:f3:
         cc:25:7c:5e:91:3d:79:56:d8:a6:8e:51:33:39:3a:de:80:78:
         2e:65:65:e7:ab:1a:d4:d2:5c:73:19:34:3f:a6:aa:6b:b4:7a:
         0f:5d:7c:d3:f7:34:3f:ad:c3:98:e8:95:5b:78:a1:2d:db:f5:
         59:e0:76:7e:3c:0e:4e:24:cf:e1:a5:41:8c:f9:ec:fc:12:72:
         74:fa:5a:73:8b:14:e8:6e:85:7c:c9:bd:05:e4:7a:03:64:fb:
         61:34:c5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:17:06 2025 by rpki-client