Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa
File:                     3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa (raw, json)
Hash identifier:          bYS6MwzxxcTEalVzzcBh/OMcXsgspYmok8AMbMQLlDg=
Subject key identifier:   7E:E3:71:33:26:F9:9F:7F:9C:95:4A:C2:3C:47:C7:8E:36:FF:48:C6
Certificate issuer:       /CN=D2A5337FA87797971D233BE327907396D0813D5E
Certificate serial:       27AF425701B0E965CFE2E403C5DC62B123BF7D5D
Authority key identifier: D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa
Signing time:             Tue 18 Feb 2025 22:10:10 +0000
ROA not before:           Tue 18 Feb 2025 22:05:10 +0000
ROA not after:            Tue 17 Feb 2026 22:10:10 +0000
asID:                     264696
IP address blocks:        168.232.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:38:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:af:42:57:01:b0:e9:65:cf:e2:e4:03:c5:dc:62:b1:23:bf:7d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2A5337FA87797971D233BE327907396D0813D5E
        Validity
            Not Before: Feb 18 22:05:10 2025 GMT
            Not After : Feb 17 22:10:10 2026 GMT
        Subject: CN=7EE3713326F99F7F9C954AC23C47C78E36FF48C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:ca:da:29:a7:27:0e:4a:28:99:df:de:b8:
                    17:a1:61:cb:9d:29:2f:d4:9a:d3:e6:ce:97:bb:a4:
                    3f:60:83:83:99:35:c4:ac:7c:d0:a2:78:c8:4f:5d:
                    7e:ba:1a:e6:b9:f2:b5:82:0b:18:82:5b:4d:73:0f:
                    98:f2:19:3e:c8:a8:82:88:4b:94:92:a4:da:0a:01:
                    aa:bf:ba:34:9f:b5:df:7f:2b:5b:d4:59:c3:f8:b3:
                    7b:8e:b8:09:f0:2f:2d:95:57:80:67:07:56:54:d0:
                    45:24:2a:45:aa:bf:9d:8c:18:0e:9d:5b:5d:eb:19:
                    ac:26:09:f5:c6:a8:ea:0f:11:e6:69:87:cf:16:71:
                    73:6f:57:8e:e6:5a:d6:99:72:ab:5a:2c:5e:4a:37:
                    88:f9:ae:88:c9:13:51:59:68:a0:86:7f:ea:e9:1b:
                    a5:b0:46:7e:74:53:2a:ef:a9:1c:13:4a:43:85:63:
                    e2:d0:84:5b:5e:a9:61:ed:8f:7e:d9:67:df:97:32:
                    6c:67:3a:72:82:2b:0a:e8:4a:23:f6:19:91:14:83:
                    b3:4f:f2:85:b5:55:6c:c2:e1:98:42:a0:93:f9:b3:
                    f5:25:34:81:f9:2e:3c:01:aa:84:3b:31:83:95:7e:
                    86:bf:71:d8:69:23:0f:68:fb:89:f5:43:06:2f:77:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:71:33:26:F9:9F:7F:9C:95:4A:C2:3C:47:C7:8E:36:FF:48:C6
            X509v3 Authority Key Identifier:
                keyid:D2:A5:33:7F:A8:77:97:97:1D:23:3B:E3:27:90:73:96:D0:81:3D:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/D2A5337FA87797971D233BE327907396D0813D5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D2A5337FA87797971D233BE327907396D0813D5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F75D7846CDF9FB1CA71BE06C6457403E505E7413414D57C619D92F7AD559ADFB/0/3136382e3233322e3137302e302f32342d3234203d3e20323634363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:ca:25:1e:55:fc:77:e4:7d:0b:00:ff:29:dd:89:68:35:
         01:b6:57:16:52:9b:e0:0b:6f:f5:3e:31:59:db:39:4d:bc:ae:
         c9:08:48:8f:7a:82:66:10:69:b7:7a:1d:ee:be:a3:a1:96:4a:
         63:21:bf:ca:11:b6:61:4b:cd:c2:6a:14:64:11:dc:97:a0:2d:
         a1:30:b7:6b:7d:77:ae:1d:04:c8:a4:7b:e4:9c:88:09:3d:9d:
         d0:c3:2d:44:3e:5f:2f:c4:85:e5:d4:bf:f0:92:17:d9:2c:7a:
         e3:66:06:60:8d:8c:2e:f4:6d:70:eb:7f:43:02:c1:b5:67:81:
         4b:d1:a9:50:bd:cc:25:b2:5d:85:3e:1e:31:fa:d7:2a:5f:e9:
         35:44:ce:b5:1a:73:a8:a0:6b:f2:cc:e7:97:ab:a8:f4:40:da:
         8d:9f:a8:e6:bb:0d:aa:ca:fc:fa:10:a3:77:2d:94:ef:b4:f4:
         05:d8:c4:db:01:ca:cf:44:1b:17:d2:ee:ab:89:0b:ce:8e:ad:
         82:b1:be:83:95:c5:02:15:e5:bf:9c:d4:d9:3b:67:cf:00:db:
         9c:f8:06:73:af:19:28:84:8d:85:8f:fa:3a:f9:6c:dd:61:4e:
         cf:e5:ca:69:1c:a4:68:c6:b6:27:63:3b:a1:ae:f2:5a:41:12:
         ae:89:38:3f
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUJ69CVwGw6WXP4uQDxdxisSO/fV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDJBNTMzN0ZBODc3OTc5NzFEMjMzQkUzMjc5MDczOTZE
MDgxM0Q1RTAeFw0yNTAyMTgyMjA1MTBaFw0yNjAyMTcyMjEwMTBaMDMxMTAvBgNV
BAMTKDdFRTM3MTMzMjZGOTlGN0Y5Qzk1NEFDMjNDNDdDNzhFMzZGRjQ4QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiRcraKacnDkoomd/euBehYcud
KS/UmtPmzpe7pD9gg4OZNcSsfNCieMhPXX66Gua58rWCCxiCW01zD5jyGT7IqIKI
S5SSpNoKAaq/ujSftd9/K1vUWcP4s3uOuAnwLy2VV4BnB1ZU0EUkKkWqv52MGA6d
W13rGawmCfXGqOoPEeZph88WcXNvV47mWtaZcqtaLF5KN4j5rojJE1FZaKCGf+rp
G6WwRn50UyrvqRwTSkOFY+LQhFteqWHtj37ZZ9+XMmxnOnKCKwroSiP2GZEUg7NP
8oW1VWzC4ZhCoJP5s/UlNIH5LjwBqoQ7MYOVfoa/cdhpIw9o+4n1QwYvdxkPAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUfuNxMyb5n3+clUrCPEfHjjb/SMYwHwYDVR0j
BBgwFoAU0qUzf6h3l5cdIzvjJ5BzltCBPV4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzVENzg0NkNERjlGQjFDQTcxQkUwNkM2NDU3NDAzRTUw
NUU3NDEzNDE0RDU3QzYxOUQ5MkY3QUQ1NTlBREZCLzAvRDJBNTMzN0ZBODc3OTc5
NzFEMjMzQkUzMjc5MDczOTZEMDgxM0Q1RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EMkE1MzM3RkE4Nzc5Nzk3MUQy
MzNCRTMyNzkwNzM5NkQwODEzRDVFLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc1RDc4NDZDREY5RkIxQ0E3MUJFMDZDNjQ1NzQwM0U1MDVFNzQxMzQx
NEQ1N0M2MTlEOTJGN0FENTU5QURGQi8wLzMxMzYzODJlMzIzMzMyMmUzMTM3MzAy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzQzNjM5MzYucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACo
6KowDQYJKoZIhvcNAQELBQADggEBAEm5yiUeVfx35H0LAP8p3YloNQG2VxZSm+AL
b/U+MVnbOU28rskISI96gmYQabd6He6+o6GWSmMhv8oRtmFLzcJqFGQR3JegLaEw
t2t9d64dBMike+SciAk9ndDDLUQ+Xy/EheXUv/CSF9kseuNmBmCNjC70bXDrf0MC
wbVngUvRqVC9zCWyXYU+HjH61ypf6TVEzrUac6iga/LM55erqPRA2o2fqOa7DarK
/PoQo3ctlO+09AXYxNsBys9EGxfS7quJC86OrYKxvoOVxQIV5b+c1Nk7Z88A25z4
BnOvGSiEjYWP+jr5bN1hTs/lymkcpGjGtidjO6Gu8lpBEq6JOD8=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:59:53 2025 by rpki-client