Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
File:                     3137302e38322e302e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          dTQM4w8XXyA/lFw/sG22dD2nZolOt+ZucUQCj38hrd0=
Subject key identifier:   81:47:6B:66:09:5A:D3:A8:F5:FE:62:15:B8:B6:2C:24:A8:F2:D4:DD
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       21FD8695C00E19E30CDA81CAB611A897574C17DC
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 04 Feb 2025 18:40:14 +0000
ROA not before:           Tue 04 Feb 2025 18:35:14 +0000
ROA not after:            Tue 03 Feb 2026 18:40:14 +0000
asID:                     263829
IP address blocks:        170.82.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 09 Apr 2025 04:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:fd:86:95:c0:0e:19:e3:0c:da:81:ca:b6:11:a8:97:57:4c:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Feb  4 18:35:14 2025 GMT
            Not After : Feb  3 18:40:14 2026 GMT
        Subject: CN=81476B66095AD3A8F5FE6215B8B62C24A8F2D4DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:ce:55:a5:a4:39:a5:16:8c:fe:1e:18:4e:
                    6a:de:de:33:24:b2:14:a3:ce:82:1f:7c:21:32:47:
                    7f:f7:41:d0:2e:5c:f7:22:59:87:0b:52:03:57:4f:
                    f4:40:01:c2:f6:48:42:93:40:f8:b2:3f:5d:05:83:
                    64:ee:de:cc:06:eb:04:58:bb:20:b7:07:59:c9:04:
                    bf:11:f6:4a:5f:0a:64:24:73:57:cf:4e:f5:48:a1:
                    6d:cd:dd:f2:7e:e1:07:6c:b8:b3:cb:c3:2f:87:bc:
                    16:6f:28:d7:0a:f4:63:8e:9b:a7:1b:19:2e:e7:61:
                    5f:79:97:7b:06:12:6a:b6:48:fe:3b:03:8f:c1:9d:
                    5e:a9:65:ea:5a:11:ce:8c:4d:2d:25:89:79:a3:b6:
                    60:10:ad:de:dd:2a:1a:f9:ed:2e:55:6b:b8:de:6d:
                    f7:55:85:79:15:93:d3:4a:83:2c:a8:df:ef:36:d2:
                    7e:a3:08:08:da:9a:da:b4:80:96:cb:cd:86:4c:03:
                    e8:da:18:24:d3:47:09:f0:bb:e8:4b:f9:66:cc:a0:
                    fd:09:64:d3:29:97:99:67:dc:b6:da:a4:ae:56:b7:
                    78:75:fb:a9:13:62:9e:0e:2d:87:58:78:8a:42:af:
                    dd:74:22:b5:64:e6:08:4e:2c:4b:b7:02:bf:1b:6a:
                    d9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:47:6B:66:09:5A:D3:A8:F5:FE:62:15:B8:B6:2C:24:A8:F2:D4:DD
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:ab:5a:38:26:a1:d9:27:28:12:13:e3:cf:d8:13:07:ea:90:
         3d:f9:3f:e5:4c:70:68:46:1c:51:bd:22:25:f5:a5:78:3b:d4:
         ac:b8:23:a8:7e:91:1a:8d:1b:a3:a0:a7:3b:12:66:f5:33:b9:
         86:38:1f:09:b8:ae:ed:e4:ea:7e:0b:23:23:a7:68:fb:1c:6e:
         10:26:0e:30:ca:5b:6b:ce:14:48:24:c6:ea:e3:6f:25:1f:79:
         5a:2e:39:53:ed:e7:09:14:cc:fd:a4:1c:b7:b8:ad:40:b2:00:
         f2:c8:35:27:61:bd:60:4b:53:70:d5:67:5f:87:79:39:71:19:
         71:1e:62:c3:f4:86:9d:fe:22:5f:40:01:03:14:73:5b:9f:6a:
         e6:94:7e:86:80:a9:f7:ca:f3:31:6f:21:af:92:5a:2d:92:c2:
         c6:f7:62:c4:5c:a1:fb:f2:a3:06:94:61:4b:dc:48:f0:e8:62:
         b4:0e:a6:ad:c7:0e:8b:be:d6:35:c7:1d:40:6f:f9:81:39:de:
         12:8b:8d:3e:16:57:6d:fc:ad:24:e2:6c:19:b9:96:c3:47:09:
         4d:ed:a1:23:b1:3f:0a:7d:58:62:6b:e0:49:f9:c1:aa:9a:1f:
         c0:49:e4:e3:a1:d8:70:1c:ee:5a:d4:56:21:a7:60:51:40:5c:
         aa:45:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:20 2025 by rpki-client