Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3137302e3234372e39322e302f32322d3232203d3e20323633373834.roa
File:                     3137302e3234372e39322e302f32322d3232203d3e20323633373834.roa (raw, json)
Hash identifier:          4ZC9sWKl3SJ9srIc361WQ1C5vGr6rRKPE75nzUGmrvM=
Subject key identifier:   21:59:15:C0:19:A0:AF:A8:73:C1:7B:F0:9D:22:53:D7:4F:1F:53:8C
Certificate issuer:       /CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
Certificate serial:       1E7327410B40169EB36BF1E8B1FD2B41EE57A98F
Authority key identifier: C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3137302e3234372e39322e302f32322d3232203d3e20323633373834.roa
Signing time:             Tue 04 Feb 2025 18:04:10 +0000
ROA not before:           Tue 04 Feb 2025 17:59:10 +0000
ROA not after:            Tue 03 Feb 2026 18:04:10 +0000
asID:                     263784
IP address blocks:        170.247.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 22 Apr 2025 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:73:27:41:0b:40:16:9e:b3:6b:f1:e8:b1:fd:2b:41:ee:57:a9:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF
        Validity
            Not Before: Feb  4 17:59:10 2025 GMT
            Not After : Feb  3 18:04:10 2026 GMT
        Subject: CN=215915C019A0AFA873C17BF09D2253D74F1F538C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:41:e6:26:a0:2b:96:c9:92:b8:af:5b:df:
                    b3:e4:c7:45:4b:0b:d0:11:c5:1b:bb:85:1c:54:0b:
                    71:27:cd:aa:27:99:bb:7d:94:e1:10:9d:0d:19:41:
                    47:e1:cc:f5:1d:ca:50:e0:23:8a:72:55:f1:7c:48:
                    b5:aa:cf:b5:1b:70:6a:4e:86:7d:ba:e9:73:e7:5f:
                    1e:41:61:98:c3:78:84:22:e1:7f:f3:dd:d3:7a:b9:
                    98:a6:4d:3d:14:f7:cc:6b:91:f0:ee:2e:1f:39:2e:
                    c3:6d:bb:03:e1:9b:82:30:65:38:a9:5e:95:9d:34:
                    47:5e:68:1a:8a:52:b2:ee:e6:ae:be:75:45:58:0b:
                    a5:e3:0b:08:9d:cd:20:7f:3d:be:cf:ce:b5:c6:c4:
                    7e:88:f4:72:0a:a1:80:45:52:c8:11:22:81:ac:56:
                    d8:43:15:85:10:5b:5f:d5:72:ff:35:c0:90:01:08:
                    52:65:f3:6a:c9:80:06:9a:2f:90:df:a9:5a:6f:51:
                    b7:42:ed:2f:68:bd:cb:36:4a:1a:35:b8:c4:46:f8:
                    38:94:e1:09:58:39:18:44:c9:c1:62:2b:f9:cc:1b:
                    09:c1:32:14:3f:62:0f:7c:40:62:0f:12:11:6a:54:
                    e5:08:2a:3b:a8:c9:f6:de:05:69:dc:28:0d:b9:27:
                    6b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:59:15:C0:19:A0:AF:A8:73:C1:7B:F0:9D:22:53:D7:4F:1F:53:8C
            X509v3 Authority Key Identifier:
                keyid:C3:CB:DB:DE:17:C8:2D:ED:B6:D5:BB:01:F2:F2:CA:E6:30:2F:69:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3CBDBDE17C82DEDB6D5BB01F2F2CAE6302F69AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FD2FD4E1ADB68D311D3D77E5128E398A0730F0FA97A05C8630EA57DA454400FA/0/3137302e3234372e39322e302f32322d3232203d3e20323633373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ab:2d:be:b5:11:0f:ca:2a:ef:d8:4a:3a:29:8c:90:6b:70:f8:
         3a:7e:d6:83:51:5d:d8:05:67:ef:26:b5:fa:7e:bb:c4:f0:77:
         00:48:d2:16:9c:38:ee:c3:db:0a:f6:29:c8:32:87:71:43:fe:
         7b:c2:56:69:75:6e:8f:2e:c4:83:f4:a6:78:97:93:0e:90:2b:
         2f:20:f3:8c:3e:45:41:04:ce:cd:fc:6a:92:0e:9a:89:af:74:
         f8:90:5d:22:28:98:9c:08:a0:a3:ab:ee:ed:21:3e:3e:c7:fa:
         bc:c5:9b:75:d0:69:f7:6c:a5:c2:c5:6a:d3:7e:75:af:0d:10:
         a1:16:ef:58:fa:1a:b7:16:85:6b:d3:bd:f1:e8:21:fd:8d:b9:
         38:b1:07:20:f2:e5:33:63:ef:8f:86:1c:75:fa:c3:5a:15:8a:
         c0:e8:79:0c:0b:f4:d5:e7:71:f3:48:cf:39:8b:a8:62:97:e6:
         51:c5:94:e4:b4:0b:e2:45:60:36:85:c4:06:5f:f3:e5:d1:65:
         fa:86:af:ba:57:04:b0:0a:29:32:82:1d:21:28:65:59:d3:58:
         82:aa:9f:02:18:fe:c5:00:31:eb:8a:01:c0:9c:52:ad:35:90:
         a2:53:cc:37:15:08:e9:26:2f:8b:6a:0b:be:a2:c3:95:a7:13:
         74:fd:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:40:48 2025 by rpki-client