Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa
File:                     3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa (raw, json)
Hash identifier:          L0O5DZSoUrJl1zj3FYs/9aa+FoZx+iX7NmYAp5WFyNY=
Subject key identifier:   76:A8:3C:57:79:C4:67:D5:A1:7D:EB:8D:A9:58:D9:06:11:C6:2B:36
Certificate issuer:       /CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
Certificate serial:       461D4F57435529ED43177AFC20F0384683F16CF3
Authority key identifier: E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa
Signing time:             Tue 04 Feb 2025 18:02:38 +0000
ROA not before:           Tue 04 Feb 2025 17:57:38 +0000
ROA not after:            Tue 03 Feb 2026 18:02:38 +0000
asID:                     263824
IP address blocks:        170.254.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl
                          rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:1d:4f:57:43:55:29:ed:43:17:7a:fc:20:f0:38:46:83:f1:6c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2930E0E37A0FC0020E88ADC7667FBA37A6DB802
        Validity
            Not Before: Feb  4 17:57:38 2025 GMT
            Not After : Feb  3 18:02:38 2026 GMT
        Subject: CN=76A83C5779C467D5A17DEB8DA958D90611C62B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:ac:5d:f6:ad:88:e1:cb:79:e6:76:bb:d3:
                    41:84:19:24:5e:2d:8d:b4:ae:6d:c4:b7:a3:83:5e:
                    96:5c:a0:ed:05:f0:6c:fe:38:80:70:26:78:b4:5b:
                    09:63:3c:cd:b7:de:95:e0:fa:ee:35:2f:9b:2f:cb:
                    56:13:2a:b6:04:0b:51:a5:d0:d3:da:9d:1e:77:d2:
                    76:fc:3f:09:e3:b9:b3:7c:f6:59:48:8c:3e:8e:74:
                    51:5d:84:db:86:aa:8a:24:3d:18:c4:50:18:3e:ab:
                    1b:d2:b6:a5:1b:87:c6:7a:cf:11:d8:17:25:36:45:
                    b0:a9:56:2a:17:a5:66:ee:48:65:3a:ce:59:12:06:
                    0b:4b:db:09:cc:8e:62:1e:5b:cb:91:dd:34:ac:83:
                    7d:cc:f4:0d:14:77:02:79:6e:7a:fe:ad:8b:95:02:
                    bb:f3:9b:94:7d:97:08:0d:b3:5c:ae:b7:b6:35:2b:
                    81:c6:56:31:76:94:6e:b4:ea:39:ff:05:0c:4f:bd:
                    8f:3d:3d:7c:0f:cf:54:17:6e:19:e3:af:5b:1a:a5:
                    74:be:e2:ff:be:0b:20:b8:37:7e:bb:39:e2:ea:d9:
                    22:3e:2b:95:65:3d:e8:4b:d2:26:6c:0e:74:ba:0f:
                    b2:be:dc:3c:a1:68:fe:b5:84:e2:0c:65:e9:58:a0:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A8:3C:57:79:C4:67:D5:A1:7D:EB:8D:A9:58:D9:06:11:C6:2B:36
            X509v3 Authority Key Identifier:
                keyid:E2:93:0E:0E:37:A0:FC:00:20:E8:8A:DC:76:67:FB:A3:7A:6D:B8:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2930E0E37A0FC0020E88ADC7667FBA37A6DB802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/738FA7C15AC7C0787ECF79BB826D23C4F9ADE9BD7D58886DB1E6925FD3D46B12/0/3137302e3235342e31362e302f32322d3234203d3e20323633383234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:f9:08:08:8c:c4:6a:9e:18:ab:f5:72:36:5a:c2:85:e1:
         70:2a:3d:b1:c8:0f:ac:07:37:37:8c:bd:60:cf:ff:13:33:b3:
         5e:38:41:2c:45:ac:24:8c:88:81:98:15:99:b6:67:5d:65:63:
         95:4b:63:35:46:67:55:05:0c:15:7e:36:c3:6f:26:38:bc:5e:
         04:a3:10:c1:34:02:0f:0e:2c:f8:e5:86:a3:cc:cd:02:aa:37:
         1d:4e:eb:27:8a:9e:b9:cf:89:1b:6b:34:56:33:cd:83:98:eb:
         2f:d4:60:cb:24:16:30:bf:24:46:1a:7a:c1:f3:c0:f1:89:f8:
         d1:9b:56:ea:81:4c:5f:c8:ff:cb:6f:c0:94:4b:b8:18:c8:d5:
         b3:11:96:ab:25:68:d5:49:66:ad:04:08:9e:29:f0:39:bb:db:
         fe:e1:f9:a8:c0:b9:2f:29:33:02:f8:77:5a:f9:f1:27:ce:ce:
         be:5a:1c:f8:93:80:cf:5e:db:e0:d7:7a:2c:22:42:1d:92:68:
         70:75:3b:69:05:05:ad:a8:9c:e4:3c:50:9b:e7:79:26:e1:96:
         9e:5b:66:01:e1:02:66:82:f2:4b:0b:44:13:2a:a8:0d:17:e7:
         bc:33:4e:35:46:98:fa:6b:7f:ad:10:d7:6d:2e:1e:32:5d:eb:
         54:d6:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:22:20 2025 by rpki-client on console.sobornost.net