Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
File:                     3137302e38342e3137322e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          9GcTLKvt8r0tUXsqMY3U2/59h80KZWAm/CiiTVdr6Ho=
Subject key identifier:   9A:1A:03:94:07:0C:2B:F1:0C:A0:0E:8A:2D:AD:04:E9:EC:F4:80:35
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       7EC04FBFAC996CACCBA94939F0CA76FA6C4A6B80
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa
Signing time:             Thu 03 Apr 2025 16:55:03 +0000
ROA not before:           Thu 03 Apr 2025 16:50:03 +0000
ROA not after:            Thu 02 Apr 2026 16:55:03 +0000
asID:                     52468
IP address blocks:        170.84.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 02 May 2025 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c0:4f:bf:ac:99:6c:ac:cb:a9:49:39:f0:ca:76:fa:6c:4a:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Apr  3 16:50:03 2025 GMT
            Not After : Apr  2 16:55:03 2026 GMT
        Subject: CN=9A1A0394070C2BF10CA00E8A2DAD04E9ECF48035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:a5:35:cd:76:8d:54:f7:a6:b7:55:e4:37:
                    91:c3:a3:d7:bb:55:5a:4d:9a:0d:fb:4f:df:86:5e:
                    95:0c:95:5d:9f:a7:7a:b1:d6:64:16:07:e7:a4:21:
                    89:85:9d:1a:aa:03:cb:46:0f:60:4e:fa:36:3a:e0:
                    d5:0d:ff:a0:93:e6:ec:f3:91:bf:43:5f:a3:87:94:
                    5d:16:d8:e2:fa:37:c1:29:75:4a:77:65:bc:e2:33:
                    39:c4:50:29:77:80:b7:e2:be:3d:f1:09:98:a5:5b:
                    16:4d:24:9e:15:c4:2a:ac:04:9f:14:00:2f:37:89:
                    60:90:05:f7:a0:3d:13:52:94:ba:ba:c9:fa:78:63:
                    ae:36:68:a1:11:8a:f4:d9:e9:81:0f:96:69:2d:39:
                    09:91:96:54:70:68:fa:12:3a:d6:21:96:df:79:91:
                    f9:db:9e:67:c6:65:22:ae:40:5a:6d:f1:ea:2a:27:
                    5a:d9:32:87:24:ae:68:de:d7:a5:c7:c1:9d:a6:5b:
                    69:db:a0:86:d6:da:4e:34:bc:7f:8b:cb:e0:c7:5b:
                    a0:a7:8c:c7:6f:ec:e4:2a:62:39:a0:fa:3d:8a:e5:
                    1c:62:10:ea:20:23:0b:f2:f9:70:07:de:d0:aa:72:
                    65:5b:67:0f:8a:83:61:a7:b6:92:a3:65:6c:0e:83:
                    ad:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:1A:03:94:07:0C:2B:F1:0C:A0:0E:8A:2D:AD:04:E9:EC:F4:80:35
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/3137302e38342e3137322e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:ba:b1:03:68:9f:cf:d6:a6:13:3d:1d:6b:67:57:9d:be:51:
         85:4d:a9:12:28:91:d3:94:40:33:e1:7e:5d:a7:56:44:3e:96:
         24:64:9d:c0:81:7a:50:c8:41:0e:71:ac:5b:4c:47:68:e2:81:
         58:31:24:64:c1:3c:6b:52:3c:75:c4:00:f7:fc:2c:dc:3d:58:
         f3:fc:df:44:b9:28:bc:d1:76:0b:00:91:50:a4:fe:f0:87:84:
         66:e8:32:32:a9:59:55:bc:74:66:51:79:cb:32:68:c4:e2:d2:
         e4:49:e4:7a:d2:7c:eb:1a:d2:ec:ca:14:06:5a:9a:44:db:b2:
         4f:bd:37:d2:22:d8:17:cf:72:a2:2a:79:dd:dd:35:72:8c:fc:
         41:fa:aa:2f:c7:89:1e:8f:7d:ad:fe:d8:55:45:bf:ac:d1:f6:
         ab:4a:be:10:07:ea:28:4c:81:48:1f:bf:a2:8e:bb:37:4e:90:
         b7:48:68:48:72:a6:96:a9:88:44:8e:31:11:06:37:d1:78:02:
         7d:09:9c:c4:d4:a4:9e:22:11:13:86:05:3a:3b:19:48:bb:4c:
         9f:70:b6:5c:7d:72:fc:58:47:2f:60:9b:75:82:a8:92:02:f8:
         49:4c:09:67:b6:a9:38:8d:b2:f3:7b:26:2f:e0:cd:42:a5:19:
         ec:5c:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:39 2025 by rpki-client on console.sobornost.net