Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/3136342e3136332e37322e302f32322d3234203d3e20323635373637.roa
File:                     3136342e3136332e37322e302f32322d3234203d3e20323635373637.roa (raw, json)
Hash identifier:          HYKP7X3KaS70CiIxGVbvSZkWm1UPvtacUtZ4vmgIb8U=
Subject key identifier:   9C:B6:DA:34:A4:24:81:85:9A:33:45:D6:E8:A4:39:AF:67:B9:37:B7
Certificate issuer:       /CN=C70069EFF2F9CA7E54ED5E13065838E0D870A845
Certificate serial:       449A6794A9A690A0389FC9A626867C4A4FC41EBB
Authority key identifier: C7:00:69:EF:F2:F9:CA:7E:54:ED:5E:13:06:58:38:E0:D8:70:A8:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/3136342e3136332e37322e302f32322d3234203d3e20323635373637.roa
Signing time:             Tue 04 Feb 2025 18:36:08 +0000
ROA not before:           Tue 04 Feb 2025 18:31:08 +0000
ROA not after:            Tue 03 Feb 2026 18:36:08 +0000
asID:                     265767
IP address blocks:        164.163.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9a:67:94:a9:a6:90:a0:38:9f:c9:a6:26:86:7c:4a:4f:c4:1e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C70069EFF2F9CA7E54ED5E13065838E0D870A845
        Validity
            Not Before: Feb  4 18:31:08 2025 GMT
            Not After : Feb  3 18:36:08 2026 GMT
        Subject: CN=9CB6DA34A42481859A3345D6E8A439AF67B937B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:03:8b:56:c6:34:ae:e7:e5:13:69:d1:0f:
                    c7:63:76:47:63:ab:d1:3a:3b:d8:b2:a0:f3:95:d9:
                    90:b0:93:c0:9e:b5:fe:41:cf:5e:4b:dd:f1:ab:b8:
                    f8:09:76:91:60:fc:3a:a9:d3:52:3b:c3:ee:29:c9:
                    90:69:52:2f:f0:4f:f3:ac:b5:18:22:1e:4e:b9:71:
                    9c:18:62:d7:1b:4f:fb:c3:7c:d6:20:14:f1:90:f6:
                    4e:dd:22:78:61:70:14:c5:4f:b3:d3:47:3a:98:16:
                    08:d0:5f:fd:24:ce:51:bb:66:38:c7:77:d6:1b:53:
                    f3:ad:9f:f4:48:bf:c1:d4:15:01:7e:b3:0f:a9:aa:
                    0a:45:39:39:01:eb:73:48:c6:81:32:38:8f:ac:4d:
                    e5:fe:05:0f:2c:04:7a:42:10:9c:e1:7b:4a:e5:55:
                    ac:b9:4f:af:ad:48:63:78:a9:f9:5d:67:fb:96:b0:
                    65:db:59:9a:d8:dc:b4:9c:2e:aa:62:c4:70:60:a4:
                    cf:96:f6:97:25:b3:2e:2d:21:f1:69:03:f2:c4:81:
                    75:79:f3:7d:e2:f3:21:4a:9c:18:7d:21:d9:59:e6:
                    9f:72:0e:91:9c:20:69:90:e7:c6:7c:79:a3:d2:ae:
                    bf:e8:4f:77:58:a1:f0:50:04:99:ab:2c:6c:64:cc:
                    ff:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B6:DA:34:A4:24:81:85:9A:33:45:D6:E8:A4:39:AF:67:B9:37:B7
            X509v3 Authority Key Identifier:
                keyid:C7:00:69:EF:F2:F9:CA:7E:54:ED:5E:13:06:58:38:E0:D8:70:A8:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C70069EFF2F9CA7E54ED5E13065838E0D870A845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD69AF6E88228B38A0B4AD4348080109D188BF614AE140AE9A0107EFC33061FA/0/3136342e3136332e37322e302f32322d3234203d3e20323635373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:0e:5a:ed:ed:eb:69:df:20:46:8a:70:45:d6:1d:dc:3f:7a:
         3c:11:56:1f:33:8d:10:35:35:d2:13:a7:da:d0:bb:24:1c:11:
         0c:d5:9a:8c:82:21:20:fc:e1:d1:66:49:90:ad:be:30:7c:52:
         e3:25:52:a3:a4:4d:8e:c9:96:dd:1d:f0:c2:c4:b6:5f:d5:b4:
         c1:e4:29:fc:48:a4:e1:aa:85:35:0e:e6:8c:de:49:d5:04:4c:
         bd:a1:c2:2a:ab:77:aa:19:e1:bd:08:e9:e3:24:53:f9:6d:d1:
         5c:35:70:4a:71:96:a7:e4:ca:73:91:66:88:bf:66:a8:55:b5:
         ce:5a:e4:90:1b:e3:67:d3:8c:21:42:96:37:12:09:29:33:1f:
         a2:06:65:1a:90:6d:9f:d5:35:8a:50:3f:ac:7c:9a:c1:a4:f0:
         4f:e2:e0:5c:6a:58:61:e6:79:ee:2e:e5:a7:86:a5:f8:4a:06:
         50:f1:1f:bf:36:95:e4:f6:91:f8:96:33:06:cb:94:82:55:67:
         62:8e:4f:25:7b:c9:7a:8f:4c:f0:0f:86:59:a6:35:b7:c2:8a:
         a2:44:6f:11:4d:7d:1c:8c:0b:46:1e:7b:59:96:cc:71:5b:74:
         21:40:a5:c8:55:55:f2:46:55:94:69:66:83:ba:65:ae:2c:69:
         56:47:84:c9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIURJpnlKmmkKA4n8mmJoZ8Sk/EHrswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzcwMDY5RUZGMkY5Q0E3RTU0RUQ1RTEzMDY1ODM4RTBE
ODcwQTg0NTAeFw0yNTAyMDQxODMxMDhaFw0yNjAyMDMxODM2MDhaMDMxMTAvBgNV
BAMTKDlDQjZEQTM0QTQyNDgxODU5QTMzNDVENkU4QTQzOUFGNjdCOTM3QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPtQOLVsY0ruflE2nRD8djdkdj
q9E6O9iyoPOV2ZCwk8Cetf5Bz15L3fGruPgJdpFg/Dqp01I7w+4pyZBpUi/wT/Os
tRgiHk65cZwYYtcbT/vDfNYgFPGQ9k7dInhhcBTFT7PTRzqYFgjQX/0kzlG7ZjjH
d9YbU/Otn/RIv8HUFQF+sw+pqgpFOTkB63NIxoEyOI+sTeX+BQ8sBHpCEJzhe0rl
Vay5T6+tSGN4qfldZ/uWsGXbWZrY3LScLqpixHBgpM+W9pclsy4tIfFpA/LEgXV5
833i8yFKnBh9IdlZ5p9yDpGcIGmQ58Z8eaPSrr/oT3dYofBQBJmrLGxkzP9jAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUnLbaNKQkgYWaM0XW6KQ5r2e5N7cwHwYDVR0j
BBgwFoAUxwBp7/L5yn5U7V4TBlg44NhwqEUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERDY5QUY2RTg4MjI4QjM4QTBCNEFENDM0ODA4MDEwOUQx
ODhCRjYxNEFFMTQwQUU5QTAxMDdFRkMzMzA2MUZBLzAvQzcwMDY5RUZGMkY5Q0E3
RTU0RUQ1RTEzMDY1ODM4RTBEODcwQTg0NS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzAwNjlFRkYyRjlDQTdFNTRF
RDVFMTMwNjU4MzhFMEQ4NzBBODQ1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREQ2OUFGNkU4ODIyOEIzOEEwQjRBRDQzNDgwODAxMDlEMTg4QkY2MTRB
RTE0MEFFOUEwMTA3RUZDMzMwNjFGQS8wLzMxMzYzNDJlMzEzNjMzMmUzNzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM1MzczNjM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpKNI
MA0GCSqGSIb3DQEBCwUAA4IBAQAbDlrt7etp3yBGinBF1h3cP3o8EVYfM40QNTXS
E6fa0LskHBEM1ZqMgiEg/OHRZkmQrb4wfFLjJVKjpE2OyZbdHfDCxLZf1bTB5Cn8
SKThqoU1DuaM3knVBEy9ocIqq3eqGeG9COnjJFP5bdFcNXBKcZan5MpzkWaIv2ao
VbXOWuSQG+Nn04whQpY3EgkpMx+iBmUakG2f1TWKUD+sfJrBpPBP4uBcalhh5nnu
LuWnhqX4SgZQ8R+/NpXk9pH4ljMGy5SCVWdijk8le8l6j0zwD4ZZpjW3woqiRG8R
TX0cjAtGHntZlsxxW3QhQKXIVVXyRlWUaWaDumWuLGlWR4TJ
-----END CERTIFICATE-----
Generated at Sat Apr 26 18:18:06 2025 by rpki-client on console.sobornost.net