Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
File:                     3137302e3233332e37322e302f32322d3232203d3e203333333932.roa (raw, json)
Hash identifier:          lAWJVLWpStF/SgXWukvF41svNVKbu8ytfZwh6og53do=
Subject key identifier:   C6:46:5B:E9:F1:44:74:D8:D5:0B:4B:94:4B:09:AD:2C:53:39:10:55
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       5EFE78CF826006F2670724CA123A1614E35027F3
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
Signing time:             Fri 04 Apr 2025 14:13:56 +0000
ROA not before:           Fri 04 Apr 2025 14:08:56 +0000
ROA not after:            Fri 03 Apr 2026 14:13:56 +0000
asID:                     33392
IP address blocks:        170.233.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:fe:78:cf:82:60:06:f2:67:07:24:ca:12:3a:16:14:e3:50:27:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  4 14:08:56 2025 GMT
            Not After : Apr  3 14:13:56 2026 GMT
        Subject: CN=C6465BE9F14474D8D50B4B944B09AD2C53391055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:13:06:af:a1:56:7e:1b:19:e8:a7:c3:80:
                    75:94:11:c0:32:2a:aa:3c:e0:9b:fd:ef:b4:29:32:
                    44:c4:0b:b1:2e:cf:59:76:0e:01:36:fa:76:71:04:
                    73:c9:90:ea:42:ba:ee:d6:d7:90:d7:d9:ea:c1:6f:
                    1f:e4:1f:74:d2:4f:05:40:62:c7:61:94:4a:4e:68:
                    ee:15:2e:93:37:c7:e8:9a:15:35:ad:9c:96:f2:74:
                    af:ff:97:72:6b:4f:0f:69:9a:ed:e8:21:64:67:53:
                    e0:e5:15:06:73:3c:fe:bb:a4:fc:cc:6a:b6:eb:27:
                    9f:7b:2d:1c:8b:29:f6:2d:70:a1:5e:90:64:ad:d8:
                    38:37:c4:d0:e3:4c:be:33:bd:59:ec:0f:23:87:b3:
                    f5:4f:ad:bc:67:1a:34:a4:fe:eb:a0:48:ed:0b:3a:
                    79:76:18:a9:f2:e2:4c:4e:d4:59:fe:7f:49:62:e7:
                    19:1e:a9:f8:b4:96:0a:5b:4c:6a:22:5c:f5:89:34:
                    ad:2e:fb:7d:0d:90:44:ac:1e:fc:b8:f1:cb:bf:6f:
                    a0:03:b0:40:6f:f0:03:9e:69:c9:9c:0c:29:66:6d:
                    5d:06:24:a3:35:14:dd:8d:ba:a3:fa:60:f6:e7:32:
                    74:af:31:5a:a5:4c:56:e6:2f:39:af:9f:9d:81:e2:
                    aa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:5B:E9:F1:44:74:D8:D5:0B:4B:94:4B:09:AD:2C:53:39:10:55
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:d1:9f:13:6f:2c:ec:c7:33:23:08:7e:45:2a:81:77:78:2f:
         da:dd:70:18:49:ab:19:95:fa:58:9f:ff:62:ab:cd:68:e3:f2:
         d4:12:aa:6c:c3:0b:d6:1e:95:fa:66:32:10:2c:a3:53:cb:96:
         a5:8f:ae:a0:71:20:65:2e:95:6f:54:bb:8b:4f:8e:b3:3b:f1:
         37:f5:b6:53:88:c9:19:c0:21:de:56:b1:0f:aa:10:04:57:5e:
         2a:b6:f9:68:1b:6c:00:5e:5b:b7:4c:a0:7d:d4:d0:77:35:c7:
         e3:7c:e8:c9:e2:6a:3d:47:b5:97:36:4f:0a:d0:61:cb:21:9a:
         fb:0d:9a:7b:6c:0e:fb:b6:37:eb:4f:98:79:8e:8a:b8:47:05:
         07:7b:86:91:41:9e:5e:f2:20:6d:be:d6:9d:96:f2:d7:f0:e4:
         8a:f9:27:1d:4c:30:f6:4a:93:01:96:38:da:e6:e5:14:48:98:
         40:a7:14:f6:23:fb:e8:28:1f:54:33:72:bd:99:67:01:fb:07:
         ae:7e:93:69:da:76:18:16:0e:5b:88:3d:1c:21:8c:83:18:ab:
         70:46:c1:25:b9:9b:ad:33:76:3e:97:00:6f:e5:80:fd:c8:60:
         3a:0a:22:00:44:40:92:b6:e8:0e:32:49:5f:e7:70:07:9b:95:
         1b:66:1b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:32 2025 by rpki-client on console.sobornost.net