Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa
File:                     3137302e3233332e37322e302f32322d3232203d3e203336353131.roa (raw, json)
Hash identifier:          uIoLgDmyEXnR7J0PtERsxMnKtiWzB4wrz1hUNvjpYow=
Subject key identifier:   08:3C:25:34:94:E7:93:A1:3F:9E:81:AE:CD:2F:F0:D2:32:21:89:65
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       68880BED714400D36AFA1F8EDF5B36E09407429E
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa
Signing time:             Tue 01 Apr 2025 21:13:39 +0000
ROA not before:           Tue 01 Apr 2025 21:08:39 +0000
ROA not after:            Tue 31 Mar 2026 21:13:39 +0000
asID:                     36511
IP address blocks:        170.233.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 30 Apr 2025 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:0b:ed:71:44:00:d3:6a:fa:1f:8e:df:5b:36:e0:94:07:42:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: Apr  1 21:08:39 2025 GMT
            Not After : Mar 31 21:13:39 2026 GMT
        Subject: CN=083C253494E793A13F9E81AECD2FF0D232218965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:4f:99:c4:5e:08:dc:09:0a:12:8b:36:f1:
                    9a:a8:eb:e4:6f:8c:77:90:49:0d:6d:c7:fb:cf:16:
                    89:bc:d5:1f:3d:92:e3:5d:e2:0a:70:d0:03:7c:dd:
                    d0:df:79:7c:23:e2:11:e4:0d:a8:06:bb:5d:3c:59:
                    a2:88:fd:cc:43:f2:55:13:f7:88:30:8d:4c:b8:d3:
                    ca:d2:b6:5e:9a:60:bc:42:9d:b3:6d:37:80:6b:9f:
                    e1:e3:47:65:a2:ac:82:82:6b:47:e8:41:91:68:41:
                    db:85:27:b2:68:e3:f3:78:ae:3d:18:6b:e5:f7:60:
                    a6:e9:11:99:70:a1:de:2e:f0:57:5a:b5:01:5b:41:
                    19:d5:06:a7:08:91:20:7a:d4:4b:5b:e0:82:cb:d2:
                    ed:d1:1d:10:7d:c9:1e:af:dc:c4:fb:20:7b:dd:d7:
                    65:b2:8d:8b:0b:41:d5:6d:db:cb:4b:1e:4d:46:37:
                    0d:b7:c0:13:b0:fb:f1:8f:bf:9d:b8:7c:03:c9:67:
                    ed:f8:26:62:36:b7:fe:aa:b2:f8:57:c7:2d:d0:67:
                    1f:16:9a:80:0d:a8:15:73:71:10:d1:bf:2c:ec:10:
                    0d:e1:cc:fb:6f:60:17:88:f9:21:cf:bf:92:af:cd:
                    91:b8:87:ea:6a:66:98:92:da:92:8b:a5:26:f6:25:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3C:25:34:94:E7:93:A1:3F:9E:81:AE:CD:2F:F0:D2:32:21:89:65
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203336353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:3a:9c:aa:db:41:b5:05:b5:e9:73:6a:e0:24:f7:4c:b4:
         f3:60:d0:69:65:21:db:9e:7d:8e:a4:fb:0f:ce:f6:1e:62:57:
         22:af:3f:f4:f2:31:bb:fc:3f:4b:d8:1e:12:5f:c8:9f:b2:40:
         46:cb:ae:52:1e:55:0f:d4:13:40:e4:d5:c3:f0:24:c3:16:2c:
         40:08:f0:60:a6:86:b9:b9:30:5d:44:93:1e:f1:eb:88:cd:78:
         14:f3:21:ea:df:f8:5a:d7:fa:86:27:db:1f:90:bd:09:61:2e:
         1e:01:3b:9d:bc:87:10:5a:3a:87:5f:d6:74:72:7b:4c:53:29:
         df:b5:4c:13:53:b5:4d:f2:9d:bf:dc:be:1a:d4:71:62:e3:97:
         2d:0d:6a:a3:d0:62:7e:40:7c:7a:7a:54:fd:60:ae:80:86:71:
         43:01:49:34:5f:56:db:56:f3:1c:83:8e:bf:6d:3c:f1:69:a1:
         cf:8b:94:da:81:cc:a4:1f:2c:d5:95:93:f0:30:88:f0:cc:ad:
         62:4a:83:27:ba:f2:7a:73:49:d0:d2:ca:a8:d9:eb:8d:83:86:
         92:00:f2:21:48:14:94:be:38:0f:de:46:9d:63:e3:09:93:53:
         3e:8d:f4:8d:7a:07:73:9b:64:01:58:8a:e1:28:4b:4c:dc:80:
         57:eb:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:33:32 2025 by rpki-client on console.sobornost.net