Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e20323632313631.roa
File:                     3137302e3234372e3136302e302f32322d3234203d3e20323632313631.roa (raw, json)
Hash identifier:          iBm846ZQ/QAGyNNtLivuhvxnyTPdRrWrGM7mWB6m74Y=
Subject key identifier:   E1:7C:E4:5A:12:19:05:91:75:96:C7:33:E4:2F:A0:73:57:FC:5A:EA
Certificate issuer:       /CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
Certificate serial:       63A73941ED6A7095067BC37814EFA529108A9764
Authority key identifier: 4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e20323632313631.roa
Signing time:             Wed 09 Apr 2025 03:40:00 +0000
ROA not before:           Wed 09 Apr 2025 03:35:00 +0000
ROA not after:            Wed 08 Apr 2026 03:40:00 +0000
asID:                     262161
IP address blocks:        170.247.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 01 May 2025 04:18:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a7:39:41:ed:6a:70:95:06:7b:c3:78:14:ef:a5:29:10:8a:97:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B84C283EBC8873151EF0DFD0D5E4DB824C81206
        Validity
            Not Before: Apr  9 03:35:00 2025 GMT
            Not After : Apr  8 03:40:00 2026 GMT
        Subject: CN=E17CE45A121905917596C733E42FA07357FC5AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:dc:76:7c:12:27:53:0c:1b:72:5c:4f:0a:
                    57:d4:68:ff:51:5f:57:bb:0a:8c:a9:0c:f8:40:65:
                    2c:01:5b:4a:db:a4:61:d3:a9:0d:07:94:89:06:e6:
                    33:3c:ba:50:4e:0c:69:86:f6:8d:0c:05:8b:c9:45:
                    b8:66:e9:ce:e2:0f:44:cf:a8:d4:d7:d2:18:f5:59:
                    63:c9:9b:47:d7:b4:b0:56:1d:b1:0f:0a:76:c2:74:
                    e6:2c:29:38:85:df:61:90:c0:35:1a:3a:3b:2d:18:
                    2c:71:9b:78:46:7a:e1:1e:7a:47:c8:21:f0:7b:de:
                    22:c1:21:67:45:89:60:b3:13:5b:7f:a9:e6:e7:65:
                    1b:7b:5e:df:05:a6:c9:21:f8:6d:8d:48:9b:d2:56:
                    2a:13:7f:31:69:98:d4:d5:9c:a1:d8:83:4d:1d:e2:
                    3b:28:10:bc:be:49:81:62:08:cf:aa:97:18:bd:51:
                    35:41:0f:22:da:39:34:b0:45:31:03:59:62:df:10:
                    4c:d6:c6:7a:48:3c:c4:a6:98:e2:22:bc:29:68:da:
                    f3:00:9f:58:7d:74:c8:cc:37:5e:54:35:29:71:73:
                    73:25:de:af:f4:f0:ca:78:10:6f:45:2a:bd:67:ba:
                    30:91:e9:0a:0c:0a:75:0c:52:af:b5:0e:f7:48:48:
                    c8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7C:E4:5A:12:19:05:91:75:96:C7:33:E4:2F:A0:73:57:FC:5A:EA
            X509v3 Authority Key Identifier:
                keyid:4B:84:C2:83:EB:C8:87:31:51:EF:0D:FD:0D:5E:4D:B8:24:C8:12:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B84C283EBC8873151EF0DFD0D5E4DB824C81206.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB6CCAC3F4E1501BF92DD6FB6023CADCE0BAA5A854AD45C765BDE30D6BB8AEDB/0/3137302e3234372e3136302e302f32322d3234203d3e20323632313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:c8:3f:b3:60:23:0d:4d:76:96:4d:4b:c1:90:08:4b:ea:
         e9:d6:42:be:9e:60:6d:78:d8:74:5a:04:1e:5e:d3:59:3a:23:
         02:17:11:6a:53:77:3c:8c:1e:79:e9:59:4d:44:6d:e9:e5:d6:
         b0:34:d5:52:b6:f0:64:b7:c2:a0:3b:f4:18:6c:11:5f:9c:1c:
         1f:83:f8:87:83:a8:47:95:d8:28:8b:37:52:3b:40:20:13:60:
         84:96:51:b4:de:34:2d:56:7c:68:2d:25:1b:9a:af:77:a9:42:
         99:58:2b:05:94:41:d4:97:f5:de:df:83:a6:b0:b3:61:f7:d2:
         00:9e:94:54:1f:4a:08:e2:bf:97:8e:5e:25:c3:95:71:3e:e5:
         df:20:13:29:05:c7:3c:7a:d0:a6:67:50:67:98:06:ce:db:e2:
         a9:07:ad:f1:bf:91:3b:4a:2d:14:f7:90:aa:18:cd:cc:ed:5d:
         14:49:22:30:3e:98:b2:2e:19:b1:f4:4e:8d:6b:77:eb:a4:dd:
         39:12:82:b5:98:17:e8:19:06:22:11:ed:5e:88:99:86:a7:8d:
         03:f7:ef:e8:ee:76:40:c0:be:ad:47:61:54:13:c9:cb:24:49:
         bf:98:dd:21:3e:d6:25:3b:ec:08:cf:a3:cc:89:32:78:78:a9:
         13:8a:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:40:32 2025 by rpki-client on console.sobornost.net