Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa
File:                     3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa (raw, json)
Hash identifier:          EqsSaCt8bWlKbQxBJ4+VRsUziVKjMJDVV+4mGez7uEE=
Subject key identifier:   E0:CE:BF:DF:64:D9:D2:61:B5:3F:D3:CE:C5:AC:7D:6E:AA:A5:A8:34
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       7C978A517028DB8693887FA143BEBC1120F8189B
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa
Signing time:             Wed 07 May 2025 19:17:59 +0000
ROA not before:           Wed 07 May 2025 19:12:59 +0000
ROA not after:            Wed 06 May 2026 19:17:59 +0000
asID:                     264844
IP address blocks:        170.244.88.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 11 May 2025 08:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:97:8a:51:70:28:db:86:93:88:7f:a1:43:be:bc:11:20:f8:18:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: May  7 19:12:59 2025 GMT
            Not After : May  6 19:17:59 2026 GMT
        Subject: CN=E0CEBFDF64D9D261B53FD3CEC5AC7D6EAAA5A834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:f5:13:3d:f5:db:18:64:bc:87:cc:75:f4:
                    4a:94:09:14:60:b9:08:05:32:0a:a1:a9:ab:52:de:
                    d8:02:f6:4c:8f:b2:00:59:4b:2e:62:e2:5f:b5:e8:
                    12:23:70:08:4a:cf:96:b1:c0:b6:8b:81:5b:f3:2f:
                    af:e3:34:af:8d:16:2e:ec:01:37:ac:78:ee:b9:c0:
                    24:a5:c0:6e:ab:54:4d:ab:7b:99:2f:f4:13:49:3a:
                    69:c3:2f:b0:95:ad:f0:08:46:50:6d:19:27:92:eb:
                    98:b4:83:36:a7:4b:b6:d7:90:43:0b:a1:14:64:82:
                    e1:12:a1:58:dd:27:28:2a:28:f1:4a:6c:93:cd:01:
                    b0:c6:16:26:43:5e:b7:c2:49:b1:a8:5a:4e:c2:20:
                    b0:63:76:f2:a8:b5:29:8e:7d:6e:45:7b:21:81:a4:
                    07:0d:b8:bd:d9:93:f2:33:b5:da:3b:88:73:43:c2:
                    61:a8:c6:2a:8d:f0:63:02:19:0e:85:05:cc:77:19:
                    79:df:16:a1:87:c5:f0:1b:a5:90:08:82:8d:61:4d:
                    0f:30:54:0f:e1:63:d8:75:ed:1f:46:4a:6a:f4:30:
                    5d:2c:08:69:85:45:fd:03:0e:87:41:8f:9b:56:5d:
                    1b:26:37:67:32:e0:0e:7f:88:28:be:19:66:e9:18:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CE:BF:DF:64:D9:D2:61:B5:3F:D3:CE:C5:AC:7D:6E:AA:A5:A8:34
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32322d3234203d3e20323634383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:f9:18:7e:d5:d4:05:10:68:34:7e:47:ec:73:fb:c1:1a:79:
         04:2c:e6:ff:9c:fb:23:94:41:14:e8:74:d2:5a:8c:e6:27:6a:
         b2:af:00:ad:3c:26:b3:49:04:69:d5:80:12:1d:0d:69:e0:fe:
         5c:aa:d1:7b:b0:e1:2c:6c:a7:1c:f6:d7:f3:74:d8:34:41:fa:
         29:e5:a7:7e:44:86:bb:59:b1:dd:81:dc:5b:c9:e8:3b:a5:a5:
         0e:b5:47:08:85:81:6c:f4:bf:d9:07:62:8c:3d:4f:23:f0:2a:
         79:fb:da:1b:ee:5e:51:bd:87:0b:45:23:5e:3f:11:51:b7:32:
         a1:d1:43:37:e4:04:89:06:17:b4:a9:21:b8:df:61:a0:93:39:
         77:26:26:c0:6b:52:38:0c:64:10:d0:66:93:75:8b:70:43:5c:
         f9:96:82:0d:27:6b:6f:90:40:ae:ac:fe:2c:b1:0c:a6:ed:66:
         f7:9b:27:d9:12:80:a8:08:e7:c9:7c:f1:e4:13:00:9f:fb:6c:
         2d:b6:91:5a:5d:7b:ca:44:29:ff:ff:56:72:fb:b3:56:4a:90:
         36:9b:9c:10:1e:4a:40:16:57:c7:fa:bc:5e:bf:64:ac:d6:95:
         9e:33:94:70:89:23:ad:4a:76:e6:b7:59:73:3e:82:4e:85:35:
         48:65:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 01:03:18 2025 by rpki-client