Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa
File:                     3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa (raw, json)
Hash identifier:          UjgpjMYEPAZ4yrU71n4hrRUzgUZRnU4TIu26PmB7iOY=
Subject key identifier:   87:98:0D:2C:6F:E9:30:D1:37:79:0B:F2:64:79:F6:5B:27:2B:CF:F8
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       266E0A2074504DE9F15E8C4653F8A2EAB6AAA96A
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa
Signing time:             Tue 05 Mar 2024 18:22:52 +0000
ROA not before:           Tue 05 Mar 2024 18:17:52 +0000
ROA not after:            Tue 04 Mar 2025 18:22:52 +0000
asID:                     263186
IP address blocks:        170.210.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 19:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:6e:0a:20:74:50:4d:e9:f1:5e:8c:46:53:f8:a2:ea:b6:aa:a9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:52 2024 GMT
            Not After : Mar  4 18:22:52 2025 GMT
        Subject: CN=87980D2C6FE930D137790BF26479F65B272BCFF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:11:0f:84:9b:f5:56:00:c7:08:b9:85:24:91:
                    ae:ef:97:4f:f6:49:1d:09:59:8d:4c:28:9a:d3:a6:
                    98:3a:e0:d2:54:2b:e8:03:d4:f1:d8:ba:e5:a6:3e:
                    77:15:4b:4c:a9:db:2b:3c:ab:53:17:32:a0:71:65:
                    2e:6f:3b:c2:96:b6:f6:5c:96:60:84:7c:26:81:c6:
                    2f:18:67:46:43:e8:68:da:dc:a2:d9:7b:74:63:4d:
                    a4:56:cd:b4:fa:e1:90:ce:95:6f:28:17:1f:af:96:
                    a8:18:8e:ca:13:b0:6a:cc:88:07:27:db:ac:84:91:
                    8f:e7:24:9b:f4:84:78:5d:53:03:88:87:ad:17:66:
                    6f:ec:43:9b:21:e7:93:44:18:8e:d3:1d:e4:5a:a2:
                    88:2a:0d:8b:86:c6:47:cf:77:48:be:29:f6:33:52:
                    6a:31:7c:de:01:9e:d1:a8:ff:cc:45:6d:91:ad:d4:
                    95:3e:f4:04:b9:d5:bd:bb:3d:68:fa:0d:6c:27:92:
                    50:58:09:36:74:49:f8:7a:6b:9b:b5:d3:11:89:c0:
                    bb:59:ec:82:b3:a8:70:d5:b6:03:3e:ce:7d:67:bb:
                    e7:b0:c9:ea:5d:cb:6e:57:f0:2f:4e:d7:f5:68:59:
                    be:8c:f0:13:1a:25:a7:cd:39:a3:31:72:c4:04:0d:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:98:0D:2C:6F:E9:30:D1:37:79:0B:F2:64:79:F6:5B:27:2B:CF:F8
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e35322e302f32322d3234203d3e20323633313836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:28:d8:38:09:c6:fa:ad:61:e4:0e:d6:ec:d0:d3:93:78:
         df:e1:ea:d9:21:fb:fc:f2:2c:d4:09:69:57:f4:c0:01:c1:f2:
         e5:73:d5:0b:81:49:c2:d4:20:ab:6f:70:58:cc:60:52:8f:21:
         17:9b:a1:7e:4c:d9:cf:bf:c0:96:b3:e7:03:d5:72:21:16:b3:
         4a:7a:44:28:cd:bd:aa:12:7f:49:17:ce:68:4c:9e:45:b6:73:
         81:17:35:ff:a7:d1:ec:6a:24:68:e9:5d:e3:da:19:12:36:bb:
         e8:b1:18:30:44:82:20:db:27:4e:39:c2:c3:9a:aa:a1:2e:cf:
         43:de:c3:ac:96:8b:71:12:bc:33:61:e6:c4:12:b7:f9:b3:7e:
         9b:f0:4f:3b:1b:d6:3a:4c:f9:be:8b:59:c9:f5:6a:25:8b:60:
         f1:cb:68:67:3d:34:d0:ff:bc:42:f4:02:3a:e5:92:08:c4:30:
         eb:26:f4:90:4f:e1:5a:ff:8c:0d:73:3f:cf:e0:46:4c:dd:22:
         94:8e:22:85:c2:39:08:97:07:7e:2e:3d:e7:ef:84:a8:1b:19:
         e4:4b:f3:59:70:a0:2f:da:de:0a:3d:ad:db:48:44:01:61:6d:
         ed:76:57:1c:8a:49:4a:b5:91:78:11:b0:a9:94:31:ce:fa:53:
         dc:dd:8e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 10:00:12 2024 by rpki-client on console-fra.rpki-client.org