Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3234203d3e20323635363432.roa
File:                     3137302e3234372e3136342e302f32322d3234203d3e20323635363432.roa (raw, json)
Hash identifier:          36lXuLe5YJfRw3+vKpxIf+2uncyLzRFJSdgxeh0ioyo=
Subject key identifier:   DD:58:7E:73:52:34:1C:83:FC:2A:EC:23:E3:03:9B:C0:06:6A:EF:A1
Certificate issuer:       /CN=F180E837FD7EADABAAE544FD4C3108402270D287
Certificate serial:       47C32A8409845CD718CE24AAE0E4582FA3DF299E
Authority key identifier: F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3234203d3e20323635363432.roa
Signing time:             Tue 11 Jun 2024 03:15:00 +0000
ROA not before:           Tue 11 Jun 2024 03:10:00 +0000
ROA not after:            Tue 10 Jun 2025 03:15:00 +0000
asID:                     265642
IP address blocks:        170.247.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl
                          rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c3:2a:84:09:84:5c:d7:18:ce:24:aa:e0:e4:58:2f:a3:df:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F180E837FD7EADABAAE544FD4C3108402270D287
        Validity
            Not Before: Jun 11 03:10:00 2024 GMT
            Not After : Jun 10 03:15:00 2025 GMT
        Subject: CN=DD587E7352341C83FC2AEC23E3039BC0066AEFA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:bc:46:1c:1b:d0:15:65:e0:ae:c8:3d:bc:
                    88:0d:0c:3d:9d:be:bd:27:07:d0:4b:5a:ae:64:c6:
                    2b:22:3e:ba:45:86:6d:ab:71:29:6a:bf:fd:3b:66:
                    bd:4b:6e:20:00:ed:ed:58:c8:a6:6a:e5:1e:55:19:
                    99:26:24:6b:76:30:c6:1f:20:8c:7b:7c:93:d8:ee:
                    bc:36:2b:8a:69:c9:e3:f8:d9:a7:70:b8:94:94:bf:
                    1c:c4:ce:47:57:cf:c3:c9:81:fe:5e:4d:0f:4b:3d:
                    e9:e3:f4:cf:f9:71:d7:16:7c:c0:a0:b1:64:b4:d3:
                    f0:5d:ac:8b:42:97:93:0b:7e:3f:90:08:a3:c2:ab:
                    ba:45:77:a4:82:fb:6c:f1:f6:8c:3e:cc:b0:08:d8:
                    0a:48:3f:9e:7a:be:94:c7:66:06:30:5a:74:4f:fd:
                    91:7d:48:2a:4e:93:87:00:df:15:82:28:91:be:2a:
                    4f:39:d8:af:63:48:c2:fd:52:f2:07:9a:46:d7:93:
                    3a:ef:84:20:83:66:6b:de:8d:81:3d:c1:90:f0:08:
                    a8:02:24:c3:e1:99:77:55:3e:d7:d7:f5:f4:93:33:
                    09:ea:c1:49:1c:28:1e:d5:b3:d3:3c:81:91:cd:b9:
                    1a:cf:73:ea:f6:d8:c0:16:f2:f7:94:0b:de:43:8b:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:58:7E:73:52:34:1C:83:FC:2A:EC:23:E3:03:9B:C0:06:6A:EF:A1
            X509v3 Authority Key Identifier:
                keyid:F1:80:E8:37:FD:7E:AD:AB:AA:E5:44:FD:4C:31:08:40:22:70:D2:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/F180E837FD7EADABAAE544FD4C3108402270D287.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F180E837FD7EADABAAE544FD4C3108402270D287.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05985ED27A8125BBA401250FB751C7B25EE08D4144467D815B7FEB6D544BC162/0/3137302e3234372e3136342e302f32322d3234203d3e20323635363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:99:bb:04:58:fa:58:2b:fd:a4:55:b7:9d:39:93:b8:61:2a:
         21:2c:e6:d7:8b:e1:72:0c:8f:72:c8:3c:99:a9:f1:88:14:ad:
         a4:12:91:cc:15:29:4d:3c:de:b0:76:87:7e:88:6c:b2:7a:00:
         17:33:34:2f:d6:46:49:bd:65:aa:5a:b1:19:e4:fe:cd:71:6a:
         bb:91:54:8c:49:16:ef:48:23:76:a5:e8:0a:70:9b:0d:1e:c4:
         c0:bc:a4:d4:fb:ca:8f:8f:1d:3e:84:8a:e9:a9:26:ad:7c:c7:
         49:85:6c:e7:a7:ea:c7:9c:f4:0d:c4:37:78:75:b2:23:d2:14:
         41:05:5a:56:f7:01:f5:7d:dc:82:4a:64:72:52:7c:80:c1:c3:
         17:10:ce:c8:b3:26:9f:04:68:6e:2f:7c:d3:87:9a:90:29:a5:
         df:19:0f:3d:b7:e2:39:7b:b5:65:53:48:c7:c4:17:d6:71:3e:
         0a:1d:07:75:8a:c4:88:9c:cd:6c:5c:a3:2e:67:8b:1b:95:4b:
         34:ca:36:dc:55:34:5d:99:e2:c7:f2:c4:9b:03:c1:f4:a2:20:
         f3:a8:9a:e0:cc:c7:60:05:02:6d:ab:a6:54:15:2d:05:4a:10:
         3d:f7:f8:74:32:a2:aa:85:ae:eb:5b:b9:1d:cf:08:c2:31:e4:
         e2:36:9d:0d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUR8MqhAmEXNcYziSq4ORYL6PfKZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjE4MEU4MzdGRDdFQURBQkFBRTU0NEZENEMzMTA4NDAy
MjcwRDI4NzAeFw0yNDA2MTEwMzEwMDBaFw0yNTA2MTAwMzE1MDBaMDMxMTAvBgNV
BAMTKERENTg3RTczNTIzNDFDODNGQzJBRUMyM0UzMDM5QkMwMDY2QUVGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/rxGHBvQFWXgrsg9vIgNDD2d
vr0nB9BLWq5kxisiPrpFhm2rcSlqv/07Zr1LbiAA7e1YyKZq5R5VGZkmJGt2MMYf
IIx7fJPY7rw2K4ppyeP42adwuJSUvxzEzkdXz8PJgf5eTQ9LPenj9M/5cdcWfMCg
sWS00/BdrItCl5MLfj+QCKPCq7pFd6SC+2zx9ow+zLAI2ApIP556vpTHZgYwWnRP
/ZF9SCpOk4cA3xWCKJG+Kk852K9jSML9UvIHmkbXkzrvhCCDZmvejYE9wZDwCKgC
JMPhmXdVPtfX9fSTMwnqwUkcKB7Vs9M8gZHNuRrPc+r22MAW8veUC95Di5ajAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU3Vh+c1I0HIP8Kuwj4wObwAZq76EwHwYDVR0j
BBgwFoAU8YDoN/1+rauq5UT9TDEIQCJw0ocwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wNTk4NUVEMjdBODEyNUJCQTQwMTI1MEZCNzUxQzdCMjVF
RTA4RDQxNDQ0NjdEODE1QjdGRUI2RDU0NEJDMTYyLzAvRjE4MEU4MzdGRDdFQURB
QkFBRTU0NEZENEMzMTA4NDAyMjcwRDI4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GMTgwRTgzN0ZEN0VBREFCQUFF
NTQ0RkQ0QzMxMDg0MDIyNzBEMjg3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMDU5ODVFRDI3QTgxMjVCQkE0MDEyNTBGQjc1MUM3QjI1RUUwOEQ0MTQ0
NDY3RDgxNUI3RkVCNkQ1NDRCQzE2Mi8wLzMxMzczMDJlMzIzNDM3MmUzMTM2MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzUzNjM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
96QwDQYJKoZIhvcNAQELBQADggEBAEuZuwRY+lgr/aRVt505k7hhKiEs5teL4XIM
j3LIPJmp8YgUraQSkcwVKU083rB2h36IbLJ6ABczNC/WRkm9ZapasRnk/s1xaruR
VIxJFu9II3al6Apwmw0exMC8pNT7yo+PHT6EiumpJq18x0mFbOen6sec9A3EN3h1
siPSFEEFWlb3AfV93IJKZHJSfIDBwxcQzsizJp8EaG4vfNOHmpAppd8ZDz234jl7
tWVTSMfEF9ZxPgodB3WKxIiczWxcoy5nixuVSzTKNtxVNF2Z4sfyxJsDwfSiIPOo
muDMx2AFAm2rplQVLQVKED33+HQyoqqFrutbuR3PCMIx5OI2nQ0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org