Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32322d3232203d3e20323634373730.roa
File:                     3137302e3235342e3231362e302f32322d3232203d3e20323634373730.roa (raw, json)
Hash identifier:          61qxXVj8VtMvH9hQeg3W5hlHDHKXRutSYP+1QGOYbzI=
Subject key identifier:   6D:CA:47:56:06:49:12:4D:BA:49:44:82:A5:5B:F3:A5:A7:BC:0E:8A
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       7306D92D9A4096813991D4E533B0372E61D28ACB
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32322d3232203d3e20323634373730.roa
Signing time:             Tue 05 Mar 2024 17:57:35 +0000
ROA not before:           Tue 05 Mar 2024 17:52:35 +0000
ROA not after:            Tue 04 Mar 2025 17:57:35 +0000
asID:                     264770
IP address blocks:        170.254.216.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:d9:2d:9a:40:96:81:39:91:d4:e5:33:b0:37:2e:61:d2:8a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Mar  5 17:52:35 2024 GMT
            Not After : Mar  4 17:57:35 2025 GMT
        Subject: CN=6DCA47560649124DBA494482A55BF3A5A7BC0E8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:32:90:8d:f0:41:22:d2:19:8d:11:fb:eb:b0:
                    5f:df:9f:d8:82:b8:9f:d3:e5:a4:cc:57:be:49:de:
                    11:92:2c:77:3a:53:5c:c6:02:5e:bb:4f:fc:f3:47:
                    72:c9:4c:dc:4c:69:35:a2:8b:35:c3:21:92:b8:7a:
                    1c:53:4d:a9:ec:43:e0:26:3b:56:0c:1e:ff:e4:69:
                    88:5a:7d:5f:9a:b3:63:7c:55:03:a8:fa:50:58:5e:
                    2b:8a:5d:d7:d4:fb:1c:df:ad:2f:cb:c2:16:cb:21:
                    04:ff:c2:d7:d9:a0:3f:fe:5c:e7:89:c6:b0:69:59:
                    d9:24:50:b3:9e:43:50:4b:87:61:71:3f:fa:be:bb:
                    b0:29:61:8f:52:b2:7e:eb:37:80:0b:f4:17:36:e6:
                    8e:27:0e:df:26:be:1e:f0:2d:f7:50:1d:f1:a9:6e:
                    7c:e8:e2:68:55:10:e8:2a:c4:45:cd:ce:50:63:f8:
                    68:61:74:26:d6:ba:a7:7f:06:d7:5b:a9:6a:d5:af:
                    65:53:98:29:c2:5d:0a:ca:6c:a6:df:00:c1:ea:7e:
                    e7:e2:b7:9e:41:9c:2a:6c:a7:28:90:a8:ee:da:4d:
                    94:32:61:a3:92:b5:7c:ad:e2:10:0a:c0:00:91:35:
                    03:2b:99:9e:b7:4a:3f:77:50:82:17:a2:40:d6:1c:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CA:47:56:06:49:12:4D:BA:49:44:82:A5:5B:F3:A5:A7:BC:0E:8A
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231362e302f32322d3232203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:01:b6:0f:bc:0f:b0:64:71:50:1c:e5:4e:3a:86:12:ea:0d:
         d6:24:53:c0:8c:39:6d:f7:70:00:5b:bf:08:b5:7e:a2:22:ce:
         75:cf:5a:43:d2:b6:56:c8:87:89:3f:c6:f9:1b:c8:d6:f0:b9:
         ec:d7:a3:cc:09:1c:5c:9f:9c:ce:53:3d:d4:59:4a:82:3b:90:
         8e:ce:02:53:79:a2:70:73:60:1b:8c:fc:2e:6a:74:8b:91:d5:
         e0:fc:85:ef:da:60:45:2c:97:58:8f:2b:a3:38:58:7e:09:03:
         6f:8c:1d:ce:b2:bc:d8:96:34:15:ff:fb:34:a5:21:fd:30:a2:
         df:32:1b:ad:10:2d:46:7b:24:f2:cb:6d:82:64:bf:9d:e1:66:
         5a:de:17:ee:37:d4:05:ed:c5:7a:ef:81:a0:c7:84:69:ad:c0:
         fd:dc:a7:d4:8f:c2:bd:b5:0c:ab:a6:6a:10:98:8f:fd:0e:00:
         a9:a9:88:8c:f0:d5:2d:eb:3c:2d:d2:bc:cb:1b:28:b9:5f:d5:
         26:db:aa:f3:26:22:40:c3:7b:50:75:78:bc:19:f4:2b:44:7d:
         a7:00:ac:01:85:44:5f:ef:71:2e:e0:8d:85:98:65:85:d9:b8:
         c2:4d:72:3c:17:65:85:38:e9:42:2f:03:9f:fa:dd:d7:e3:31:
         89:25:ff:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:10:14 2024 by rpki-client on console-ams.rpki-client.org