Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3234342e39322e302f32322d3232203d3e20333934343734.roa
File:                     3137302e3234342e39322e302f32322d3232203d3e20333934343734.roa (raw, json)
Hash identifier:          PTvn1aaGntegZ0QCMPhmH3yZEIMnucGbJ+9VTItGFNk=
Subject key identifier:   33:8A:E2:84:0C:23:01:87:F9:23:A3:20:9F:08:78:EB:6B:51:51:AD
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       6985126AF0311C1D1D26B2F6F2411C26B898B251
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3234342e39322e302f32322d3232203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:53 +0000
ROA not before:           Tue 05 Mar 2024 17:42:53 +0000
ROA not after:            Tue 04 Mar 2025 17:47:53 +0000
asID:                     394474
IP address blocks:        170.244.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:85:12:6a:f0:31:1c:1d:1d:26:b2:f6:f2:41:1c:26:b8:98:b2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:53 2024 GMT
            Not After : Mar  4 17:47:53 2025 GMT
        Subject: CN=338AE2840C230187F923A3209F0878EB6B5151AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b1:f2:40:73:f4:19:79:1a:02:f7:c7:d8:61:
                    39:62:c1:70:a8:96:94:22:30:f2:7b:20:4f:50:7d:
                    7c:4b:9d:db:0d:2d:2f:10:f9:94:7c:be:8b:12:a4:
                    a2:82:dd:6b:52:49:80:00:48:20:d1:db:e5:22:91:
                    6a:3b:95:ce:52:cf:aa:ef:dc:06:c4:02:7e:53:a8:
                    12:6d:c4:b7:af:d6:67:59:ee:b3:05:c2:72:2f:1f:
                    cc:9e:74:8f:ee:a1:34:82:b0:ec:1f:19:da:a9:a5:
                    46:34:b8:b6:0b:53:29:b1:a0:6c:bb:b1:14:0e:67:
                    16:fa:4a:e4:66:8e:db:5e:d6:f8:12:ca:c4:dc:14:
                    49:80:6c:65:64:e0:17:2b:03:ba:f1:15:86:64:88:
                    b7:b9:ec:9d:ed:c6:f7:73:5f:50:36:16:df:cc:7a:
                    eb:50:6c:f7:06:75:f5:5a:7c:95:8e:dd:41:8d:0a:
                    32:66:59:e9:ca:dc:fe:d6:db:9e:71:99:7a:2f:82:
                    c9:bf:62:ea:ba:2c:ff:64:89:12:ef:5b:fc:fd:79:
                    3d:aa:f6:fd:e6:aa:d2:6d:ba:bc:3b:b3:67:fd:ea:
                    27:9d:1e:c2:da:d1:c4:8e:4d:d9:9d:a2:70:75:45:
                    d7:79:27:12:b3:c6:2c:8c:07:c3:20:12:78:b4:f2:
                    5d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:8A:E2:84:0C:23:01:87:F9:23:A3:20:9F:08:78:EB:6B:51:51:AD
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3234342e39322e302f32322d3232203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d4:a7:6a:04:25:ca:08:70:07:6a:b1:46:53:73:e0:0e:1c:45:
         74:3e:7c:56:43:fa:f7:70:11:aa:c2:fd:de:dc:59:3f:ea:d9:
         43:9c:12:80:dd:03:10:34:7e:2b:2e:5f:21:0c:f1:4b:6d:66:
         5a:35:6b:6d:1a:37:9b:3c:dd:ad:66:02:d4:70:01:42:4b:db:
         f0:24:5e:a7:dc:80:e3:5f:7b:dd:12:b5:2e:a4:f0:ae:78:4e:
         a0:8d:4c:8b:90:64:53:87:a0:06:5e:f7:22:b9:ac:4b:25:c5:
         a2:bf:fd:d1:25:5b:6c:e3:34:4e:22:f2:19:21:51:e3:d6:51:
         65:c1:86:f0:7c:03:c8:35:34:8d:42:b1:5b:55:cc:57:ad:38:
         69:73:a4:82:66:89:b3:78:ae:54:e3:8d:71:ee:be:19:2e:45:
         82:da:8e:f2:a8:5c:81:ae:99:21:07:58:bd:96:aa:76:a2:90:
         e9:e1:ca:83:55:94:95:e4:28:ba:cc:dd:1e:1a:0c:4a:d1:bf:
         4a:17:2e:a7:48:0b:d6:23:ae:81:0a:ea:19:89:9f:5d:a8:34:
         b5:77:92:be:98:e0:eb:fc:e8:30:c3:96:2a:e2:f8:c1:c6:77:
         d5:4c:ae:ef:ca:59:f3:ed:e3:c7:7b:59:87:7e:3b:55:09:25:
         bf:bf:7a:f6
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUaYUSavAxHB0dJrL28kEcJriYslEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFERkNEOTY5Mzk4QzdEMTRGQTE4RTQ0RDE2NDlBMEIy
MUM5NjU2OTAeFw0yNDAzMDUxNzQyNTNaFw0yNTAzMDQxNzQ3NTNaMDMxMTAvBgNV
BAMTKDMzOEFFMjg0MEMyMzAxODdGOTIzQTMyMDlGMDg3OEVCNkI1MTUxQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5sfJAc/QZeRoC98fYYTliwXCo
lpQiMPJ7IE9QfXxLndsNLS8Q+ZR8vosSpKKC3WtSSYAASCDR2+UikWo7lc5Sz6rv
3AbEAn5TqBJtxLev1mdZ7rMFwnIvH8yedI/uoTSCsOwfGdqppUY0uLYLUymxoGy7
sRQOZxb6SuRmjtte1vgSysTcFEmAbGVk4BcrA7rxFYZkiLe57J3txvdzX1A2Ft/M
eutQbPcGdfVafJWO3UGNCjJmWenK3P7W255xmXovgsm/Yuq6LP9kiRLvW/z9eT2q
9v3mqtJturw7s2f96iedHsLa0cSOTdmdonB1Rdd5JxKzxiyMB8MgEni08l0bAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUM4rihAwjAYf5I6Mgnwh462tRUa0wHwYDVR0j
BBgwFoAUAd/NlpOYx9FPoY5E0WSaCyHJZWkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8wRDRBMjczNDJBN0UxODQ5RjhBRkM0ODlFOTNDQTNEQzNG
NjVCOURDRDM2QjA0RkQyQjU4NENDRDJCODA1Qzc2LzAvMDFERkNEOTY5Mzk4QzdE
MTRGQTE4RTQ0RDE2NDlBMEIyMUM5NjU2OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMURGQ0Q5NjkzOThDN0QxNEZB
MThFNDREMTY0OUEwQjIxQzk2NTY5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMEQ0QTI3MzQyQTdFMTg0OUY4QUZDNDg5RTkzQ0EzREMzRjY1QjlEQ0Qz
NkIwNEZEMkI1ODRDQ0QyQjgwNUM3Ni8wLzMxMzczMDJlMzIzNDM0MmUzOTMyMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzOTM0MzQzNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqvRc
MA0GCSqGSIb3DQEBCwUAA4IBAQDUp2oEJcoIcAdqsUZTc+AOHEV0PnxWQ/r3cBGq
wv3e3Fk/6tlDnBKA3QMQNH4rLl8hDPFLbWZaNWttGjebPN2tZgLUcAFCS9vwJF6n
3IDjX3vdErUupPCueE6gjUyLkGRTh6AGXvciuaxLJcWiv/3RJVts4zROIvIZIVHj
1lFlwYbwfAPINTSNQrFbVcxXrThpc6SCZomzeK5U441x7r4ZLkWC2o7yqFyBrpkh
B1i9lqp2opDp4cqDVZSV5Ci6zN0eGgxK0b9KFy6nSAvWI66BCuoZiZ9dqDS1d5K+
mODr/Ogww5Yq4vjBxnfVTK7vylnz7ePHe1mHfjtVCSW/v3r2
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:22 2024 by rpki-client on console-fra.rpki-client.org