Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          wmuYw3e2oBpwi/wxIYXnfqOdS9z1cwPYe/iXpT6X+mQ=
Subject key identifier:   CB:88:45:0E:AC:4E:45:35:AA:29:0C:E1:FE:69:DB:AE:C2:C4:C0:28
Certificate issuer:       /CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
Certificate serial:       4D1AEBA07B51F333844C2E9697CEAB8E9E84A000
Authority key identifier: 09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 05 Mar 2024 17:45:45 +0000
ROA not before:           Tue 05 Mar 2024 17:40:45 +0000
ROA not after:            Tue 04 Mar 2025 17:45:45 +0000
asID:                     272981
IP address blocks:        170.239.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:1a:eb:a0:7b:51:f3:33:84:4c:2e:96:97:ce:ab:8e:9e:84:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094D2B4D623E37AF19F9481AD2255430380E9CBD
        Validity
            Not Before: Mar  5 17:40:45 2024 GMT
            Not After : Mar  4 17:45:45 2025 GMT
        Subject: CN=CB88450EAC4E4535AA290CE1FE69DBAEC2C4C028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:4c:24:83:7b:f2:ff:07:b8:97:1b:d6:ab:
                    04:50:e0:62:7f:69:44:e2:29:66:c9:cf:e2:82:fc:
                    22:83:05:ac:8d:f4:a3:54:ac:71:92:ab:b1:8d:4c:
                    a0:9c:1f:75:f3:fc:16:28:06:d0:d0:0b:71:6b:81:
                    d4:11:c9:2e:bb:64:5a:a4:b9:5d:d0:60:60:e0:a8:
                    f0:34:4a:e5:8e:05:dd:06:a7:da:c2:9c:f2:c9:25:
                    54:77:d8:09:33:5a:58:c8:d5:ca:1e:01:a0:b2:1e:
                    4f:3f:57:d6:83:59:45:b7:fe:a7:65:f2:ee:c3:3d:
                    ab:b2:c2:d5:cb:92:69:bf:82:79:82:14:b4:0b:70:
                    22:7c:59:b0:4e:23:65:80:85:e6:1e:9f:a0:ef:aa:
                    89:5c:16:0b:22:03:b0:9f:0e:d3:da:13:ac:36:4b:
                    4f:a2:32:de:7b:ce:4c:8f:e6:3f:6d:63:aa:95:fe:
                    b8:4e:5d:6f:4e:91:41:12:d1:f9:3b:0a:7f:3b:60:
                    5f:8c:b8:ff:21:a2:be:67:e6:d0:4a:09:52:07:04:
                    e9:a5:50:38:0c:fc:6e:40:bc:a1:cc:7d:da:f7:a2:
                    63:ab:de:34:fb:18:1e:7d:5c:fe:57:ee:7c:a5:d4:
                    eb:4f:56:06:eb:6d:b7:5d:00:08:3a:99:55:e6:cb:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:45:0E:AC:4E:45:35:AA:29:0C:E1:FE:69:DB:AE:C2:C4:C0:28
            X509v3 Authority Key Identifier:
                keyid:09:4D:2B:4D:62:3E:37:AF:19:F9:48:1A:D2:25:54:30:38:0E:9C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/094D2B4D623E37AF19F9481AD2255430380E9CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0DF5C53538B8E64DB89D9152B8CBA35AA840B7AFA7F55493C95FC7EFE050E29D/0/3137302e3233392e36342e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:0c:16:85:45:33:91:1d:7c:0e:74:4d:f4:14:86:8b:87:
         5b:3a:1e:48:eb:f3:9c:f6:78:5b:9c:40:e1:66:47:7b:bf:9d:
         1f:8f:15:59:70:26:8b:4a:7b:90:85:60:d1:e3:29:e5:0e:a0:
         0c:79:ec:7a:7b:5d:93:b7:37:38:45:7c:58:d0:d7:e7:61:39:
         b5:65:40:dd:ed:46:25:48:4a:56:7f:29:1f:5c:49:1e:15:92:
         11:d1:83:9e:59:0c:2e:66:bf:d4:eb:93:60:ab:c4:57:50:84:
         88:ac:22:a0:a9:41:f1:14:fe:d1:74:c2:0b:61:75:15:a7:53:
         63:38:c9:0a:ee:69:54:a6:14:09:af:5e:1a:c1:5a:0e:d7:bc:
         19:c0:bb:ef:d7:83:a5:84:b6:95:6b:36:7e:c1:67:fc:a6:2f:
         3b:fd:2d:8c:49:b6:18:17:37:61:7e:72:8a:eb:d7:6d:43:40:
         f4:45:a7:42:3b:cb:df:7b:98:23:f8:bb:b8:56:b0:9e:fa:da:
         0b:e1:72:a3:45:20:6c:5b:37:a0:4f:76:4f:41:d4:39:7a:07:
         c2:a9:fb:2a:47:0a:7c:9c:e8:73:30:51:a2:f5:37:ed:03:b7:
         dc:fa:f8:35:53:f8:9c:67:3c:c0:d0:95:43:af:4f:45:a4:03:
         aa:a5:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org