Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323633373636.roa
File:                     3137302e38332e3130382e302f32322d3234203d3e20323633373636.roa (raw, json)
Hash identifier:          Dqj2qPuQbDiq9tHq5mXGFLil2VWBdF1zhHxNC6DvhBE=
Subject key identifier:   B5:74:7D:01:41:3E:DD:F6:5F:10:67:4E:F3:F7:E5:F0:C1:C0:BB:2A
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       70FB17E2C8DE42658E406EFC40FE1369E48AD64A
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323633373636.roa
Signing time:             Tue 05 Mar 2024 18:22:47 +0000
ROA not before:           Tue 05 Mar 2024 18:17:47 +0000
ROA not after:            Tue 04 Mar 2025 18:22:47 +0000
asID:                     263766
IP address blocks:        170.83.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:fb:17:e2:c8:de:42:65:8e:40:6e:fc:40:fe:13:69:e4:8a:d6:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Mar  5 18:17:47 2024 GMT
            Not After : Mar  4 18:22:47 2025 GMT
        Subject: CN=B5747D01413EDDF65F10674EF3F7E5F0C1C0BB2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:23:78:e2:1d:c1:11:b4:e7:9a:bd:a0:8e:d5:
                    01:80:a4:53:3b:91:62:9a:6e:5c:02:d3:ba:0a:32:
                    d0:08:16:fa:b6:19:d1:55:5b:b2:04:fc:ec:7d:82:
                    78:bd:af:1c:a3:67:3d:0f:89:ea:f1:3c:c9:73:f9:
                    78:3e:9c:e6:5c:f3:ae:07:88:3b:9c:6f:f5:b8:2d:
                    6b:f1:85:ea:28:25:b6:3d:d6:1f:c4:77:b9:50:fd:
                    69:54:4d:a9:dc:8f:c6:4f:f2:15:65:bd:a9:70:49:
                    92:63:46:7c:a7:9d:10:a2:5f:25:c4:9c:05:e8:86:
                    a2:3d:87:79:42:40:62:5b:66:cb:f7:1f:93:32:37:
                    22:90:66:ee:1b:37:fa:a1:04:d1:36:6c:fb:47:a3:
                    2e:7b:b9:e2:76:ac:5a:7d:33:64:16:1b:6b:ff:7e:
                    c1:f6:57:85:2f:a3:62:4a:0c:f2:e9:13:19:4a:cd:
                    45:4e:b9:a8:b1:89:7d:fd:e8:6e:fc:e0:85:10:7d:
                    2d:4e:b0:93:ce:47:fe:cc:63:c5:90:36:be:73:f6:
                    50:88:ac:e6:75:10:47:76:9b:90:26:85:a6:eb:33:
                    40:12:50:b2:ba:80:8a:0c:a5:42:ce:a3:36:61:ff:
                    b1:84:0f:ec:e9:0c:a5:af:28:52:1c:77:53:20:fe:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:74:7D:01:41:3E:DD:F6:5F:10:67:4E:F3:F7:E5:F0:C1:C0:BB:2A
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:ed:92:eb:02:33:9a:5d:6f:89:4d:7a:b7:b7:b3:2f:f1:
         82:b5:24:4f:d8:4c:97:92:dc:0e:ca:59:d0:9e:65:1e:ed:be:
         ab:7d:5c:16:f5:74:a8:13:b2:d0:1c:cc:39:4d:35:ac:87:bd:
         2b:44:a1:6e:53:87:51:2a:51:62:47:b9:a9:52:04:c7:e8:05:
         ef:ee:8f:11:9f:23:c8:b2:2e:d4:00:57:ad:3b:27:5e:2c:31:
         a5:24:aa:67:3b:33:fb:c1:77:d5:ba:da:45:ea:02:55:8e:83:
         54:5a:d9:11:0e:93:ab:57:22:14:86:0f:19:72:82:a8:ad:90:
         e8:70:60:80:d1:84:3d:f9:fd:3a:6b:72:27:c5:d9:e1:30:d4:
         9b:4c:86:bb:3c:16:ec:e8:3f:b6:fb:8e:c0:77:a9:48:42:d2:
         83:6c:41:c0:ff:a6:34:62:33:3e:6d:6f:e4:3c:17:dc:95:12:
         d4:5e:ee:f2:b0:28:a1:0c:3c:66:ad:7c:bc:97:75:58:89:34:
         f9:06:8c:0a:f8:a5:d2:1f:cc:e4:38:24:10:e1:1e:e8:38:61:
         2d:66:01:90:c0:aa:1b:be:7b:2e:4b:5f:48:17:c8:10:4f:88:
         02:32:c4:d4:d3:9c:a6:10:2c:c9:76:f0:0e:19:0a:e1:57:26:
         3e:61:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 07:27:44 2024 by rpki-client on console-fra.rpki-client.org