Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
File:                     3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa (raw, json)
Hash identifier:          9JC5mm0SWhkt8eCIidKidQB0v/W559tef+bu+Tj9djI=
Subject key identifier:   26:A7:BF:E9:1C:AC:7F:85:30:9B:DD:EC:74:09:47:26:50:60:40:52
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       17CE186C0003466BD256698DF8E3A9E40C75AE1C
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa
Signing time:             Tue 05 Mar 2024 18:22:46 +0000
ROA not before:           Tue 05 Mar 2024 18:17:46 +0000
ROA not after:            Tue 04 Mar 2025 18:22:46 +0000
asID:                     271970
IP address blocks:        170.83.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ce:18:6c:00:03:46:6b:d2:56:69:8d:f8:e3:a9:e4:0c:75:ae:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Mar  5 18:17:46 2024 GMT
            Not After : Mar  4 18:22:46 2025 GMT
        Subject: CN=26A7BFE91CAC7F85309BDDEC7409472650604052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:1e:af:19:db:66:93:4e:d6:95:2d:39:24:
                    f3:67:dc:22:92:a8:2d:32:e1:23:14:ca:7c:e8:a2:
                    89:fc:5d:1a:95:24:80:6a:ba:2d:a9:64:bb:31:8c:
                    61:77:87:be:89:65:e9:ce:13:41:fd:b4:89:60:74:
                    5b:3e:32:09:00:d7:6b:e8:7c:da:90:c2:8c:4d:1b:
                    69:8a:63:af:8e:71:80:af:f3:6e:83:50:37:e8:50:
                    ec:8a:a2:0b:ac:28:df:5f:45:07:dd:72:2d:c7:30:
                    d1:2a:bd:44:ea:5f:91:8d:da:e1:94:67:28:61:2f:
                    12:c4:dc:b6:ed:44:09:02:9a:f5:96:e3:c7:da:71:
                    81:91:70:67:6c:9c:06:cf:cc:60:7f:0d:ac:ec:06:
                    e2:fa:a9:c1:c7:0c:01:a7:c3:71:40:e1:8e:08:d8:
                    e6:39:0b:f1:2a:a3:32:69:80:77:c6:a4:88:97:b7:
                    ef:01:20:bc:4d:19:fc:97:d4:b2:04:d0:8b:d8:33:
                    cf:3e:c4:00:b8:2c:20:91:09:64:b7:98:a4:e7:b5:
                    2a:ea:f6:4e:f1:95:0c:1f:ef:c5:8a:bc:8e:5c:5a:
                    e1:ba:c2:fc:11:47:ee:f3:9c:3f:e4:6a:8c:dd:50:
                    12:c8:e3:f8:f2:5c:6c:f9:8f:e2:f1:96:19:91:64:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A7:BF:E9:1C:AC:7F:85:30:9B:DD:EC:74:09:47:26:50:60:40:52
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/3137302e38332e3130382e302f32322d3234203d3e20323731393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:a7:d3:b7:3c:5d:24:15:8b:1e:36:ba:af:6a:57:54:8d:
         fe:64:7e:ba:3c:ee:e5:b0:bd:6d:e4:15:46:02:9b:38:32:de:
         1a:9e:64:ba:c0:9e:57:7f:a3:08:3f:dd:94:60:63:7b:3a:f6:
         0a:70:67:16:44:8b:ee:1b:b3:4a:f6:2d:03:dc:77:b4:54:59:
         ab:5e:b8:82:42:d7:ca:5e:58:0d:bf:4f:7d:01:4d:b2:98:23:
         14:19:f8:61:fc:55:da:3d:fd:17:85:0f:4f:27:83:d6:40:e2:
         26:d9:3f:2b:3e:88:0d:c8:42:c6:76:dd:60:9d:26:a6:78:33:
         17:f6:39:d6:12:4d:ee:4a:17:48:95:dd:53:6d:9b:22:1e:d8:
         c4:6b:11:70:e4:89:bf:26:92:a8:34:5c:12:88:f4:f6:db:7e:
         bd:81:a0:d3:2d:69:07:f8:b4:05:c0:ba:cb:84:68:01:07:a3:
         be:ad:b8:dd:e2:89:fd:cf:25:65:65:30:36:f2:11:22:1d:15:
         58:48:5b:70:f9:41:61:f3:13:c3:61:52:6b:00:68:fb:47:e3:
         68:6a:b5:fe:74:26:09:a1:a1:e8:8a:8b:05:7f:2c:f2:8a:c5:
         3e:b4:3d:56:dd:e2:bf:90:6f:ad:78:e0:15:61:48:6b:78:cb:
         26:f9:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org