Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
File:                     3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa (raw, json)
Hash identifier:          0cOuqzYQ0DpZQMUAx0hk2C0/rQsACfQCkkznlbF7VYE=
Subject key identifier:   B4:4E:EC:2B:C0:E2:78:DA:13:E8:87:65:85:3E:27:EF:DA:83:B2:36
Certificate issuer:       /CN=8495817D6FBA8603C95099E0CF88C4791923C301
Certificate serial:       5CD94F456DF6CC8F3DB7ACC130E75CA267E9DC76
Authority key identifier: 84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa
Signing time:             Tue 05 Mar 2024 18:05:38 +0000
ROA not before:           Tue 05 Mar 2024 18:00:38 +0000
ROA not after:            Tue 04 Mar 2025 18:05:38 +0000
asID:                     28023
IP address blocks:        170.238.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d9:4f:45:6d:f6:cc:8f:3d:b7:ac:c1:30:e7:5c:a2:67:e9:dc:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8495817D6FBA8603C95099E0CF88C4791923C301
        Validity
            Not Before: Mar  5 18:00:38 2024 GMT
            Not After : Mar  4 18:05:38 2025 GMT
        Subject: CN=B44EEC2BC0E278DA13E88765853E27EFDA83B236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:25:37:92:cc:e0:cc:7c:f5:c4:7b:31:a8:
                    00:bf:fb:07:04:48:12:b3:81:c2:af:12:71:5a:de:
                    00:d9:85:bc:80:09:cf:d3:de:ae:66:60:bb:ac:e6:
                    5c:92:04:97:63:58:f6:64:a3:a6:aa:03:09:ce:01:
                    42:f6:11:23:a6:d8:ba:70:83:36:3f:f2:ca:fe:d4:
                    8d:6f:ae:16:12:98:c4:a5:18:a2:6f:81:83:67:04:
                    88:ed:e1:a3:51:02:7c:9e:0e:41:99:5c:ca:f3:ef:
                    8d:47:07:03:6f:3c:9b:56:6b:24:f2:d5:7d:3a:a1:
                    7f:ef:c5:19:b2:9a:18:10:43:5d:7d:e4:48:78:46:
                    73:2f:f9:17:1a:33:27:9a:c4:1d:f8:d5:50:80:46:
                    73:8d:80:d9:fb:4f:f6:cd:cb:11:59:2c:65:e3:9c:
                    f1:77:c4:39:d3:da:d9:2e:c4:86:70:38:c4:54:2e:
                    4e:c5:98:19:9d:14:45:fb:3d:ee:d6:90:4b:64:48:
                    ee:95:6e:dd:d2:89:d0:27:1c:25:d4:46:eb:9e:13:
                    fd:c8:9e:b6:46:05:ff:3b:8d:27:42:fb:45:c1:52:
                    06:86:f3:59:e6:aa:d9:cd:38:ef:47:f8:07:3b:69:
                    c6:55:b0:4f:43:60:ac:11:70:2f:3e:5c:be:24:aa:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4E:EC:2B:C0:E2:78:DA:13:E8:87:65:85:3E:27:EF:DA:83:B2:36
            X509v3 Authority Key Identifier:
                keyid:84:95:81:7D:6F:BA:86:03:C9:50:99:E0:CF:88:C4:79:19:23:C3:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/8495817D6FBA8603C95099E0CF88C4791923C301.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8495817D6FBA8603C95099E0CF88C4791923C301.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1455416BCBA9FF8F4233FE0D1E28654AD231A3FCB88BB89DF1222E15BEA19C96/0/3137302e3233382e3234342e302f32322d3234203d3e203238303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:51:a1:6d:70:a6:86:99:19:1c:84:d7:42:36:ad:70:39:
         18:61:6c:f9:60:b9:3c:1e:ab:8d:3c:29:f3:fb:ae:50:0a:d2:
         00:48:59:f3:bc:84:2a:42:26:5d:39:1f:5a:3c:ac:d2:1e:2b:
         1b:5c:b6:af:49:6f:fc:c7:df:b5:d8:86:1b:5a:76:9e:9b:64:
         82:18:64:db:3e:e8:e6:e2:d1:48:07:a2:bb:80:9b:7f:53:04:
         e2:52:47:30:db:b1:70:75:ce:65:bd:5a:14:d6:64:d2:15:45:
         9f:b8:d2:0a:2d:a9:27:78:c3:19:e1:1f:4f:b6:7d:cc:03:53:
         f1:d3:3f:4c:c8:cc:b1:60:66:ae:8f:af:8d:d3:d0:10:5c:b5:
         49:d6:6b:a4:6e:2f:16:38:c9:db:bc:16:b1:c6:dd:ac:13:22:
         92:17:f8:c7:4a:bd:01:1b:29:e9:3b:ee:83:37:a7:9e:ad:f0:
         5d:c3:6e:50:b0:68:5e:7f:c3:5a:f8:4d:6b:7a:0c:6b:fd:b6:
         bd:d3:6b:2e:b7:ba:c8:45:b2:78:9f:96:50:0b:29:ca:ce:ed:
         f6:1f:2f:42:ad:a3:0f:5f:3c:c6:11:97:d6:a5:17:3d:22:66:
         5a:3b:ef:23:00:7e:46:3c:6e:c6:26:e3:21:e1:b0:dc:45:29:
         9c:52:aa:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org