Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa
File:                     3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa (raw, json)
Hash identifier:          yuXCfni9Qt5gKFf35tNxZ7JdD8tP0B1JI/7cu+LGAFA=
Subject key identifier:   DD:19:15:93:E7:A4:16:F2:3A:01:D3:FF:9C:B9:22:B6:3F:DB:34:F1
Certificate issuer:       /CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
Certificate serial:       71DFD18868618792F036CB8467A2F029AE09D97A
Authority key identifier: 6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa
Signing time:             Tue 05 Mar 2024 18:21:44 +0000
ROA not before:           Tue 05 Mar 2024 18:16:44 +0000
ROA not after:            Tue 04 Mar 2025 18:21:44 +0000
asID:                     263736
IP address blocks:        170.239.128.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:df:d1:88:68:61:87:92:f0:36:cb:84:67:a2:f0:29:ae:09:d9:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A
        Validity
            Not Before: Mar  5 18:16:44 2024 GMT
            Not After : Mar  4 18:21:44 2025 GMT
        Subject: CN=DD191593E7A416F23A01D3FF9CB922B63FDB34F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:09:b3:11:54:c1:61:ea:e4:d0:47:e0:dd:4a:
                    34:75:79:1e:8e:cb:f5:61:55:f8:f9:09:1b:e7:b4:
                    e6:27:27:06:26:26:f3:db:4f:c7:c3:ad:21:b5:51:
                    eb:f4:5f:f6:cb:b3:95:be:4b:db:77:8b:08:0b:55:
                    50:bd:b9:cf:f2:3d:1b:04:31:57:31:dd:66:66:87:
                    88:35:0f:99:3e:4f:60:c4:c0:d3:f7:be:d9:c3:78:
                    40:15:41:99:ad:bc:3c:f1:d8:bc:2b:45:24:5d:75:
                    b9:9a:6c:19:cc:56:3b:d7:fa:f8:37:10:b2:90:88:
                    5a:83:fb:e2:3c:72:a3:73:f5:b1:52:d7:d1:57:6e:
                    f7:d9:f3:3b:a7:58:c7:7a:e6:e4:f1:3d:7e:df:ed:
                    25:17:bb:57:e9:77:da:b4:59:87:f2:02:e0:07:2e:
                    8b:8f:f6:d9:06:9e:37:12:f2:01:64:98:bf:64:15:
                    2d:df:02:cd:7b:f2:99:4b:1c:53:0e:93:ec:2c:e1:
                    bb:42:3d:9f:de:6e:e6:7f:2e:89:40:3e:a5:fd:37:
                    33:ce:94:2c:4a:5e:b7:4c:61:d8:aa:9e:6d:a1:42:
                    46:a1:31:fb:1e:25:76:8e:92:92:75:92:d5:59:ec:
                    81:84:22:81:7f:c9:ba:64:ed:93:be:2d:70:91:ea:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:19:15:93:E7:A4:16:F2:3A:01:D3:FF:9C:B9:22:B6:3F:DB:34:F1
            X509v3 Authority Key Identifier:
                keyid:6D:3F:C3:D1:EF:14:97:B6:50:EA:4B:8F:23:8C:71:F2:42:CC:D8:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6D3FC3D1EF1497B650EA4B8F238C71F242CCD88A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1489EDDEDD16840B285BCF11153DD1A04B180E51826F3B121184F750C824FF88/0/3137302e3233392e3132382e302f32322d3234203d3e20323633373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:28:73:f2:3c:7f:66:e6:55:10:fc:b1:de:6e:07:6e:e0:01:
         e8:e2:6c:1d:9c:5c:d4:2a:2b:de:39:c9:32:e1:96:fb:55:43:
         0c:6e:52:8e:3a:86:46:c1:df:9c:94:c6:9d:31:25:4c:78:f1:
         88:3d:cc:d5:e1:2f:f1:4e:0d:50:ab:11:e5:11:39:c5:85:8f:
         7e:b8:df:8d:3a:45:ca:56:59:e4:a1:4c:16:2f:04:f4:43:eb:
         18:f6:6a:21:f1:97:b9:7a:c6:f7:9d:e2:8a:0a:5d:0c:67:9f:
         2b:0c:f8:8e:fc:13:f2:7c:d4:3e:90:38:09:7f:7c:e3:5b:f8:
         0d:70:73:3a:33:01:90:38:b7:a8:9f:b7:62:d2:7e:c6:aa:41:
         88:29:97:11:b3:0d:52:7a:d5:bf:da:d6:85:4d:ac:0d:00:9b:
         ff:91:b1:83:b0:37:79:c5:86:f2:7e:69:8c:73:68:9a:2f:c0:
         19:7a:34:28:17:91:af:49:56:23:3b:57:78:4d:58:fb:9c:c6:
         d8:89:d1:6d:ab:1b:cd:06:78:77:f1:15:a5:ea:72:8b:13:76:
         db:e3:47:b7:ec:8a:17:4a:0c:25:3e:a9:95:8a:29:19:65:15:
         3e:97:3e:32:ec:22:c9:af:09:49:7f:fd:53:ba:3c:20:b9:e7:
         f8:84:bf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org