Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e20323635363331.roa
File:                     3137302e3234342e3234302e302f32322d3234203d3e20323635363331.roa (raw, json)
Hash identifier:          ISN9TkhlcENfPfGC1pLdKmkPhf6h3diAEefTI5/VwjQ=
Subject key identifier:   BA:66:BC:05:D0:02:1F:59:99:6E:77:E9:56:58:DF:58:8C:9D:A0:CC
Certificate issuer:       /CN=A309E2A48572D6A82E05CA806C7D2108377001D8
Certificate serial:       1CEFD32E0F4BD789AF25B4DE1943908BB7EECAA8
Authority key identifier: A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e20323635363331.roa
Signing time:             Tue 20 Aug 2024 17:40:00 +0000
ROA not before:           Tue 20 Aug 2024 17:35:00 +0000
ROA not after:            Tue 19 Aug 2025 17:40:00 +0000
asID:                     265631
IP address blocks:        170.244.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Sep 2024 11:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ef:d3:2e:0f:4b:d7:89:af:25:b4:de:19:43:90:8b:b7:ee:ca:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A309E2A48572D6A82E05CA806C7D2108377001D8
        Validity
            Not Before: Aug 20 17:35:00 2024 GMT
            Not After : Aug 19 17:40:00 2025 GMT
        Subject: CN=BA66BC05D0021F59996E77E95658DF588C9DA0CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:89:d7:4a:f9:f8:5c:03:e8:15:c8:07:88:
                    65:dc:e0:33:43:c0:9b:50:ca:07:38:47:7c:be:13:
                    39:64:ad:1a:0a:31:5b:27:a6:ac:b5:4d:b6:c2:45:
                    1b:73:ef:37:30:e1:96:dc:25:b4:bb:2d:a4:6e:9f:
                    c1:a7:b4:a8:c4:a7:ce:6e:a6:bb:95:84:10:56:c0:
                    9b:02:de:0e:3d:a4:88:9b:e1:80:56:0c:5e:15:86:
                    c4:75:e3:fc:8b:21:7c:4f:b9:7b:eb:cb:73:b1:0f:
                    d6:6f:e5:3b:72:4f:3e:3a:a8:cf:d9:57:99:79:50:
                    0b:9d:7d:61:bd:35:16:85:42:af:04:1f:5c:42:c4:
                    72:f7:79:16:2b:bb:f9:97:07:1b:bd:d3:29:8d:81:
                    a1:d0:a7:78:42:23:36:67:0e:e7:f2:15:ec:91:24:
                    9c:a5:46:51:83:90:4c:db:4b:4d:c4:89:60:d2:de:
                    2f:c6:c1:1d:cc:76:54:8a:8d:0e:b8:25:71:0f:3f:
                    dc:9a:bf:0d:5c:c2:9d:47:42:ad:8a:fa:c2:be:e4:
                    32:8f:ca:9c:24:4b:19:62:de:1c:e1:2a:65:58:2f:
                    6f:b1:c9:bf:b1:4b:04:30:3f:3f:d9:0e:be:61:8c:
                    44:37:83:28:b4:6e:23:40:df:43:52:71:d2:9e:31:
                    a0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:66:BC:05:D0:02:1F:59:99:6E:77:E9:56:58:DF:58:8C:9D:A0:CC
            X509v3 Authority Key Identifier:
                keyid:A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e20323635363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:af:3a:4f:64:2f:52:fd:77:b9:30:c7:79:2f:04:c3:a5:
         19:ff:27:c3:d4:36:76:42:df:77:02:fc:07:cc:63:fa:28:5a:
         d9:ea:f3:8f:79:da:ea:f2:39:71:6b:8b:59:41:1a:0c:9d:a9:
         24:96:a0:b9:45:ce:5f:aa:a3:91:a8:31:2d:42:24:cb:e6:e6:
         df:d3:84:e4:a3:ff:bf:db:22:c2:86:8c:25:1d:82:64:d8:cb:
         b3:ec:9f:77:4b:3b:af:fd:26:4a:99:44:82:f9:37:4e:4e:51:
         64:76:06:75:d1:11:68:34:8d:e7:cd:de:ec:45:d5:11:3c:94:
         8c:8b:de:e2:95:3d:ff:d1:ac:07:6a:cd:df:65:c7:8b:6f:43:
         50:55:67:a5:1a:17:cc:67:aa:bc:5e:52:32:c1:ab:f0:61:32:
         90:12:4b:07:49:59:c6:79:2d:5a:cb:b7:27:78:87:e7:32:9d:
         69:88:dd:9b:ab:2c:57:05:4e:a7:dc:54:fb:d5:11:b4:0b:eb:
         67:66:29:ef:6b:95:9d:c3:f1:01:f0:be:5e:37:7c:26:f0:e4:
         2a:73:64:81:d6:1d:d9:62:ca:69:6c:be:14:44:4f:69:60:e7:
         e5:60:75:2d:31:2e:aa:42:68:bf:3f:f7:83:98:fc:32:d6:1c:
         95:94:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 07:01:44 2024 by rpki-client on console-fra.rpki-client.org