Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa
File:                     3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa (raw, json)
Hash identifier:          NWrGZFai4TDKykH7sVJwTdUdoTyjDiyuGiSk3B5nDLM=
Subject key identifier:   11:65:F1:86:08:A4:1C:F2:E7:8B:95:DA:9A:04:3C:C4:96:01:7B:42
Certificate issuer:       /CN=A309E2A48572D6A82E05CA806C7D2108377001D8
Certificate serial:       51CC18DC651E564A8E1A71FA96703F82588C929E
Authority key identifier: A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa
Signing time:             Tue 20 Aug 2024 17:45:00 +0000
ROA not before:           Tue 20 Aug 2024 17:40:00 +0000
ROA not after:            Tue 19 Aug 2025 17:45:00 +0000
asID:                     27884
IP address blocks:        170.244.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:cc:18:dc:65:1e:56:4a:8e:1a:71:fa:96:70:3f:82:58:8c:92:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A309E2A48572D6A82E05CA806C7D2108377001D8
        Validity
            Not Before: Aug 20 17:40:00 2024 GMT
            Not After : Aug 19 17:45:00 2025 GMT
        Subject: CN=1165F18608A41CF2E78B95DA9A043CC496017B42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:31:8c:27:13:db:44:3f:4d:5a:20:1e:56:64:
                    ae:c1:72:04:f5:c1:7b:6d:00:95:a9:73:2b:c5:74:
                    b0:15:90:d9:0d:a6:3a:bc:3f:4a:5e:41:66:7c:1c:
                    3d:0d:1c:da:29:0d:68:f1:8c:6f:59:c4:3a:40:76:
                    97:4f:0f:dc:86:37:49:a2:53:5c:19:ef:4c:dd:cc:
                    2c:69:2a:5c:d8:f5:82:e1:b4:3d:a0:0c:de:24:32:
                    14:fc:e6:68:0d:04:88:cb:d5:3e:01:89:1e:03:67:
                    51:be:1f:10:a7:40:43:ab:b9:e8:c9:58:7d:97:5c:
                    d2:04:dd:72:65:02:15:70:ca:19:8e:47:9f:62:c2:
                    2f:59:e0:cf:1e:ec:1b:db:e6:6f:d6:c5:62:2d:73:
                    8c:d1:79:68:3c:ac:c3:7a:24:7c:0b:f3:52:db:71:
                    ab:d7:72:e2:23:50:ab:47:eb:c9:be:c5:ef:17:4a:
                    9c:7a:84:54:fa:0d:26:d7:82:76:2d:f9:32:a9:7d:
                    63:45:e7:57:3b:0f:52:08:71:54:4f:c4:d4:fe:dc:
                    c3:3d:15:d6:38:3f:db:a1:19:57:b3:e0:6e:9a:a6:
                    4d:12:ad:11:d7:48:88:9b:63:e1:90:67:5a:83:b1:
                    d4:4c:6d:0e:54:9a:bb:3c:66:ef:73:23:ea:ed:86:
                    c5:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:65:F1:86:08:A4:1C:F2:E7:8B:95:DA:9A:04:3C:C4:96:01:7B:42
            X509v3 Authority Key Identifier:
                keyid:A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3234302e302f32322d3234203d3e203237383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:f1:e3:cf:53:6f:62:b0:2f:8e:93:60:15:90:6c:fb:0c:
         40:24:83:9f:07:df:46:85:9a:1c:4d:74:f6:6f:70:22:c9:c2:
         b3:9e:d1:7f:4f:e3:6f:37:0b:58:21:bd:4f:f9:bc:50:4e:2c:
         8d:1b:07:cf:2d:ee:81:e6:d5:e9:1b:df:d4:ea:2c:37:0e:33:
         77:c3:7d:50:9b:1a:5a:73:47:c8:ea:2f:7c:c4:d6:0b:18:49:
         88:6f:f0:27:a0:13:4d:13:87:05:0d:cc:35:40:b8:30:98:61:
         43:ee:dc:1e:98:7a:e2:24:97:c2:e3:57:1d:a1:d6:26:6c:a4:
         94:85:6c:db:ce:36:7f:9a:df:79:c1:0d:6f:f9:5a:ad:60:f3:
         b7:49:6b:f0:36:1d:5e:0c:4f:0c:69:38:65:cb:e8:0a:5f:35:
         c5:04:26:27:05:d3:71:4e:3e:66:83:a8:69:25:60:d6:ce:c5:
         a2:76:0a:2d:6b:e9:5f:e1:b2:a3:d1:50:ff:9c:69:c8:60:a3:
         08:e1:21:41:45:af:58:5e:d9:83:31:4d:fa:70:3b:d4:06:50:
         b0:ba:99:24:a3:10:62:2d:e0:32:2d:ef:bf:14:e8:90:45:94:
         ee:a0:dc:c1:07:59:f3:48:2f:4c:e2:8a:7e:f6:58:ca:7f:52:
         0d:e5:94:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 07:47:19 2024 by rpki-client on console-ams.rpki-client.org