Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/3137302e38332e3234302e302f32322d3234203d3e203532343638.roa
File:                     3137302e38332e3234302e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          P0z36facHlrn0vqDRC4LkRmlCDMqtkpXuxRu2Pk3jRw=
Subject key identifier:   E3:A5:6C:CE:48:D4:55:46:7A:C3:A2:CB:2D:53:CF:1F:8A:FF:89:74
Certificate issuer:       /CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
Certificate serial:       68FD41AACD842D376D4F48155262D56EC2090E3A
Authority key identifier: D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/3137302e38332e3234302e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:09:02 +0000
ROA not before:           Tue 05 Mar 2024 18:04:02 +0000
ROA not after:            Tue 04 Mar 2025 18:09:02 +0000
asID:                     52468
IP address blocks:        170.83.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:fd:41:aa:cd:84:2d:37:6d:4f:48:15:52:62:d5:6e:c2:09:0e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4A2D9881591DD14F59AE3D35AB8827CEDBE788A
        Validity
            Not Before: Mar  5 18:04:02 2024 GMT
            Not After : Mar  4 18:09:02 2025 GMT
        Subject: CN=E3A56CCE48D455467AC3A2CB2D53CF1F8AFF8974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:25:b7:34:72:6b:ec:51:7d:7c:8c:ce:f2:
                    8b:07:36:59:21:23:29:b0:8e:18:d4:98:4b:16:a1:
                    88:73:1d:2d:bb:59:ab:86:8d:1d:13:71:90:8a:60:
                    87:63:64:08:5a:a1:5d:5a:ff:c3:5c:36:36:41:8d:
                    40:d7:b7:35:0b:4e:48:31:94:0d:6d:0e:49:63:39:
                    96:1e:4f:ba:a1:8a:14:5f:73:f2:9b:0c:b3:04:00:
                    c1:64:15:11:3a:06:b8:18:f6:64:14:03:33:c9:65:
                    09:2b:96:68:cb:80:e1:79:b3:c2:a0:42:c2:60:5b:
                    eb:70:9e:fb:3a:07:fa:cf:10:87:62:40:49:be:bf:
                    5f:70:8c:73:1c:bc:93:14:f6:cd:23:61:be:a5:09:
                    40:f8:79:af:8d:c7:25:42:cd:46:01:34:94:8d:65:
                    59:8e:4a:3b:26:bc:be:a3:6e:fb:df:eb:4b:51:ab:
                    86:fc:d5:d5:b5:22:b4:1e:97:04:71:f6:27:e3:fa:
                    f0:0f:80:1f:d6:22:37:42:2b:9e:d7:c6:e3:3a:3c:
                    05:5d:1f:dd:76:14:f0:9f:cb:8c:52:f5:a5:6e:d6:
                    27:ab:69:95:ce:74:f2:f0:83:2c:a4:3b:a3:6f:e8:
                    be:b9:1a:c6:93:95:d6:f6:c8:32:76:3f:83:d1:2b:
                    40:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:6C:CE:48:D4:55:46:7A:C3:A2:CB:2D:53:CF:1F:8A:FF:89:74
            X509v3 Authority Key Identifier:
                keyid:D4:A2:D9:88:15:91:DD:14:F5:9A:E3:D3:5A:B8:82:7C:ED:BE:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D4A2D9881591DD14F59AE3D35AB8827CEDBE788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE90629661992A654272218DB8596F9D62BE08C6FCDA49802727E2D5E1CDB26/0/3137302e38332e3234302e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:90:5f:fd:52:47:e8:d6:8c:96:8f:b9:34:d7:0e:3a:4b:46:
         cb:50:a5:ed:22:a0:8d:2d:74:02:51:69:a3:af:07:76:ec:5f:
         de:df:c5:49:dd:06:81:1a:b8:f9:fe:3d:ab:69:58:87:6e:2b:
         59:b5:8a:33:f1:04:d2:fb:89:31:c9:b7:0c:70:5b:39:3b:69:
         91:df:71:ee:30:28:7b:02:4a:87:fb:62:71:6c:d0:fa:c4:72:
         dd:4b:1a:a0:e4:de:ce:04:13:c6:da:f0:f1:e6:b3:b8:20:9d:
         72:e5:14:5d:a8:d2:97:2c:8e:8c:1c:1a:70:b9:46:c7:df:22:
         d2:16:de:62:98:3d:6b:5d:a8:46:7f:44:ea:9d:27:c4:ba:6e:
         47:f4:1c:00:64:8c:03:c0:0f:a8:af:2a:04:a0:5e:c1:3f:50:
         4a:f7:59:cd:7b:53:e4:da:a0:90:cf:cc:0d:57:03:a6:5a:3c:
         f7:c3:ab:22:26:27:e8:f1:48:17:24:df:b7:81:b2:12:a2:7b:
         2e:30:52:e9:f9:04:65:cc:a8:ce:b5:1a:6b:42:c9:ef:b3:de:
         da:79:8f:fe:7e:29:9b:09:97:bc:44:37:7c:22:9c:13:e4:4b:
         f4:01:db:cd:52:41:63:af:9a:35:53:e0:6c:cf:1a:08:4d:9c:
         f4:bb:65:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:09 2024 by rpki-client on console-fra.rpki-client.org