Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
File:                     3137302e38342e3136382e302f32322d3234203d3e203532333038.roa (raw, json)
Hash identifier:          QvJIHZNQ447EmBw5iJU9YuDQma6fNrPvMa9p1IQNJoo=
Subject key identifier:   BF:F0:8F:25:2F:28:B9:55:0B:73:46:3B:DA:4F:39:93:E6:AE:3C:23
Certificate issuer:       /CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
Certificate serial:       3ED68D4D4432897A8D49FF0318840500E9E11BA2
Authority key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa
Signing time:             Tue 05 Mar 2024 18:00:03 +0000
ROA not before:           Tue 05 Mar 2024 17:55:03 +0000
ROA not after:            Tue 04 Mar 2025 18:00:03 +0000
asID:                     52308
IP address blocks:        170.84.168.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d6:8d:4d:44:32:89:7a:8d:49:ff:03:18:84:05:00:e9:e1:1b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6
        Validity
            Not Before: Mar  5 17:55:03 2024 GMT
            Not After : Mar  4 18:00:03 2025 GMT
        Subject: CN=BFF08F252F28B9550B73463BDA4F3993E6AE3C23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:f6:6c:7f:e5:59:33:b7:3f:c7:45:1e:99:
                    1e:6c:59:41:7a:01:38:df:cf:b5:72:95:e3:14:46:
                    8e:06:d1:2c:12:db:d7:fe:74:77:18:59:b4:be:da:
                    88:98:51:27:81:b5:65:70:98:28:d8:72:b7:47:d7:
                    4e:92:2e:47:0a:0a:f0:c1:04:1d:a9:48:af:81:b4:
                    39:32:2c:5f:b2:20:ab:45:82:ee:3e:cf:6d:35:c3:
                    56:29:04:a9:ba:08:cf:6a:6e:b6:6d:a1:27:a9:fb:
                    92:c4:ba:b1:52:3b:47:0c:fd:4b:1c:7f:5c:8d:08:
                    b4:e5:c5:b2:64:ce:35:c0:6a:55:94:b3:31:aa:f7:
                    0d:a7:e3:73:1b:c7:04:83:f9:93:e6:f2:41:03:8d:
                    da:08:da:56:db:7f:80:87:1e:47:7c:5a:16:7c:a0:
                    8f:d8:7a:b0:9f:11:66:5e:2e:ea:c1:e6:46:49:f8:
                    79:9e:92:49:74:23:e7:76:3a:1b:c6:eb:67:71:d1:
                    b6:3b:42:96:27:95:e8:c0:7b:2c:f2:e7:c7:a4:b6:
                    79:f6:2c:00:9b:97:55:82:ac:89:e8:71:9b:28:78:
                    a1:ab:9e:38:e2:c6:0f:cb:2a:fa:5d:7e:c7:06:e7:
                    71:7c:3b:a6:74:39:09:34:b4:1f:d5:a6:8f:99:89:
                    54:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F0:8F:25:2F:28:B9:55:0B:73:46:3B:DA:4F:39:93:E6:AE:3C:23
            X509v3 Authority Key Identifier:
                keyid:8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/3137302e38342e3136382e302f32322d3234203d3e203532333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:b5:05:53:fe:3d:15:1d:f2:64:40:4e:6e:c9:da:13:15:
         28:5a:5a:7e:a9:38:f9:34:d1:3b:18:53:0b:84:a6:a5:ca:f1:
         99:3b:65:e4:25:64:1c:a4:f3:21:60:99:c3:c6:4a:72:fb:34:
         13:6d:1e:86:35:af:66:da:ca:8e:fa:da:a5:eb:d6:0b:18:74:
         b6:f8:29:21:16:72:dd:4d:60:58:ad:ff:36:50:64:d9:35:9e:
         60:fb:91:09:21:ba:91:d2:a2:4c:5b:3a:ff:f6:26:b5:68:12:
         59:1c:15:c6:3d:a0:52:81:0b:4a:c4:d0:1f:48:ee:46:2c:98:
         62:7d:9a:d1:50:e7:76:31:48:a1:73:ce:68:7d:f1:3b:d2:ff:
         36:6a:aa:38:0b:0f:02:3b:ca:07:c9:96:e9:e6:e9:0e:d0:b4:
         bc:6c:96:2a:12:9c:ba:52:35:ad:f8:9f:e6:64:e7:ce:21:e0:
         bf:1d:dc:cc:5b:2a:2f:20:71:9b:e6:ff:5a:2f:e6:f2:d1:fe:
         61:5b:20:2d:6c:ab:e7:b0:bb:59:0a:f5:70:81:f4:08:e9:6f:
         d6:9b:fa:e0:88:71:3c:38:11:b9:2c:1c:9b:6e:81:40:92:f4:
         79:81:61:ef:7d:a7:53:72:58:3b:be:a9:97:f3:05:f1:15:cd:
         f4:50:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:17 2024 by rpki-client on console-ams.rpki-client.org