Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
File:                     3137302e37392e38382e302f32322d3232203d3e20323637383537.roa (raw, json)
Hash identifier:          IgvT+xOQTMnmrWelE+aRk3dwG8czefB3C2XLMiGzhBQ=
Subject key identifier:   EE:69:8A:66:6A:DF:61:FA:E8:79:71:F4:42:3A:12:9F:2F:7C:7D:55
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       4C941405DB688FFA58D8E1EBB2A5BFB40F67CEA5
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa
Signing time:             Tue 05 Mar 2024 17:53:23 +0000
ROA not before:           Tue 05 Mar 2024 17:48:23 +0000
ROA not after:            Tue 04 Mar 2025 17:53:23 +0000
asID:                     267857
IP address blocks:        170.79.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:94:14:05:db:68:8f:fa:58:d8:e1:eb:b2:a5:bf:b4:0f:67:ce:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Mar  5 17:48:23 2024 GMT
            Not After : Mar  4 17:53:23 2025 GMT
        Subject: CN=EE698A666ADF61FAE87971F4423A129F2F7C7D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:05:f0:7f:f0:0a:45:2d:5d:aa:80:03:c2:76:
                    5e:4b:12:3b:b1:2f:23:25:1f:35:98:d2:e7:04:92:
                    5c:19:e2:66:02:59:ea:43:0e:61:e3:ff:89:97:29:
                    ae:71:b5:4b:92:21:5f:d1:2d:57:25:86:b0:16:00:
                    33:17:87:88:e0:b5:82:7b:97:d3:69:9b:de:ef:f3:
                    42:97:8f:0c:69:f0:3c:f2:a4:8d:47:0e:1a:e7:a2:
                    45:e0:45:34:71:1e:a1:cd:11:ed:6d:cd:0d:56:d5:
                    d2:18:70:69:18:7a:87:39:b5:36:74:8b:7e:ec:52:
                    c7:b0:66:5d:43:c5:08:50:9d:f3:20:9f:b1:a2:38:
                    02:7a:50:86:a5:5c:29:80:64:3b:8d:ea:c0:6d:15:
                    75:c7:87:c8:de:17:db:4b:2a:6a:09:b5:90:3e:f2:
                    7a:5d:43:0b:e9:66:ce:fb:ad:b0:8d:79:b3:a0:24:
                    df:7b:0f:24:8e:d7:1a:c7:d0:a1:fa:54:ac:58:d2:
                    2d:bd:34:b9:7e:d0:a6:38:21:2e:03:b5:24:87:ec:
                    34:e8:26:d5:e7:fe:8e:20:d9:6b:d2:df:de:2d:a7:
                    6f:a9:a8:9b:69:64:0a:97:2f:8b:bd:2d:e7:e7:6d:
                    22:53:55:24:35:a6:ae:57:33:73:06:30:9d:2f:85:
                    dc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:69:8A:66:6A:DF:61:FA:E8:79:71:F4:42:3A:12:9F:2F:7C:7D:55
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38382e302f32322d3232203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:7c:8b:19:01:c5:09:a6:36:8a:7a:ce:8f:46:e7:11:60:93:
         ee:15:89:01:92:cd:49:70:10:0b:77:a9:73:0a:5c:e9:07:b6:
         d2:20:fc:71:77:93:b1:54:74:59:f6:ff:6b:53:93:49:4e:1e:
         d2:7a:70:02:38:40:58:0f:d2:c7:3c:e6:55:e5:03:9a:e5:30:
         23:f2:27:9e:d3:1a:e9:e8:57:5a:77:5e:72:b1:e5:93:8e:b1:
         24:1d:67:9c:95:80:5f:d9:64:8e:d9:6e:53:10:c6:f6:3e:34:
         4a:ca:ec:8a:64:ad:48:58:0d:f0:6d:6c:f5:ae:07:b2:1d:52:
         a1:26:88:94:ff:5b:dd:13:4b:45:b0:c7:00:99:f4:e8:1e:b1:
         8b:d7:9a:ac:f6:80:ea:b0:09:86:26:2e:d7:df:5b:23:89:92:
         b3:29:b7:78:c8:75:ab:05:62:d2:3a:2e:c6:75:30:d0:0d:0d:
         be:72:85:71:77:89:aa:d9:a6:44:4a:db:67:9b:06:8e:9f:48:
         40:17:c3:a8:10:f5:ff:a1:e3:67:01:b4:9b:46:4f:52:50:9a:
         c9:66:1c:15:c4:49:f0:b0:76:f5:34:f8:02:f9:94:2c:89:6f:
         41:ba:b5:3b:98:00:72:f4:58:79:4c:1e:a2:6f:4d:14:46:3e:
         a3:e2:9e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org