Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
File:                     3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa (raw, json)
Hash identifier:          CDjshCxfko/wHUyHVucuOa3JFz/75G5PSovN+hdF5Ws=
Subject key identifier:   37:52:10:56:3B:92:9C:74:4E:83:23:D8:A5:4B:2A:D8:25:E3:59:20
Certificate issuer:       /CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
Certificate serial:       6CAC53E08E3FC522167A03AAAD34AF631A845087
Authority key identifier: 94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa
Signing time:             Tue 05 Mar 2024 17:55:11 +0000
ROA not before:           Tue 05 Mar 2024 17:50:11 +0000
ROA not after:            Tue 04 Mar 2025 17:55:11 +0000
asID:                     262159
IP address blocks:        170.239.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:ac:53:e0:8e:3f:c5:22:16:7a:03:aa:ad:34:af:63:1a:84:50:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94C3A0771637ACB24BEACD23DDD2075FB053F811
        Validity
            Not Before: Mar  5 17:50:11 2024 GMT
            Not After : Mar  4 17:55:11 2025 GMT
        Subject: CN=375210563B929C744E8323D8A54B2AD825E35920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:c1:d9:80:67:85:e5:f5:8c:65:8c:f5:b4:
                    e0:0d:af:3e:24:78:4f:11:57:ce:5a:c8:53:26:9a:
                    08:2a:2b:09:34:4b:d8:bc:59:a9:28:d4:4c:0f:a0:
                    d4:56:71:bb:0b:8e:4c:0c:99:41:f7:33:52:65:83:
                    2b:df:a9:ad:69:5a:06:ba:34:7b:cc:9b:b0:73:88:
                    47:30:24:1d:27:31:0f:d9:f7:1c:02:b7:b9:84:75:
                    d6:68:eb:5e:ec:2f:2c:42:59:77:ce:11:fe:ca:e4:
                    85:0a:73:c5:6d:6e:46:b4:48:eb:ea:18:df:56:bb:
                    1f:d5:c7:91:26:e5:a9:23:6b:ea:02:0e:4d:62:9b:
                    16:15:85:cb:87:e3:35:e1:bb:8d:9e:fa:b1:09:8a:
                    ff:45:a8:4e:a1:58:da:d3:f6:bf:03:86:b3:a7:19:
                    48:c3:df:d0:fa:ab:ad:82:9f:78:57:33:5a:43:32:
                    f2:cd:4b:92:87:00:c7:36:41:09:e8:0b:30:0d:b6:
                    c9:f6:f4:d5:ab:47:c9:7c:c5:e6:40:01:b7:73:0c:
                    7b:fe:fc:9e:7c:2d:c8:75:1c:ea:da:36:0a:31:ee:
                    ef:d6:0b:3b:45:71:e0:33:de:60:a7:89:71:11:66:
                    ac:66:17:bf:83:55:94:51:16:1e:12:01:6f:1c:74:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:52:10:56:3B:92:9C:74:4E:83:23:D8:A5:4B:2A:D8:25:E3:59:20
            X509v3 Authority Key Identifier:
                keyid:94:C3:A0:77:16:37:AC:B2:4B:EA:CD:23:DD:D2:07:5F:B0:53:F8:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/94C3A0771637ACB24BEACD23DDD2075FB053F811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3DC1B4E99577182B75B9519501258E03EE89EFB4F984A3918B28A76F3A972006/0/3137302e3233392e3132302e302f32322d3234203d3e20323632313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:bc:31:f8:4e:be:da:fe:99:e2:bb:31:50:f0:14:0f:42:57:
         b2:c0:5e:b9:e5:ca:36:42:f0:43:b4:e4:b8:c1:e4:3b:3d:d2:
         10:24:65:9a:0e:f5:6c:f6:fb:78:a7:4f:b7:04:cb:03:c1:4f:
         7b:0f:24:d9:d1:6a:9d:8d:54:f5:c7:a8:bb:99:31:de:ef:ab:
         c6:fc:e5:2b:fb:e4:e5:63:58:c6:c9:5c:4d:44:2c:a6:b5:de:
         8d:83:e6:0c:cd:45:de:95:41:f5:1f:f2:f6:43:07:8d:0a:36:
         5e:fd:ca:25:71:0a:64:a0:a0:58:2f:05:15:8c:2e:6f:db:0c:
         f8:05:d9:ac:41:77:ce:50:95:98:9b:9f:ca:78:f9:51:14:f0:
         df:76:9b:61:b4:ef:e9:a3:4c:e5:b0:f7:37:08:1e:49:b7:ac:
         c9:f6:b0:b5:b7:cc:01:93:04:09:3b:0b:bb:c0:d3:f3:5d:72:
         be:2c:6b:41:da:9d:23:05:ec:d8:52:6f:22:fd:e2:cd:f0:72:
         da:be:83:db:bb:55:d7:7a:02:80:a7:03:34:2c:3d:8e:f4:6b:
         6b:8d:25:f2:58:dd:91:6b:ef:d1:15:b6:38:d2:98:2c:0e:71:
         ae:80:39:e4:db:8f:33:48:a9:bd:38:ed:46:55:01:ab:73:1e:
         9e:5d:fc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 11:04:29 2024 by rpki-client on console-ams.rpki-client.org