Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa
File:                     3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          GEP3YAU5d1Z7ZAZTSU2NswdHhAvXvHmwpDdvaUpUHro=
Subject key identifier:   EA:1A:99:A1:1E:F9:9D:E5:04:01:A9:37:9D:2B:FC:3D:81:0E:38:98
Certificate issuer:       /CN=1D8A96BE43E9FE347873058CD625D12612C5B798
Certificate serial:       52088C66E821869C062F207105CFF99DAD172AFC
Authority key identifier: 1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:58:41 +0000
ROA not before:           Tue 05 Mar 2024 17:53:41 +0000
ROA not after:            Tue 04 Mar 2025 17:58:41 +0000
asID:                     27843
IP address blocks:        170.233.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 10 Sep 2024 14:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:8c:66:e8:21:86:9c:06:2f:20:71:05:cf:f9:9d:ad:17:2a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D8A96BE43E9FE347873058CD625D12612C5B798
        Validity
            Not Before: Mar  5 17:53:41 2024 GMT
            Not After : Mar  4 17:58:41 2025 GMT
        Subject: CN=EA1A99A11EF99DE50401A9379D2BFC3D810E3898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:59:c4:fa:ac:5d:14:ec:94:a9:2e:37:23:2a:
                    af:0a:de:da:d1:ee:bf:27:16:11:0f:c5:ea:cf:99:
                    e6:0a:3f:19:a1:67:ad:ea:7a:27:54:7a:40:b0:a8:
                    b0:0f:ca:dc:b4:24:bd:69:7c:69:86:9e:c5:ed:f6:
                    91:56:c5:72:90:9f:0e:98:da:ca:35:ef:b1:be:93:
                    2f:47:e2:f1:8e:3d:f4:9f:cf:c1:56:80:15:86:38:
                    aa:47:47:6d:b0:3f:dc:c3:f3:2b:b7:b1:6c:7b:6f:
                    bb:b1:f5:26:ce:78:bf:df:a7:3d:05:d6:2c:8c:30:
                    59:a0:c8:62:70:bd:fc:92:17:23:f3:1b:d1:31:4c:
                    85:82:84:4f:ec:e1:bb:fd:7c:f6:69:a5:8e:73:76:
                    27:e8:d5:a4:58:bd:ea:5c:b6:43:24:24:80:c7:ee:
                    86:bf:be:e0:0e:f1:69:be:cd:9d:5b:7f:fe:3b:81:
                    15:5b:c6:15:8e:9e:5f:0f:10:2c:f8:43:7b:ca:29:
                    7a:8b:12:51:c3:d2:79:39:7f:79:86:28:8c:b1:2e:
                    15:57:50:1c:bd:b8:78:e1:ab:39:bc:43:96:76:ed:
                    04:bc:28:ec:8e:67:2a:f7:5f:fd:06:c4:31:21:73:
                    31:9d:b1:08:a6:3f:ed:34:62:37:b5:8d:3e:d0:e4:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1A:99:A1:1E:F9:9D:E5:04:01:A9:37:9D:2B:FC:3D:81:0E:38:98
            X509v3 Authority Key Identifier:
                keyid:1D:8A:96:BE:43:E9:FE:34:78:73:05:8C:D6:25:D1:26:12:C5:B7:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/1D8A96BE43E9FE347873058CD625D12612C5B798.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D8A96BE43E9FE347873058CD625D12612C5B798.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FEF661EC2ABA29EEF3E07E04168ED1D783502C60A99873200BA37F191B44049/0/3137302e3233332e3134342e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:cc:5e:59:51:d4:51:49:2b:06:37:0c:5c:56:6f:7d:8f:db:
         82:95:0f:57:68:dd:4c:8f:e9:17:43:eb:5e:1d:28:34:1c:a7:
         36:bc:b4:00:56:a7:49:f5:09:04:07:ed:b6:71:ff:e7:87:a2:
         ae:5f:3a:4f:7f:af:41:e7:69:ca:6b:9a:9c:fb:77:f8:be:ad:
         1e:5c:22:f4:d5:78:5b:25:b9:6c:49:b3:35:4c:ef:b0:28:11:
         d2:66:a1:cd:42:41:e3:54:b6:51:07:5c:12:4c:3c:5f:3b:5d:
         57:4d:0d:c3:35:a1:21:1f:d4:2f:35:91:2a:0d:37:c0:11:76:
         04:d9:78:d6:63:0e:d0:3e:4d:a3:08:7f:ae:a8:ce:3f:bc:aa:
         d4:7d:03:db:c5:67:f1:45:d6:09:f9:5c:1a:fd:ea:d8:36:63:
         e7:b9:34:d0:d4:77:fe:bf:52:71:c9:1a:89:ab:69:bf:93:14:
         a3:0d:3a:32:76:c2:91:63:33:13:ae:db:db:62:11:d8:05:bb:
         43:c8:19:ce:aa:e3:d6:57:d8:21:f5:ea:0c:42:d1:25:8a:1c:
         97:c9:b9:c9:5f:e8:83:8d:4d:85:08:3d:91:a3:16:2b:d0:bb:
         18:5d:8f:45:0d:ef:16:e8:fb:ae:2f:46:f9:3c:1e:67:b9:cf:
         4b:e7:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:30:33 2024 by rpki-client on console-fra.rpki-client.org