Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
File:                     3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa (raw, json)
Hash identifier:          BZgFHfhMx4JFH4cqJFD4k4kZVUPfvyUFtH/nZJ1VaQw=
Subject key identifier:   86:84:39:16:6F:B8:CC:64:04:67:44:E5:D4:76:25:B3:22:A4:D0:F0
Certificate issuer:       /CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
Certificate serial:       1DB19BB03F559BF0780B9CAC3814ADCB00B4ECA1
Authority key identifier: B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa
Signing time:             Tue 05 Mar 2024 18:22:46 +0000
ROA not before:           Tue 05 Mar 2024 18:17:46 +0000
ROA not after:            Tue 04 Mar 2025 18:22:46 +0000
asID:                     265657
IP address blocks:        170.246.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:b1:9b:b0:3f:55:9b:f0:78:0b:9c:ac:38:14:ad:cb:00:b4:ec:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B05D2A8222011E8BE02C8B0C3D15D4A94366196C
        Validity
            Not Before: Mar  5 18:17:46 2024 GMT
            Not After : Mar  4 18:22:46 2025 GMT
        Subject: CN=868439166FB8CC64046744E5D47625B322A4D0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a7:39:69:38:55:ce:82:9c:7d:2d:5e:81:b5:
                    bd:91:44:06:ea:bb:54:20:c1:2c:27:55:a3:d4:85:
                    97:cf:e0:8f:0f:b5:50:92:77:f7:b2:d3:0c:eb:44:
                    e3:50:d1:5f:85:5f:ea:f0:38:46:cd:f0:63:29:57:
                    ae:aa:0d:00:0c:5c:e4:c3:3a:b4:eb:e2:76:54:81:
                    dd:ad:2d:be:31:13:93:65:22:eb:92:45:1e:f1:8f:
                    98:81:05:1e:06:96:56:10:b7:17:d5:9f:4b:df:49:
                    07:22:a1:2e:83:39:42:09:87:fa:4f:62:75:e2:aa:
                    48:6c:ce:52:fb:37:d4:47:e1:d5:c8:c5:8f:e3:48:
                    9e:ba:c4:8c:14:a4:b7:0f:c4:12:93:c8:b5:cb:17:
                    e8:45:da:0f:39:5b:b6:3c:eb:4f:61:a7:57:39:fc:
                    78:f0:e2:79:65:6e:46:e5:fe:07:16:a8:ba:0b:10:
                    5d:96:2c:c6:c1:29:57:a6:36:fc:72:e6:8a:31:cc:
                    5b:22:3c:a7:dc:52:b7:61:a3:9b:88:84:bc:ab:5a:
                    44:73:02:18:d2:0c:cf:19:a6:11:79:aa:4d:5e:06:
                    9c:de:82:10:c4:1a:07:24:88:4d:30:f4:35:38:8c:
                    8c:79:07:d5:37:c0:9b:61:3c:85:15:60:2d:43:f0:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:84:39:16:6F:B8:CC:64:04:67:44:E5:D4:76:25:B3:22:A4:D0:F0
            X509v3 Authority Key Identifier:
                keyid:B0:5D:2A:82:22:01:1E:8B:E0:2C:8B:0C:3D:15:D4:A9:43:66:19:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B05D2A8222011E8BE02C8B0C3D15D4A94366196C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3FF33EF99C8F8A6D93CB972559B912F908F5F3208A297928266C810A74452DCB/0/3137302e3234362e38342e302f32322d3234203d3e20323635363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:aa:57:43:6b:ea:da:7e:82:e7:0f:fa:62:b5:f0:50:3b:bf:
         22:60:99:6f:10:70:95:28:1c:9e:cd:db:36:23:21:33:71:f9:
         10:0b:93:7d:1b:61:3d:4f:84:cc:96:7f:99:50:e1:b5:c8:ad:
         ac:6f:63:d8:1e:8e:4e:16:1e:a4:a9:23:44:c1:14:9c:85:1a:
         cf:f9:df:e8:2c:93:11:2d:0b:32:2e:c2:d9:da:40:20:01:f0:
         21:ce:9e:7b:88:82:f4:92:e1:26:69:2d:0d:3f:2a:05:c2:cb:
         0c:19:70:83:f6:b0:d4:75:04:62:6d:2c:40:83:29:71:98:a0:
         d5:9c:a6:60:b0:b6:4a:23:ca:f8:75:76:ac:6f:9f:4b:19:f7:
         af:a5:d7:5b:b9:9d:52:b4:dd:6f:c4:8c:a4:6b:19:3d:e2:59:
         7b:78:c4:1d:94:b8:d8:41:e9:f9:d3:40:7d:3c:1c:20:90:e8:
         f0:5d:07:e0:4e:2d:8c:3a:ea:b8:ff:55:55:0f:32:6f:05:3d:
         dd:9e:6b:52:0f:9d:27:4d:f7:61:c7:4f:62:cc:1a:1a:b7:c0:
         b9:17:d0:62:f1:6f:4d:b0:99:7a:58:94:be:e5:54:8f:f3:4a:
         d3:de:27:71:d6:da:5a:ea:00:38:1f:95:97:ea:85:6c:d0:bc:
         ea:f4:67:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:17 2024 by rpki-client on console-ams.rpki-client.org