Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa
File:                     3137302e3135302e382e302f32322d3234203d3e20323634373132.roa (raw, json)
Hash identifier:          rRPmEsQNT1lv1gT4+uRaeXvuKZ3/3GwHpwcoORNUvy4=
Subject key identifier:   C0:8A:6B:D2:35:7F:B1:73:16:6F:35:1D:56:E1:F8:D1:3E:4A:07:0D
Certificate issuer:       /CN=A5869529D5045BE846944304A74862560C583B82
Certificate serial:       3459ED0E538D9482CFB9834CDA03D9A6A414CBC5
Authority key identifier: A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa
Signing time:             Tue 05 Mar 2024 17:43:10 +0000
ROA not before:           Tue 05 Mar 2024 17:38:10 +0000
ROA not after:            Tue 04 Mar 2025 17:43:10 +0000
asID:                     264712
IP address blocks:        170.150.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl
                          rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:59:ed:0e:53:8d:94:82:cf:b9:83:4c:da:03:d9:a6:a4:14:cb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5869529D5045BE846944304A74862560C583B82
        Validity
            Not Before: Mar  5 17:38:10 2024 GMT
            Not After : Mar  4 17:43:10 2025 GMT
        Subject: CN=C08A6BD2357FB173166F351D56E1F8D13E4A070D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a9:a7:47:46:95:c9:c8:79:65:b1:a0:32:d3:
                    95:3c:05:57:fd:e9:89:c0:bb:54:56:68:bc:20:49:
                    94:7c:dc:f7:28:c2:26:90:58:ac:cc:ab:fd:28:25:
                    f9:15:ab:fd:be:85:52:5b:1f:88:5b:bc:44:40:62:
                    89:98:94:0f:82:6b:1b:d4:4c:50:3d:7d:83:c4:ad:
                    93:51:a4:e3:9e:fe:74:34:f7:f4:d1:02:7f:a6:82:
                    63:c0:45:04:24:92:cd:86:9e:27:04:6e:a5:eb:35:
                    70:1b:43:4a:42:01:a3:73:b6:a0:55:b4:51:29:ce:
                    2f:2e:ce:91:00:21:40:30:1d:50:19:ef:50:ae:da:
                    e9:a5:76:c4:07:b7:b8:19:47:4f:9a:1f:23:b9:a8:
                    8e:98:c2:16:ab:82:4b:79:e0:74:d4:56:63:50:d8:
                    82:9e:9e:f8:4c:ac:d0:92:2f:c1:c1:96:8f:90:36:
                    6f:b4:4e:16:25:8e:57:29:51:76:9f:b9:bf:06:a6:
                    65:6b:5e:ac:f2:89:f2:ff:7f:2c:02:44:43:7e:43:
                    09:96:57:53:f1:c7:2f:47:e3:95:8c:f5:d2:99:97:
                    81:dd:bf:31:42:14:1b:b8:08:7a:21:30:d8:54:21:
                    25:2b:10:c7:ca:78:c2:a1:a6:fb:ec:e1:30:13:c9:
                    3e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:6B:D2:35:7F:B1:73:16:6F:35:1D:56:E1:F8:D1:3E:4A:07:0D
            X509v3 Authority Key Identifier:
                keyid:A5:86:95:29:D5:04:5B:E8:46:94:43:04:A7:48:62:56:0C:58:3B:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/A5869529D5045BE846944304A74862560C583B82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5869529D5045BE846944304A74862560C583B82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/408BADD239FA7B927C406208FE8E94AD8C137EACCA447E6D7896BF74FF0323DC/0/3137302e3135302e382e302f32322d3234203d3e20323634373132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:54:f5:12:03:a7:2a:d5:44:1b:62:fd:68:a9:77:be:b6:3a:
         d5:cb:1f:1a:f5:d0:61:d4:d7:8b:ea:50:91:48:2e:d2:b3:44:
         e0:04:77:be:a0:5a:df:34:25:ef:64:20:5d:c1:d2:4d:72:4f:
         15:88:c8:b4:cb:c6:9e:c7:a6:d4:1a:8b:11:5d:e9:9c:4c:20:
         97:8b:50:90:9d:d1:a4:b8:35:c0:8f:26:fa:cc:48:87:ef:2e:
         a7:c5:86:b1:84:e1:23:a9:f9:19:ed:ec:44:cc:5e:10:90:18:
         53:07:f3:35:ec:36:e0:bf:ab:e0:f9:f9:69:23:80:20:d6:1e:
         dd:84:88:3e:df:0c:25:c7:ff:60:89:42:01:b5:b8:f4:06:b2:
         ac:0f:bd:da:dc:49:07:fa:55:37:a1:f5:c3:bf:b4:28:55:60:
         65:7a:e1:60:db:9e:e1:4b:56:63:ad:42:e3:c8:08:1c:3d:aa:
         b9:99:bb:f0:bd:6c:1b:09:e5:24:93:31:86:f4:54:23:f0:c2:
         f6:1c:ca:44:81:d7:64:7e:ab:56:8f:1b:14:69:68:51:70:1f:
         e3:21:83:23:1a:fa:d1:47:22:ee:e8:fa:a7:40:45:22:e8:04:
         35:b6:a8:13:19:fd:ec:74:8b:8f:c1:ce:07:c1:9a:04:89:5c:
         95:dc:f8:62
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUNFntDlONlILPuYNM2gPZpqQUy8UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU4Njk1MjlENTA0NUJFODQ2OTQ0MzA0QTc0ODYyNTYw
QzU4M0I4MjAeFw0yNDAzMDUxNzM4MTBaFw0yNTAzMDQxNzQzMTBaMDMxMTAvBgNV
BAMTKEMwOEE2QkQyMzU3RkIxNzMxNjZGMzUxRDU2RTFGOEQxM0U0QTA3MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYqadHRpXJyHllsaAy05U8BVf9
6YnAu1RWaLwgSZR83PcowiaQWKzMq/0oJfkVq/2+hVJbH4hbvERAYomYlA+CaxvU
TFA9fYPErZNRpOOe/nQ09/TRAn+mgmPARQQkks2GnicEbqXrNXAbQ0pCAaNztqBV
tFEpzi8uzpEAIUAwHVAZ71Cu2umldsQHt7gZR0+aHyO5qI6Ywhargkt54HTUVmNQ
2IKenvhMrNCSL8HBlo+QNm+0ThYljlcpUXafub8GpmVrXqzyifL/fywCREN+QwmW
V1Pxxy9H45WM9dKZl4HdvzFCFBu4CHohMNhUISUrEMfKeMKhpvvs4TATyT6NAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUwIpr0jV/sXMWbzUdVuH40T5KBw0wHwYDVR0j
BBgwFoAUpYaVKdUEW+hGlEMEp0hiVgxYO4IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80MDhCQUREMjM5RkE3QjkyN0M0MDYyMDhGRThFOTRBRDhD
MTM3RUFDQ0E0NDdFNkQ3ODk2QkY3NEZGMDMyM0RDLzAvQTU4Njk1MjlENTA0NUJF
ODQ2OTQ0MzA0QTc0ODYyNTYwQzU4M0I4Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9BNTg2OTUyOUQ1MDQ1QkU4NDY5
NDQzMDRBNzQ4NjI1NjBDNTgzQjgyLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDA4QkFERDIzOUZBN0I5MjdDNDA2MjA4RkU4RTk0QUQ4QzEzN0VBQ0NB
NDQ3RTZENzg5NkJGNzRGRjAzMjNEQy8wLzMxMzczMDJlMzEzNTMwMmUzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNDM3MzEzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqqWCDAN
BgkqhkiG9w0BAQsFAAOCAQEAKVT1EgOnKtVEG2L9aKl3vrY61csfGvXQYdTXi+pQ
kUgu0rNE4AR3vqBa3zQl72QgXcHSTXJPFYjItMvGnsem1BqLEV3pnEwgl4tQkJ3R
pLg1wI8m+sxIh+8up8WGsYThI6n5Ge3sRMxeEJAYUwfzNew24L+r4Pn5aSOAINYe
3YSIPt8MJcf/YIlCAbW49AayrA+92txJB/pVN6H1w7+0KFVgZXrhYNue4UtWY61C
48gIHD2quZm78L1sGwnlJJMxhvRUI/DC9hzKRIHXZH6rVo8bFGloUXAf4yGDIxr6
0Uci7uj6p0BFIugENbaoExn97HSLj8HOB8GaBIlcldz4Yg==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:42 2024 by rpki-client on console-fra.rpki-client.org