Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
File:                     3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa (raw, json)
Hash identifier:          wkZ5uE1+CXGam3SL36k8LC8xeR+BII49bqFsyLUbNyY=
Subject key identifier:   76:CF:1D:DF:A8:8C:FB:81:E4:82:92:EE:50:9C:12:40:EA:80:98:AA
Certificate issuer:       /CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
Certificate serial:       6F53FC5A874EB9E994CA732DE326F87D7F22F23F
Authority key identifier: EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa
Signing time:             Tue 05 Mar 2024 18:04:47 +0000
ROA not before:           Tue 05 Mar 2024 17:59:47 +0000
ROA not after:            Tue 04 Mar 2025 18:04:47 +0000
asID:                     264830
IP address blocks:        170.80.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:53:fc:5a:87:4e:b9:e9:94:ca:73:2d:e3:26:f8:7d:7f:22:f2:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EEFCF62476998633F8D62C020C074FEF5CD0077E
        Validity
            Not Before: Mar  5 17:59:47 2024 GMT
            Not After : Mar  4 18:04:47 2025 GMT
        Subject: CN=76CF1DDFA88CFB81E48292EE509C1240EA8098AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ba:af:8c:7f:57:75:3b:43:26:bb:b4:db:79:
                    1a:34:01:70:77:47:0b:3d:52:02:68:b7:e6:f1:4d:
                    b8:f9:45:57:0b:58:b6:ba:9b:45:ec:8b:dd:ac:d5:
                    4d:4d:0f:fa:5e:b9:6f:9f:38:e0:42:e8:82:0e:6c:
                    c8:77:3c:01:06:d7:29:f9:06:aa:2a:48:d4:04:dc:
                    84:f6:ea:81:9e:2e:ca:61:96:97:ff:06:7b:f3:b3:
                    ff:47:df:47:4b:9b:eb:98:52:bb:90:56:ee:3a:76:
                    62:e3:44:46:2a:a3:a6:35:23:67:75:e1:bc:07:fc:
                    63:c3:45:67:90:22:8e:b1:ae:5c:8c:34:0e:65:00:
                    6f:0c:f0:7d:f1:5e:ad:52:e6:c5:8a:07:6a:92:ce:
                    ee:2a:11:69:aa:cd:83:1f:6a:c5:f5:0c:a8:b1:31:
                    cf:59:2f:e5:1c:5c:16:ea:93:fc:da:66:a6:1b:be:
                    ef:78:54:e5:cd:9d:9c:e2:e9:fd:ed:e9:95:eb:47:
                    11:cc:ad:e4:e6:41:7a:f8:28:0a:fa:05:0d:f5:2b:
                    82:88:27:ea:e3:2c:e2:10:50:a8:bc:ae:c8:e6:d8:
                    36:27:26:fc:a5:79:8f:90:61:59:1d:4f:d9:dc:34:
                    eb:e1:38:a0:e8:a7:81:8a:d1:fd:4c:aa:44:94:97:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CF:1D:DF:A8:8C:FB:81:E4:82:92:EE:50:9C:12:40:EA:80:98:AA
            X509v3 Authority Key Identifier:
                keyid:EE:FC:F6:24:76:99:86:33:F8:D6:2C:02:0C:07:4F:EF:5C:D0:07:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EEFCF62476998633F8D62C020C074FEF5CD0077E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/413D72ABA5C1F5AE1BE97667EDF4E0F83F8D3880B9AF109BDCAA978EEE5086E1/0/3137302e38302e3232382e302f32322d3234203d3e20323634383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:20:95:9c:13:26:d6:87:03:a3:47:1c:e5:86:b5:64:6a:18:
         cf:a7:15:eb:c1:94:89:d1:e5:77:9f:9f:6b:fd:31:ec:3f:e0:
         86:c2:ca:42:b5:38:47:d8:9f:52:45:2b:6e:22:cd:0b:3f:de:
         04:d2:3a:5a:b2:47:b5:67:de:7b:15:e5:f5:34:eb:1d:28:37:
         b6:69:bb:a6:c4:06:5e:94:f3:9d:30:ee:17:2a:5f:d4:e3:45:
         2a:da:82:31:e4:5d:04:05:97:4d:9d:42:33:73:d2:c6:b0:b1:
         f3:a5:01:39:14:a8:51:c8:76:b2:44:cf:1f:d3:d4:43:d8:1f:
         69:38:0c:4a:15:ca:2f:c6:0e:ef:2b:9f:7f:ba:79:ea:f3:9c:
         10:1d:81:0f:a2:25:6d:67:fe:2a:cd:f4:9e:46:1c:d1:3d:a3:
         da:ff:3f:93:20:c7:28:6d:fa:f4:cf:8c:39:ae:32:e1:91:67:
         f0:6f:ef:df:7e:b5:60:65:3e:19:ec:97:5b:f6:90:fb:c1:fa:
         f8:45:fb:0e:e0:c0:bc:ee:80:d0:24:42:a0:d2:cc:76:78:77:
         51:8a:3c:cf:1c:d5:08:0c:ef:da:97:65:73:df:2f:ce:21:59:
         f3:8c:4b:cc:49:f8:0b:a6:c9:6a:3b:fb:8a:3a:cd:9b:18:60:
         5b:c5:c0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:29:16 2024 by rpki-client on console-fra.rpki-client.org