Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa
File:                     3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa (raw, json)
Hash identifier:          0wGpJRUfQkWNdQxXWw3C+hEo/pyBmB6RDC4btXTGE4s=
Subject key identifier:   01:B2:A0:4A:69:E9:71:F5:5D:69:03:98:D2:3B:2C:1D:EE:19:55:67
Certificate issuer:       /CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
Certificate serial:       6C8768557399D0B0A1D8111257975E259526C7FB
Authority key identifier: 1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa
Signing time:             Tue 05 Mar 2024 17:41:07 +0000
ROA not before:           Tue 05 Mar 2024 17:36:07 +0000
ROA not after:            Tue 04 Mar 2025 17:41:07 +0000
asID:                     264732
IP address blocks:        170.233.68.0/22 maxlen: 25

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl
                          rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:87:68:55:73:99:d0:b0:a1:d8:11:12:57:97:5e:25:95:26:c7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4C8E2A50993D70AF79E87C7E1B8660979E2614
        Validity
            Not Before: Mar  5 17:36:07 2024 GMT
            Not After : Mar  4 17:41:07 2025 GMT
        Subject: CN=01B2A04A69E971F55D690398D23B2C1DEE195567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:bb:bd:1c:ff:52:8b:06:6f:2d:4b:d5:5b:
                    9b:2b:fe:75:a3:9d:01:10:08:f3:c4:b6:1f:df:54:
                    df:46:b6:2b:c6:38:5a:13:7a:9f:62:78:ae:01:73:
                    a6:f4:40:72:57:33:16:74:f5:bb:e9:7c:d2:63:52:
                    4f:db:f2:1f:db:b5:a4:80:20:ed:70:de:78:93:5b:
                    57:85:49:bc:8c:c8:f2:8b:77:d8:80:6e:71:12:83:
                    c2:90:f9:04:5d:d3:bd:5e:c8:8e:5d:4e:ff:09:dc:
                    09:59:10:6a:d0:70:65:56:88:1c:82:6c:4b:48:87:
                    85:df:e8:8b:c6:fa:ce:72:b7:39:13:9c:c0:0a:c0:
                    7b:70:eb:8a:89:f0:ca:a6:68:58:e3:63:99:d4:29:
                    6b:27:dc:64:3c:16:9a:06:96:77:51:2c:ce:2b:6b:
                    c0:04:eb:68:85:d8:8f:74:55:8d:34:e1:ce:a7:80:
                    34:1c:42:62:7b:ed:f5:d2:e1:46:6f:ca:fa:62:20:
                    9a:d9:c8:f5:d3:4d:90:0e:70:ec:17:ee:eb:82:47:
                    3b:7c:ad:06:9b:23:ff:b6:c7:dd:a2:08:16:36:70:
                    53:0e:c4:0a:48:77:95:10:97:46:2f:87:46:b5:5e:
                    3c:f2:22:87:f7:bb:7a:83:b1:2e:3d:d3:df:95:45:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B2:A0:4A:69:E9:71:F5:5D:69:03:98:D2:3B:2C:1D:EE:19:55:67
            X509v3 Authority Key Identifier:
                keyid:1F:4C:8E:2A:50:99:3D:70:AF:79:E8:7C:7E:1B:86:60:97:9E:26:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F4C8E2A50993D70AF79E87C7E1B8660979E2614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/454A6027DDD5263133FA9344DFA716AB489C8DA8889090E0FB35F36867C912EC/0/3137302e3233332e36382e302f32322d3235203d3e20323634373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:04:6f:e9:bb:68:9b:c3:b9:ad:ff:1a:74:6e:95:53:0c:94:
         ec:a7:c2:ee:8a:7f:1d:11:46:a1:db:cf:c6:3d:c2:3f:54:13:
         9a:73:78:9e:44:c8:a8:01:27:c4:f7:58:ec:97:4f:77:d8:3d:
         cc:7d:4a:10:44:6e:39:2c:4b:54:c5:1c:a8:c8:75:82:92:1d:
         e9:51:0e:fc:1a:ce:10:fb:df:a6:55:75:6c:01:47:75:12:e6:
         ee:43:56:0f:d8:bd:af:4e:5b:1e:be:89:84:5e:06:58:d7:76:
         ce:a5:55:c5:55:c2:92:06:02:6a:71:68:34:ca:44:48:ca:9b:
         f3:38:74:9e:22:82:92:dd:86:c8:ee:69:25:af:7d:ad:6a:3f:
         4b:41:a9:c6:4c:5d:4e:66:07:e7:a0:46:93:22:48:08:a8:b7:
         ce:9e:3a:d6:59:ca:bb:86:1d:4a:62:a8:e0:92:28:61:3b:1e:
         92:46:2a:71:67:0d:dd:35:56:26:b1:7c:f1:c5:df:c0:ba:4f:
         3b:82:cc:ee:88:98:43:20:36:74:30:ed:c6:41:27:cb:90:fd:
         50:14:4a:6d:6e:83:de:e0:08:50:0f:2f:65:ee:4a:59:5f:82:
         47:6d:5a:30:71:56:aa:17:65:0f:03:0c:7e:fd:45:e9:05:48:
         40:83:3f:a2
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUbIdoVXOZ0LCh2BESV5deJZUmx/swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY0QzhFMkE1MDk5M0Q3MEFGNzlFODdDN0UxQjg2NjA5
NzlFMjYxNDAeFw0yNDAzMDUxNzM2MDdaFw0yNTAzMDQxNzQxMDdaMDMxMTAvBgNV
BAMTKDAxQjJBMDRBNjlFOTcxRjU1RDY5MDM5OEQyM0IyQzFERUUxOTU1NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjOru9HP9SiwZvLUvVW5sr/nWj
nQEQCPPEth/fVN9GtivGOFoTep9ieK4Bc6b0QHJXMxZ09bvpfNJjUk/b8h/btaSA
IO1w3niTW1eFSbyMyPKLd9iAbnESg8KQ+QRd071eyI5dTv8J3AlZEGrQcGVWiByC
bEtIh4Xf6IvG+s5ytzkTnMAKwHtw64qJ8MqmaFjjY5nUKWsn3GQ8FpoGlndRLM4r
a8AE62iF2I90VY004c6ngDQcQmJ77fXS4UZvyvpiIJrZyPXTTZAOcOwX7uuCRzt8
rQabI/+2x92iCBY2cFMOxApId5UQl0Yvh0a1XjzyIof3u3qDsS4909+VRRy5AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUAbKgSmnpcfVdaQOY0jssHe4ZVWcwHwYDVR0j
BBgwFoAUH0yOKlCZPXCveeh8fhuGYJeeJhQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy80NTRBNjAyN0RERDUyNjMxMzNGQTkzNDRERkE3MTZBQjQ4
OUM4REE4ODg5MDkwRTBGQjM1RjM2ODY3QzkxMkVDLzAvMUY0QzhFMkE1MDk5M0Q3
MEFGNzlFODdDN0UxQjg2NjA5NzlFMjYxNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRjRDOEUyQTUwOTkzRDcwQUY3
OUU4N0M3RTFCODY2MDk3OUUyNjE0LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNDU0QTYwMjdEREQ1MjYzMTMzRkE5MzQ0REZBNzE2QUI0ODlDOERBODg4
OTA5MEUwRkIzNUYzNjg2N0M5MTJFQy8wLzMxMzczMDJlMzIzMzMzMmUzNjM4MmUz
MDJmMzIzMjJkMzIzNTIwM2QzZTIwMzIzNjM0MzczMzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqulE
MA0GCSqGSIb3DQEBCwUAA4IBAQBkBG/pu2ibw7mt/xp0bpVTDJTsp8Luin8dEUah
28/GPcI/VBOac3ieRMioASfE91jsl0932D3MfUoQRG45LEtUxRyoyHWCkh3pUQ78
Gs4Q+9+mVXVsAUd1EubuQ1YP2L2vTlsevomEXgZY13bOpVXFVcKSBgJqcWg0ykRI
ypvzOHSeIoKS3YbI7mklr32taj9LQanGTF1OZgfnoEaTIkgIqLfOnjrWWcq7hh1K
YqjgkihhOx6SRipxZw3dNVYmsXzxxd/Auk87gszuiJhDIDZ0MO3GQSfLkP1QFEpt
boPe4AhQDy9l7kpZX4JHbVowcVaqF2UPAwx+/UXpBUhAgz+i
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:01 2024 by rpki-client on console-ams.rpki-client.org