Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3137302e3233392e38382e302f32322d3234203d3e20323632323239.roa
File:                     3137302e3233392e38382e302f32322d3234203d3e20323632323239.roa (raw, json)
Hash identifier:          /VvKbggk3O10+m2leyaJYmPT1tZbhoF1Kc6sCsc7DXU=
Subject key identifier:   53:46:D3:F7:3D:AE:81:3E:09:8D:CC:DA:3F:E4:97:FC:1A:9A:93:03
Certificate issuer:       /CN=ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A
Certificate serial:       2BBECD8F295598F3922C14DE391851FECE0FCBE4
Authority key identifier: EC:F5:A8:99:DE:0F:EE:8D:12:C3:9B:98:D7:EB:8F:A8:D5:DF:DB:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3137302e3233392e38382e302f32322d3234203d3e20323632323239.roa
Signing time:             Tue 05 Mar 2024 17:59:52 +0000
ROA not before:           Tue 05 Mar 2024 17:54:52 +0000
ROA not after:            Tue 04 Mar 2025 17:59:52 +0000
asID:                     262229
IP address blocks:        170.239.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:be:cd:8f:29:55:98:f3:92:2c:14:de:39:18:51:fe:ce:0f:cb:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A
        Validity
            Not Before: Mar  5 17:54:52 2024 GMT
            Not After : Mar  4 17:59:52 2025 GMT
        Subject: CN=5346D3F73DAE813E098DCCDA3FE497FC1A9A9303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:0d:63:c5:57:23:47:a1:f7:68:9a:43:f0:
                    53:40:02:b1:39:ad:25:3e:39:eb:d3:cd:82:19:c2:
                    06:93:6b:34:9a:6e:a4:6c:2d:24:d5:52:0b:0e:e7:
                    59:d9:4f:a2:17:a9:0c:eb:9c:02:56:8d:e9:fc:9b:
                    22:83:8c:13:60:13:e3:20:2e:41:85:81:fa:e8:70:
                    70:b9:d8:61:da:32:62:e0:ed:5e:65:c7:8c:92:dd:
                    e9:37:4d:71:25:25:bb:56:de:21:2a:b9:c7:3e:4a:
                    15:4c:93:8e:e1:85:95:27:74:bc:55:0c:79:b2:e0:
                    81:9f:50:d6:9c:84:aa:e0:ec:77:25:88:56:20:48:
                    8e:19:4b:05:f0:88:1f:94:4a:27:7a:27:b8:6a:7d:
                    d2:53:43:76:a7:a8:52:4f:b9:1f:bc:07:2a:9c:e7:
                    b9:82:41:e0:64:25:09:7f:e8:2b:dc:2c:bb:35:7d:
                    7a:cc:3d:37:4b:eb:87:a6:f3:9b:27:ad:b4:a8:f1:
                    8f:50:80:69:f7:0b:63:de:5d:48:1b:e2:c9:dd:51:
                    e6:8f:1e:d3:3d:ef:9a:fd:33:7a:28:f5:8b:6e:5a:
                    2f:bd:cd:ea:30:f7:64:98:f4:9c:5a:c6:9a:b1:b7:
                    5c:1b:82:83:6a:28:6e:12:b6:bf:8e:7e:5c:90:1a:
                    6c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:46:D3:F7:3D:AE:81:3E:09:8D:CC:DA:3F:E4:97:FC:1A:9A:93:03
            X509v3 Authority Key Identifier:
                keyid:EC:F5:A8:99:DE:0F:EE:8D:12:C3:9B:98:D7:EB:8F:A8:D5:DF:DB:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ECF5A899DE0FEE8D12C39B98D7EB8FA8D5DFDB6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C06A3ADEB087B55AE44DCC0734CACC44857784EF58E633A7A10DE1FF2B7B4BE/0/3137302e3233392e38382e302f32322d3234203d3e20323632323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d6:91:53:7c:c7:13:bd:6c:dd:70:67:cf:ef:cc:db:47:d7:2b:
         6b:e6:7e:d2:cb:74:ce:4f:d0:13:c7:33:5a:26:75:6c:0b:f8:
         c7:f4:c1:2f:e6:5e:21:8d:f5:07:af:d0:75:3e:dd:bd:e3:e8:
         aa:0c:a4:ce:64:0c:9c:e9:c3:02:0a:54:57:89:d9:ec:2a:34:
         a6:4a:4b:de:7d:73:2b:8a:54:e0:6a:d0:91:1d:e3:ac:d5:60:
         02:66:76:a7:ea:85:f6:a4:c7:06:02:25:d9:d2:43:39:1f:2c:
         4b:30:ff:ce:e2:84:27:62:30:1d:f7:35:63:14:21:77:33:99:
         b9:43:90:38:18:a6:04:b7:f0:b1:09:be:93:46:cf:97:ce:75:
         dc:79:a2:f0:04:70:a8:64:96:62:3b:97:72:54:5f:c5:f2:76:
         5d:0a:c0:5a:f6:df:82:18:91:04:39:b9:71:29:f0:63:49:26:
         85:ac:5c:ef:6d:8c:ba:2f:7d:0d:bc:a1:a1:61:74:5f:e5:62:
         bc:ab:9e:07:12:c5:09:d3:8e:0e:1e:17:6a:8d:b2:de:39:34:
         02:e2:a3:96:0d:77:b6:c3:c0:2f:f8:6e:a5:a0:57:49:74:3c:
         6d:2b:2a:64:df:bc:fe:95:c9:ac:61:6d:65:48:2f:40:bb:cd:
         82:23:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org