Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa
File:                     3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa (raw, json)
Hash identifier:          78PBTK18hGkd2w53R3yaiZbv6XojcGGIi0wZbJtrzGw=
Subject key identifier:   45:D5:8C:48:C7:7F:B3:65:A9:74:FA:B9:43:7A:16:11:9C:F9:4B:C8
Certificate issuer:       /CN=598C02ED068F0513C4248D10DD3D494B92EEE8F6
Certificate serial:       09A749BC99A54A57955F18058604D2C226EC6A2C
Authority key identifier: 59:8C:02:ED:06:8F:05:13:C4:24:8D:10:DD:3D:49:4B:92:EE:E8:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa
Signing time:             Tue 05 Mar 2024 17:58:32 +0000
ROA not before:           Tue 05 Mar 2024 17:53:32 +0000
ROA not after:            Tue 04 Mar 2025 17:58:32 +0000
asID:                     264810
IP address blocks:        170.238.204.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a7:49:bc:99:a5:4a:57:95:5f:18:05:86:04:d2:c2:26:ec:6a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598C02ED068F0513C4248D10DD3D494B92EEE8F6
        Validity
            Not Before: Mar  5 17:53:32 2024 GMT
            Not After : Mar  4 17:58:32 2025 GMT
        Subject: CN=45D58C48C77FB365A974FAB9437A16119CF94BC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:1c:c4:7e:47:d0:39:ee:0b:93:a4:17:44:
                    42:fa:98:8d:c4:6e:30:87:ca:e9:28:17:83:08:b2:
                    2b:c9:ee:b9:48:3d:d0:6c:0b:1d:a8:d8:75:f2:1b:
                    c8:17:d7:40:71:72:74:3f:bc:4d:c4:a3:8a:23:a6:
                    9c:a7:3e:24:52:d3:b8:c7:a5:5c:c0:2e:86:9d:1a:
                    6b:e2:52:c7:67:6b:42:d4:f1:1a:73:f0:2a:9a:b8:
                    cf:9c:56:1c:2b:8b:9a:9e:50:ee:a4:d0:e5:c0:18:
                    fd:60:b5:43:d5:82:ea:c0:9d:25:ea:f7:43:62:82:
                    3f:7d:28:e1:c8:27:d2:94:df:95:11:6b:6d:84:1d:
                    88:2d:af:9e:ff:e2:e8:a4:07:6a:bc:8a:dc:82:fd:
                    ba:64:00:28:35:ce:9f:84:56:2c:7f:91:6a:60:b8:
                    f5:21:e6:f5:33:df:7c:2b:74:e6:4b:5f:d5:6d:46:
                    53:ed:57:10:ed:6d:63:a0:0f:c2:b6:40:9e:d4:04:
                    a6:5e:b5:cd:f4:6d:a7:3a:49:0e:31:9e:5f:cf:17:
                    7b:77:f5:48:a2:51:fc:e9:71:03:94:8c:fc:c7:ff:
                    3f:e2:a2:b6:92:f5:b0:ba:cb:a6:bc:68:fd:cd:e1:
                    0f:d4:31:18:33:34:a4:ea:ad:24:3d:2e:0b:e8:ad:
                    0f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:8C:48:C7:7F:B3:65:A9:74:FA:B9:43:7A:16:11:9C:F9:4B:C8
            X509v3 Authority Key Identifier:
                keyid:59:8C:02:ED:06:8F:05:13:C4:24:8D:10:DD:3D:49:4B:92:EE:E8:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598C02ED068F0513C4248D10DD3D494B92EEE8F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5110636276A960BE4E2F11435ED904AD828D4CF1AEA4A55EEFBC48E79D87B82A/0/3137302e3233382e3230342e302f32322d3234203d3e20323634383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:37:31:35:08:44:ab:26:de:e7:e4:f1:78:73:9b:c4:ee:
         fb:9c:3c:69:77:9a:ab:ae:47:08:03:08:2e:52:09:24:28:ae:
         71:62:04:aa:92:fd:ff:28:c1:80:c9:fa:12:57:fd:8b:16:1a:
         94:6b:6c:26:dd:91:8b:2a:c5:06:9f:9c:5f:f8:97:f0:81:c0:
         ab:60:ea:7f:b0:2f:f9:87:f5:93:38:0d:e6:70:66:95:a0:0c:
         4b:44:17:ee:40:de:91:73:af:5a:02:55:35:e3:c0:8a:98:e1:
         fc:e0:30:d5:71:de:7b:08:db:05:8f:5d:87:e2:d0:c0:c6:e4:
         42:cf:48:dc:09:8b:b4:3e:06:90:21:eb:3a:93:db:3d:cc:e6:
         87:ff:24:74:ef:bc:ea:69:1b:12:f9:4e:36:af:6f:44:be:77:
         62:35:fb:a5:bc:e0:af:f7:f4:7a:83:0e:db:9c:ec:5f:33:b2:
         aa:df:5d:e6:3c:e8:6f:78:04:74:73:db:f6:d8:14:1d:18:a8:
         91:00:63:bf:fe:bf:5d:ae:9f:9d:13:cc:03:54:2f:ff:0a:b5:
         bf:07:64:e3:91:8d:57:76:f5:d2:60:27:7e:ef:78:f1:80:df:
         23:0d:f1:18:5e:8b:84:0c:d3:61:c7:6d:da:95:46:0e:41:15:
         53:05:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org