Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa
File:                     3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa (raw, json)
Hash identifier:          kbHHzt4gmcOw5QRncz0DzZzdOjesFbEFnNhu5KIscDM=
Subject key identifier:   51:60:CE:B4:B0:25:D1:65:F2:1F:17:DF:84:02:40:F5:80:7C:E8:1B
Certificate issuer:       /CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
Certificate serial:       7FCF8D99E45E0276D55294C27F879AD5466B8712
Authority key identifier: D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa
Signing time:             Tue 05 Mar 2024 17:41:05 +0000
ROA not before:           Tue 05 Mar 2024 17:36:05 +0000
ROA not after:            Tue 04 Mar 2025 17:41:05 +0000
asID:                     265746
IP address blocks:        128.201.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:cf:8d:99:e4:5e:02:76:d5:52:94:c2:7f:87:9a:d5:46:6b:87:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5490AC693B00C1BF51582B1691FC2DC46B71FA9
        Validity
            Not Before: Mar  5 17:36:05 2024 GMT
            Not After : Mar  4 17:41:05 2025 GMT
        Subject: CN=5160CEB4B025D165F21F17DF840240F5807CE81B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:bb:d7:2f:85:23:2c:99:e4:2f:57:c1:e4:
                    d0:a7:11:52:4c:26:02:82:8c:cd:c9:3d:62:ab:9d:
                    58:5c:cd:b8:31:f0:17:0a:5b:43:21:98:ce:2c:12:
                    17:eb:0c:6e:9c:c0:48:ed:7f:b6:4c:a8:29:2b:c9:
                    a4:40:f4:d7:1c:31:2e:07:50:c8:7e:9e:be:b7:17:
                    bd:25:d3:e0:24:b4:a8:5b:e8:5e:85:af:7a:c0:85:
                    26:d0:f5:4e:39:d8:55:13:78:e1:09:ab:68:53:d8:
                    50:0e:1e:f2:3a:d3:6b:45:96:c9:68:8d:6e:b2:09:
                    a5:66:dd:0b:0b:81:11:1f:12:80:39:03:7a:0b:19:
                    af:4d:2f:02:47:ee:56:3e:46:9a:e4:70:f6:25:3c:
                    9b:f1:17:cd:6e:55:95:fb:f5:35:05:5c:e8:4e:28:
                    9b:1d:d8:27:e9:d4:0d:57:9e:8f:b8:15:42:0c:70:
                    90:b3:25:86:ff:78:eb:71:9a:51:72:9b:7d:38:04:
                    19:ed:ad:a4:bb:50:7d:8d:98:bd:f9:1b:15:dc:cb:
                    b1:16:eb:38:78:dc:15:f7:19:1f:ad:b1:05:f5:1a:
                    3e:29:cc:82:03:0d:25:d2:15:21:55:5d:98:dd:d9:
                    19:a5:4f:a3:54:cf:83:20:1e:be:eb:6a:af:af:1e:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:60:CE:B4:B0:25:D1:65:F2:1F:17:DF:84:02:40:F5:80:7C:E8:1B
            X509v3 Authority Key Identifier:
                keyid:D5:49:0A:C6:93:B0:0C:1B:F5:15:82:B1:69:1F:C2:DC:46:B7:1F:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5490AC693B00C1BF51582B1691FC2DC46B71FA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/553E915C78B115ED1EF6B8D6134A2D64DB6515223B082FD4FB27AB8146AA88A2/0/3132382e3230312e3137302e302f32342d3234203d3e20323635373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:0d:51:e7:b3:37:da:34:13:ef:9e:f6:59:14:29:d9:7c:b2:
         37:ab:91:94:97:1f:76:73:81:27:5d:2b:f3:27:82:fb:cf:55:
         5a:dd:f3:90:af:6f:66:7a:78:26:3a:4c:7a:b8:8e:16:9f:e6:
         fb:cf:93:ff:0b:c2:27:af:94:8b:65:c5:1a:7a:fb:f0:7a:99:
         72:63:1d:ee:25:d4:2c:16:a1:03:69:10:9c:73:d0:df:3b:e0:
         d2:2e:92:0d:f4:3e:55:e7:3c:20:e7:8c:f8:46:ca:34:c3:d8:
         82:a6:05:df:f2:df:36:41:6f:6d:1f:33:da:d0:51:e4:4b:25:
         e2:48:73:a3:08:25:b0:5f:e5:20:0a:7a:f6:ee:0c:11:ac:84:
         a0:ce:8a:73:8b:b3:20:98:1c:5c:09:72:ba:34:d7:8f:83:c0:
         53:02:0c:a5:42:22:fa:7a:d8:65:67:ed:77:b4:aa:57:89:36:
         64:2a:7a:f7:28:49:17:af:c6:e3:d0:a8:5b:d1:f7:ce:16:8d:
         1a:dc:78:37:a1:ff:3d:63:44:26:65:75:f7:84:88:73:d1:21:
         8b:94:f1:07:b1:ac:c5:0c:87:9c:89:99:42:f1:6f:15:f6:db:
         0c:e1:8e:97:4a:01:20:b5:60:cc:14:f9:d5:d8:fa:82:37:9b:
         20:c3:95:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org