Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa
File:                     3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          lEUATsnXByx5SHnYMXCMGA/oDMGAOlCbux6P0ff1Vrg=
Subject key identifier:   A7:12:78:DD:78:B2:11:5A:9E:21:CF:03:27:3E:10:4C:6E:F2:96:02
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       203F240D8166F12AA6911BAB23AA03ACED93D3B4
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:09 +0000
ROA not before:           Tue 05 Mar 2024 17:50:09 +0000
ROA not after:            Tue 04 Mar 2025 17:55:09 +0000
asID:                     11014
IP address blocks:        170.150.152.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 10:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3f:24:0d:81:66:f1:2a:a6:91:1b:ab:23:aa:03:ac:ed:93:d3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:09 2024 GMT
            Not After : Mar  4 17:55:09 2025 GMT
        Subject: CN=A71278DD78B2115A9E21CF03273E104C6EF29602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:56:04:88:2d:08:18:b2:34:0f:cb:0a:c3:6c:
                    f1:dc:f6:55:22:73:da:b8:5a:d9:63:c0:b0:fb:b5:
                    25:34:7d:98:f7:68:14:97:a2:0b:45:b5:e8:34:d1:
                    a2:40:57:b8:4c:31:a4:b3:2b:9b:2e:34:69:42:fb:
                    f1:b4:25:93:b1:e9:2d:a2:8c:63:cc:47:87:2e:8f:
                    fa:bc:3f:cc:e0:fd:3b:d4:4e:d2:2a:94:93:70:f1:
                    63:b4:f2:d1:cd:a2:a6:f1:6f:27:6b:96:50:f9:42:
                    94:62:e2:f9:c4:91:1d:36:f9:c0:ed:cb:68:15:72:
                    fa:29:28:02:18:d9:47:68:13:e2:30:e3:0e:42:3c:
                    b2:dc:e4:66:cc:01:1a:f8:2b:fb:d4:d9:6c:de:1b:
                    c2:ac:51:84:4a:80:a1:a7:6d:a5:1b:7b:fd:af:fe:
                    3f:89:d1:70:1c:b8:82:63:53:12:e5:b7:80:0c:a9:
                    a2:c2:88:18:fd:f6:4b:2b:31:76:7a:20:f5:53:49:
                    38:0f:b4:a0:ba:01:10:35:7b:63:1e:d4:a5:63:b6:
                    76:c2:1f:ce:22:23:b1:69:7a:d2:a6:4d:23:df:66:
                    42:f7:61:01:47:d4:88:e5:4b:51:95:e8:37:52:ea:
                    a5:3c:52:fc:06:fe:ba:80:fe:58:18:ec:2a:91:3d:
                    5f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:12:78:DD:78:B2:11:5A:9E:21:CF:03:27:3E:10:4C:6E:F2:96:02
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e3135302e3135322e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:4b:0a:3a:67:5d:70:ef:d3:58:fa:18:b0:3d:d6:eb:55:43:
         f6:3d:08:ae:c4:4c:15:a8:c3:01:ec:e5:36:c0:ef:5e:27:56:
         fc:84:94:b4:68:76:d2:05:e6:31:53:94:99:7f:f9:a5:18:2a:
         c0:66:9d:74:e8:3e:e4:48:47:f8:0c:06:f7:b1:b2:f1:06:3a:
         cc:23:57:09:c2:6b:9e:b4:0e:05:45:14:f2:43:e6:1d:8f:d9:
         3b:1b:96:15:39:52:0e:d1:de:ff:dc:31:ee:c6:63:18:91:d8:
         8f:d4:82:45:08:26:fd:f3:a0:a1:c0:4d:ac:f1:34:c3:c2:b0:
         70:e7:2c:8b:50:77:9a:e6:8a:5c:85:47:fd:6a:f9:c8:06:44:
         b3:09:e2:05:e0:e5:67:4b:26:11:c7:8c:ad:05:6a:47:13:7c:
         bb:f9:8b:0e:e1:4e:12:94:71:34:f9:1d:ff:d1:7a:7b:2f:ee:
         ee:a6:18:a4:86:0c:db:aa:3d:a9:dc:0a:75:71:5c:ee:2f:73:
         0a:e1:50:f2:69:69:57:72:89:ac:48:95:95:50:5f:96:c7:c3:
         40:99:72:cd:bc:59:21:b9:6c:df:8b:4d:40:06:cf:39:27:b0:
         9b:00:cc:bc:68:44:ca:35:48:9a:44:8a:ef:5b:5c:32:9c:85:
         ef:15:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 22:05:46 2024 by rpki-client on console-fra.rpki-client.org