Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
File:                     3137302e38332e342e302f32322d3234203d3e203131303134.roa (raw, json)
Hash identifier:          dZTmQr4BUtY+6Y9p5jMIm1qDR9icf2nJq2W++hupUXI=
Subject key identifier:   72:C7:66:BD:1D:CC:B7:13:B2:E0:1F:6B:0F:62:44:EE:C4:29:BB:82
Certificate issuer:       /CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
Certificate serial:       2E9998A93F7A1D41203FA9B0D457B1DBA6406FBE
Authority key identifier: A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:55:17 +0000
ROA not before:           Tue 05 Mar 2024 17:50:17 +0000
ROA not after:            Tue 04 Mar 2025 17:55:17 +0000
asID:                     11014
IP address blocks:        170.83.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl
                          rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:99:98:a9:3f:7a:1d:41:20:3f:a9:b0:d4:57:b1:db:a6:40:6f:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A36910F3C3995D7CCC06ADC2F152FFD4A168F24C
        Validity
            Not Before: Mar  5 17:50:17 2024 GMT
            Not After : Mar  4 17:55:17 2025 GMT
        Subject: CN=72C766BD1DCCB713B2E01F6B0F6244EEC429BB82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:a2:64:9c:bc:2f:79:20:2b:69:26:94:d1:
                    fa:fd:e2:28:3c:35:1d:9d:82:6f:b5:59:89:39:6e:
                    12:62:3b:be:84:df:99:b2:aa:40:d2:c3:e0:c2:16:
                    9b:c8:a2:2e:e2:6d:e2:b1:40:44:2c:ef:d4:e5:78:
                    88:13:d3:3a:5d:be:f3:23:9a:c0:d0:35:31:a7:3d:
                    e7:d4:1a:80:a8:40:03:e5:87:40:78:be:4f:28:37:
                    cc:d8:de:8b:28:6f:d2:b6:9a:ae:99:0d:91:40:ab:
                    01:1d:2d:0d:1d:1c:f9:2b:0f:24:09:19:7f:2f:f8:
                    7f:86:77:dd:53:63:c0:e0:d7:24:ee:26:33:c3:e4:
                    b1:85:94:04:a8:d2:2e:d5:97:c7:4e:27:90:8a:2d:
                    12:db:27:6f:bb:0d:42:03:0a:67:41:9f:63:28:ba:
                    c3:2a:46:37:9d:1d:4c:1b:c9:be:25:b7:fc:25:32:
                    0f:5e:fa:14:d9:dc:a9:24:38:9e:74:8a:7d:65:c3:
                    d5:95:38:4d:7c:84:98:95:5e:72:74:bb:5a:79:89:
                    60:51:a2:32:4b:be:7e:3d:f7:f8:7e:6e:4e:76:a8:
                    b1:22:e6:ce:cb:5f:88:4a:25:53:1d:8b:55:90:86:
                    a7:9a:73:de:2f:62:35:56:fa:6d:06:72:fc:fc:1c:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C7:66:BD:1D:CC:B7:13:B2:E0:1F:6B:0F:62:44:EE:C4:29:BB:82
            X509v3 Authority Key Identifier:
                keyid:A3:69:10:F3:C3:99:5D:7C:CC:06:AD:C2:F1:52:FF:D4:A1:68:F2:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A36910F3C3995D7CCC06ADC2F152FFD4A168F24C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/57399C513B63A8737275C1297B370904E04720997FE7F8D124D9B547CC3EDE7A/0/3137302e38332e342e302f32322d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:ae:ba:fd:32:21:74:0b:28:1b:33:8f:1b:de:16:ad:3a:c8:
         6e:aa:87:22:c2:76:97:2a:63:f0:27:de:f8:86:9d:f9:69:4d:
         47:20:b5:b2:ce:f4:30:c6:97:e8:70:f2:1f:b5:66:8d:fe:75:
         0c:96:94:cd:75:e5:79:2f:25:00:99:2f:de:aa:d3:70:3d:78:
         ac:60:63:ce:75:dc:6d:62:dd:95:e0:c4:a0:4b:a0:57:1e:22:
         a3:63:43:58:fa:94:b9:a7:17:0d:a4:8f:f6:bf:0f:8f:fd:90:
         10:27:7a:20:6f:14:f4:38:b9:f6:e6:55:7f:07:e1:98:a1:cb:
         8d:72:de:b2:b9:a1:4f:dd:a6:20:c1:b3:da:f0:1e:63:22:2c:
         f7:86:ab:a9:82:17:71:33:7f:95:4f:51:d5:48:eb:e0:5f:94:
         34:c8:68:1f:26:61:9b:36:16:38:06:1c:2a:ea:63:fd:ad:41:
         22:d2:32:97:42:77:d5:7d:32:2f:5b:1e:67:54:d2:54:84:99:
         e9:41:5b:51:b2:39:42:85:10:f7:07:c5:83:ec:90:cf:53:de:
         ec:29:e4:77:97:8e:0e:f6:76:c6:4f:2c:2a:82:c2:0d:d0:ea:
         72:49:80:f0:76:ab:a7:18:ce:6d:2d:72:dc:d5:1c:89:66:55:
         cb:36:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org