Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa
File:                     3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa (raw, json)
Hash identifier:          rpOcE69HYoAeKnF+2Gd32tvE0txm6+LFY/UqSZj90bE=
Subject key identifier:   69:B5:4D:B6:CC:A3:BF:DA:C8:60:7A:11:EC:68:49:24:70:51:78:0B
Certificate issuer:       /CN=1D6D410EA3908E725CB3877864E87184F8414DD7
Certificate serial:       659E9021FC1EA3A58B4594D8DBE8DE4A6F11206F
Authority key identifier: 1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa
Signing time:             Fri 26 Apr 2024 14:25:00 +0000
ROA not before:           Fri 26 Apr 2024 14:20:00 +0000
ROA not after:            Fri 25 Apr 2025 14:25:00 +0000
asID:                     264795
IP address blocks:        170.238.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9e:90:21:fc:1e:a3:a5:8b:45:94:d8:db:e8:de:4a:6f:11:20:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D6D410EA3908E725CB3877864E87184F8414DD7
        Validity
            Not Before: Apr 26 14:20:00 2024 GMT
            Not After : Apr 25 14:25:00 2025 GMT
        Subject: CN=69B54DB6CCA3BFDAC8607A11EC6849247051780B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f1:a0:22:b3:6f:8e:e8:cb:a8:b2:bb:f2:f5:
                    10:84:62:a3:57:0f:94:18:ae:68:a0:3b:b5:eb:a7:
                    dc:e5:c3:fd:5a:1b:cf:be:57:00:12:b0:47:68:ad:
                    6d:29:1a:69:5d:ca:b8:ee:46:78:50:3d:2d:d0:dd:
                    24:bf:e8:b1:18:83:9e:94:5b:3e:cb:15:e0:95:ba:
                    cf:f2:c7:b0:9b:19:26:fd:c6:66:df:ae:7d:0f:04:
                    be:53:e5:04:fc:e6:52:de:55:f8:3a:1b:ab:eb:c8:
                    ef:36:99:d7:e6:ad:75:ee:b3:08:25:8c:77:a0:47:
                    6a:ad:ed:73:19:08:49:06:c4:bb:60:d0:2d:29:0d:
                    95:02:c2:33:e1:d3:cc:18:67:2c:fc:bf:bc:9e:cc:
                    46:10:bc:1e:c4:9d:a0:e7:92:19:ac:51:54:f1:c8:
                    b9:74:2e:72:19:4f:3c:3e:f9:c8:30:13:47:8a:d6:
                    ce:28:6a:e0:15:56:96:c0:67:fe:61:ea:7b:77:8a:
                    04:c1:14:ca:ea:18:49:03:90:dc:c9:28:58:09:3e:
                    94:10:7c:f9:59:67:f5:f9:cf:5e:c7:4d:64:e8:08:
                    3d:45:ed:00:ba:ac:54:c0:9e:04:e2:8c:9c:a2:9f:
                    f6:0c:af:87:55:c2:8b:ad:b4:28:af:b1:91:31:65:
                    78:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B5:4D:B6:CC:A3:BF:DA:C8:60:7A:11:EC:68:49:24:70:51:78:0B
            X509v3 Authority Key Identifier:
                keyid:1D:6D:41:0E:A3:90:8E:72:5C:B3:87:78:64:E8:71:84:F8:41:4D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/1D6D410EA3908E725CB3877864E87184F8414DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1D6D410EA3908E725CB3877864E87184F8414DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/574430CECA3434AF6DCFC8D382C90EB1F8088A145C1C560741CC0B491DF2A0AE/0/3137302e3233382e34302e302f32322d3234203d3e20323634373935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:6b:37:18:d0:1b:f1:e9:b3:f3:31:04:e0:b7:aa:46:83:b4:
         81:8e:4a:85:e5:75:c7:bb:b1:27:9c:0d:7c:8d:3e:77:54:48:
         ae:3c:91:bb:d0:e8:4a:cd:87:21:7c:fc:6a:ee:25:81:c5:ef:
         60:28:1c:c2:72:a9:a9:7d:e7:5a:6c:35:8e:ba:11:42:c3:32:
         a2:bc:9f:9b:f1:6b:67:3f:2a:ac:f3:81:c6:fb:16:73:4a:95:
         44:d4:29:8d:7e:7d:8d:4a:7a:02:fd:04:2c:09:9e:8f:6a:aa:
         74:92:38:74:a9:2e:9f:c2:68:9e:01:03:41:36:ab:05:6f:d9:
         6d:94:c0:47:79:94:6c:40:1e:18:f7:f7:a4:ef:36:68:ad:ff:
         a2:c9:d0:dd:fd:67:34:68:ca:01:60:0b:ff:32:dd:54:34:75:
         ed:1c:8c:1f:72:96:9a:5b:61:11:7c:15:b5:c1:82:25:98:96:
         6e:cd:61:ae:f0:9f:ec:32:ea:dc:af:a1:01:66:fb:70:0e:63:
         bb:30:a0:47:8f:62:8b:a9:4c:70:13:34:6e:70:58:c3:19:fa:
         10:5f:0b:9b:4a:2a:4a:10:c5:54:5c:80:81:b1:28:e7:4e:bd:
         ef:49:bc:54:92:06:cd:87:bb:84:b0:45:14:88:0c:46:3e:10:
         82:12:85:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZZ6QIfweo6WLRZTY2+jeSm8RIG8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ2RDQxMEVBMzkwOEU3MjVDQjM4Nzc4NjRFODcxODRG
ODQxNERENzAeFw0yNDA0MjYxNDIwMDBaFw0yNTA0MjUxNDI1MDBaMDMxMTAvBgNV
BAMTKDY5QjU0REI2Q0NBM0JGREFDODYwN0ExMUVDNjg0OTI0NzA1MTc4MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8aAis2+O6Muosrvy9RCEYqNX
D5QYrmigO7Xrp9zlw/1aG8++VwASsEdorW0pGmldyrjuRnhQPS3Q3SS/6LEYg56U
Wz7LFeCVus/yx7CbGSb9xmbfrn0PBL5T5QT85lLeVfg6G6vryO82mdfmrXXuswgl
jHegR2qt7XMZCEkGxLtg0C0pDZUCwjPh08wYZyz8v7yezEYQvB7EnaDnkhmsUVTx
yLl0LnIZTzw++cgwE0eK1s4oauAVVpbAZ/5h6nt3igTBFMrqGEkDkNzJKFgJPpQQ
fPlZZ/X5z17HTWToCD1F7QC6rFTAngTijJyin/YMr4dVwouttCivsZExZXhfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUabVNtsyjv9rIYHoR7GhJJHBReAswHwYDVR0j
BBgwFoAUHW1BDqOQjnJcs4d4ZOhxhPhBTdcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NzQ0MzBDRUNBMzQzNEFGNkRDRkM4RDM4MkM5MEVCMUY4
MDg4QTE0NUMxQzU2MDc0MUNDMEI0OTFERjJBMEFFLzAvMUQ2RDQxMEVBMzkwOEU3
MjVDQjM4Nzc4NjRFODcxODRGODQxNERENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRDZENDEwRUEzOTA4RTcyNUNC
Mzg3Nzg2NEU4NzE4NEY4NDE0REQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTc0NDMwQ0VDQTM0MzRBRjZEQ0ZDOEQzODJDOTBFQjFGODA4OEExNDVD
MUM1NjA3NDFDQzBCNDkxREYyQTBBRS8wLzMxMzczMDJlMzIzMzM4MmUzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzczOTM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqu4o
MA0GCSqGSIb3DQEBCwUAA4IBAQAMazcY0Bvx6bPzMQTgt6pGg7SBjkqF5XXHu7En
nA18jT53VEiuPJG70OhKzYchfPxq7iWBxe9gKBzCcqmpfedabDWOuhFCwzKivJ+b
8WtnPyqs84HG+xZzSpVE1CmNfn2NSnoC/QQsCZ6Paqp0kjh0qS6fwmieAQNBNqsF
b9ltlMBHeZRsQB4Y9/ek7zZorf+iydDd/Wc0aMoBYAv/Mt1UNHXtHIwfcpaaW2ER
fBW1wYIlmJZuzWGu8J/sMurcr6EBZvtwDmO7MKBHj2KLqUxwEzRucFjDGfoQXwub
SipKEMVUXICBsSjnTr3vSbxUkgbNh7uEsEUUiAxGPhCCEoWe
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org