Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa
File:                     3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa (raw, json)
Hash identifier:          DjD7Px2DQqZZFSy3YOfqLUxG1QBd5CclOuyNL0xLCoE=
Subject key identifier:   54:3D:C7:3A:E5:7E:F7:80:E4:80:E5:1A:0F:33:F7:45:A9:C4:1A:DA
Certificate issuer:       /CN=1A49578DBEACE7E265A25522F50005E6878A40E4
Certificate serial:       78190194E523E7FE48A1EE3E34848BB8D1B3507D
Authority key identifier: 1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa
Signing time:             Tue 05 Mar 2024 17:54:37 +0000
ROA not before:           Tue 05 Mar 2024 17:49:37 +0000
ROA not after:            Tue 04 Mar 2025 17:54:37 +0000
asID:                     263769
IP address blocks:        170.238.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:19:01:94:e5:23:e7:fe:48:a1:ee:3e:34:84:8b:b8:d1:b3:50:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A49578DBEACE7E265A25522F50005E6878A40E4
        Validity
            Not Before: Mar  5 17:49:37 2024 GMT
            Not After : Mar  4 17:54:37 2025 GMT
        Subject: CN=543DC73AE57EF780E480E51A0F33F745A9C41ADA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:29:7a:f5:72:9e:85:b9:32:88:fe:62:48:
                    48:36:b2:e4:3f:72:fe:74:a6:15:a7:1c:02:6b:79:
                    28:5d:94:a8:2b:14:74:ac:28:e6:d5:6d:b1:5a:33:
                    2b:8c:8c:c4:eb:b2:1a:78:0b:09:5a:be:e3:51:bd:
                    25:2f:8e:9e:9e:7e:a5:16:71:68:98:d5:66:86:61:
                    62:a7:7b:80:36:6f:23:af:00:f2:36:04:f3:d4:06:
                    ed:52:30:1d:f2:af:f7:df:5b:5e:8f:c5:49:48:bb:
                    fc:ce:95:d1:a9:65:85:18:af:e6:ad:12:8e:64:68:
                    11:de:bb:93:0e:61:ce:03:fb:8c:8e:f7:48:1a:39:
                    16:f6:a1:de:50:cd:3c:b8:87:e1:0b:8e:3f:33:d8:
                    db:bf:6b:ae:e9:1e:4e:7b:a1:4a:42:39:66:d0:4b:
                    8d:c2:1b:6f:f4:97:1a:33:a9:db:18:c6:18:e7:81:
                    4d:3f:56:da:61:41:63:a4:09:8c:53:d3:69:95:49:
                    4a:2c:79:5d:4d:0b:58:da:b7:4b:2d:84:d4:cf:e1:
                    de:e0:28:5a:5a:14:e3:7e:d9:3c:ec:d1:3b:ae:24:
                    2b:06:01:3d:76:e3:b8:f8:c0:59:6e:22:7f:dd:f2:
                    98:72:94:9d:c4:83:6d:20:05:26:44:af:02:83:43:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3D:C7:3A:E5:7E:F7:80:E4:80:E5:1A:0F:33:F7:45:A9:C4:1A:DA
            X509v3 Authority Key Identifier:
                keyid:1A:49:57:8D:BE:AC:E7:E2:65:A2:55:22:F5:00:05:E6:87:8A:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/1A49578DBEACE7E265A25522F50005E6878A40E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1A49578DBEACE7E265A25522F50005E6878A40E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5CAF293FC3AA169F9690CE471F4B18FEA4540C0274DAA76E908E4E0BBE15EA90/0/3137302e3233382e32302e302f32322d3234203d3e20323633373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:3c:6b:59:50:03:20:8c:bb:c9:d2:51:99:85:c1:53:60:83:
         0d:40:45:f4:aa:ef:b8:29:85:55:21:29:41:20:5c:a8:c7:da:
         a7:02:36:ad:d5:0e:b4:47:52:4c:a2:86:2e:7d:9d:2b:f1:74:
         22:bb:b4:7a:34:66:cd:ac:83:bc:13:07:e4:32:d3:ba:d3:97:
         33:c7:d3:ef:c9:ba:9c:35:3a:6d:bc:d7:42:2f:8c:77:32:d2:
         66:13:da:2b:f1:cb:bd:f0:96:fb:14:3e:e5:52:25:57:b7:de:
         48:d3:b6:80:1f:ac:9b:08:af:2d:a3:c6:57:db:f6:59:13:9c:
         b1:0d:a5:32:ab:47:9f:bf:5e:f6:83:a9:12:b8:27:fd:bb:95:
         2e:e9:4e:2c:3c:a3:5e:39:51:b7:1f:80:3a:30:f3:fb:40:27:
         07:cc:54:70:40:95:0f:ea:35:f1:34:8f:30:87:47:4e:8e:3d:
         9e:3b:dd:3a:b2:d9:ac:79:65:5a:5a:b8:2c:18:36:cf:94:4f:
         9a:14:8d:43:d0:0b:da:6a:0e:61:19:c1:f9:1f:83:c2:39:a9:
         29:80:94:8b:06:61:9a:8d:9b:8b:b8:5f:42:85:36:7f:af:3e:
         6f:a6:b7:90:c8:86:ce:6b:31:bc:0e:7d:bb:6a:28:f9:57:9f:
         5a:5b:d2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:23 2024 by rpki-client on console-ams.rpki-client.org