Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3234203d3e20323730303839.roa
File:                     3137302e38302e39322e302f32322d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          /VJKno3iRlQIL2uigBqm58oCBUu34YJbIcuw/WGO9QY=
Subject key identifier:   2D:5D:09:71:C4:EE:EA:8A:16:6A:99:37:64:CA:6F:FD:4A:F3:5E:36
Certificate issuer:       /CN=C73971A2080A975B88CBA6005895BD357D233BC8
Certificate serial:       1C365D7224311572229E56E2CAE1EA52EDB0F038
Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3234203d3e20323730303839.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     270089
IP address blocks:        170.80.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:36:5d:72:24:31:15:72:22:9e:56:e2:ca:e1:ea:52:ed:b0:f0:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=2D5D0971C4EEEA8A166A993764CA6FFD4AF35E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:bc:53:82:84:76:1c:56:55:54:dd:e1:7f:
                    82:60:0a:92:be:91:4f:d5:67:01:73:ee:e1:22:51:
                    93:c2:d2:7e:df:21:33:d5:3e:fb:ff:f9:aa:2a:25:
                    66:aa:13:bc:f3:e4:ba:b2:e1:57:76:95:b0:fa:5e:
                    69:4d:42:f6:6b:70:ae:fe:92:b3:85:a6:3f:e5:d0:
                    4a:d1:bd:79:97:7d:b0:3f:23:db:5d:82:1a:59:9c:
                    bf:c9:87:ed:a4:82:20:47:b9:94:28:3e:d5:c5:31:
                    e0:27:fe:34:16:d8:3e:19:0e:f5:43:62:eb:d3:e1:
                    62:8e:84:12:c3:6b:f3:6f:10:8d:75:38:f2:68:59:
                    38:3d:c4:12:14:a8:5f:71:41:7c:70:ed:cb:0c:75:
                    b4:92:41:79:b4:58:2e:4f:50:35:32:94:c3:a0:94:
                    a8:55:4a:f2:3e:f2:e3:2c:2b:dd:23:0f:0f:10:2a:
                    b6:c3:df:5d:7e:d7:71:8b:86:6e:ca:8b:50:25:f1:
                    95:cf:10:98:43:3e:b0:16:be:30:32:26:9f:c9:aa:
                    48:6e:30:b0:ca:99:19:f2:19:8c:33:e7:a4:74:36:
                    d7:de:31:9f:60:66:b3:77:95:06:cf:77:32:cf:78:
                    c7:df:fa:e3:2e:c5:c6:8e:5e:74:6b:08:5d:4e:95:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5D:09:71:C4:EE:EA:8A:16:6A:99:37:64:CA:6F:FD:4A:F3:5E:36
            X509v3 Authority Key Identifier:
                keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32322d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:44:0f:bd:27:ff:f0:73:59:e3:3f:9d:0e:c9:e4:e2:c2:56:
         4d:5f:58:83:19:a6:94:fa:73:0a:62:fc:d1:2a:da:46:3b:77:
         ce:4b:df:2d:86:6a:3a:d4:d1:b5:26:ac:45:aa:3d:09:90:38:
         ce:57:56:4f:56:8f:9b:e0:b1:5d:bb:d0:da:8f:40:c1:e7:cb:
         02:40:89:dd:84:34:ed:5e:5b:25:6d:58:4d:40:ab:92:08:c8:
         32:81:3e:79:c8:40:be:a4:39:68:30:ee:aa:03:dc:22:1c:eb:
         83:c0:83:fa:b5:8c:0c:f1:6b:56:cd:5e:cc:a6:0f:d4:11:62:
         c6:f1:e3:ed:df:4f:6b:08:be:70:9d:84:53:18:33:29:6c:cd:
         d2:0f:c2:e2:e6:24:c1:7c:50:61:b9:04:8c:63:89:25:d3:58:
         49:f6:5d:2e:e6:e5:06:f5:52:9f:ac:92:e7:73:5c:45:a3:5a:
         49:f4:5d:ad:3b:44:fa:9e:87:7f:34:61:4b:74:85:28:7d:bb:
         60:22:fa:32:41:0e:ce:67:80:96:f9:3d:42:e0:d1:cb:7b:d8:
         d1:9d:a2:3d:ba:41:cf:0b:57:bb:b7:de:52:35:6d:50:ea:6a:
         78:d0:1d:5b:db:40:80:04:d8:45:7a:d9:e5:71:92:c2:bc:9c:
         0c:78:48:a5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHDZdciQxFXIinlbiyuHqUu2w8DgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczOTcxQTIwODBBOTc1Qjg4Q0JBNjAwNTg5NUJEMzU3
RDIzM0JDODAeFw0yNDAzMDUxNzM0NTZaFw0yNTAzMDQxNzM5NTZaMDMxMTAvBgNV
BAMTKDJENUQwOTcxQzRFRUVBOEExNjZBOTkzNzY0Q0E2RkZENEFGMzVFMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQ7xTgoR2HFZVVN3hf4JgCpK+
kU/VZwFz7uEiUZPC0n7fITPVPvv/+aoqJWaqE7zz5Lqy4Vd2lbD6XmlNQvZrcK7+
krOFpj/l0ErRvXmXfbA/I9tdghpZnL/Jh+2kgiBHuZQoPtXFMeAn/jQW2D4ZDvVD
YuvT4WKOhBLDa/NvEI11OPJoWTg9xBIUqF9xQXxw7csMdbSSQXm0WC5PUDUylMOg
lKhVSvI+8uMsK90jDw8QKrbD311+13GLhm7Ki1Al8ZXPEJhDPrAWvjAyJp/Jqkhu
MLDKmRnyGYwz56R0NtfeMZ9gZrN3lQbPdzLPeMff+uMuxcaOXnRrCF1OldQFAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQULV0JccTu6ooWapk3ZMpv/UrzXjYwHwYDVR0j
BBgwFoAUxzlxoggKl1uIy6YAWJW9NX0jO8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MjhENTJFNzA5OTE1Rjg3ODIyQzE5NkQ1MjE3QTZBNTA4
MDkzOTJFQzkzQ0FBRTBDMDE1M0FDRkM0NDk4OThGLzAvQzczOTcxQTIwODBBOTc1
Qjg4Q0JBNjAwNTg5NUJEMzU3RDIzM0JDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzM5NzFBMjA4MEE5NzVCODhD
QkE2MDA1ODk1QkQzNTdEMjMzQkM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjI4RDUyRTcwOTkxNUY4NzgyMkMxOTZENTIxN0E2QTUwODA5MzkyRUM5
M0NBQUUwQzAxNTNBQ0ZDNDQ5ODk4Ri8wLzMxMzczMDJlMzgzMDJlMzkzMjJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpQXDAN
BgkqhkiG9w0BAQsFAAOCAQEAT0QPvSf/8HNZ4z+dDsnk4sJWTV9YgxmmlPpzCmL8
0SraRjt3zkvfLYZqOtTRtSasRao9CZA4zldWT1aPm+CxXbvQ2o9AwefLAkCJ3YQ0
7V5bJW1YTUCrkgjIMoE+echAvqQ5aDDuqgPcIhzrg8CD+rWMDPFrVs1ezKYP1BFi
xvHj7d9Pawi+cJ2EUxgzKWzN0g/C4uYkwXxQYbkEjGOJJdNYSfZdLublBvVSn6yS
53NcRaNaSfRdrTtE+p6HfzRhS3SFKH27YCL6MkEOzmeAlvk9QuDRy3vY0Z2iPbpB
zwtXu7feUjVtUOpqeNAdW9tAgATYRXrZ5XGSwrycDHhIpQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:52 2024 by rpki-client on console-ams.rpki-client.org