Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137302e38322e3232342e302f32322d3234203d3e203532343339.roa
File:                     3137302e38322e3232342e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          1GZUy7ascyKvgm2+QAtg5Q1XGM6a8ftCe6SxNBz1pPE=
Subject key identifier:   00:4E:BF:5A:F4:41:CD:E0:72:96:ED:B4:D6:F1:F0:EA:71:13:08:07
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       2C36203B8524E859312F0A0F57A61C2A87287290
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137302e38322e3232342e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 17:53:05 +0000
ROA not before:           Tue 05 Mar 2024 17:48:05 +0000
ROA not after:            Tue 04 Mar 2025 17:53:05 +0000
asID:                     52439
IP address blocks:        170.82.224.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 00:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:20:3b:85:24:e8:59:31:2f:0a:0f:57:a6:1c:2a:87:28:72:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:05 2024 GMT
            Not After : Mar  4 17:53:05 2025 GMT
        Subject: CN=004EBF5AF441CDE07296EDB4D6F1F0EA71130807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:b2:aa:dd:2a:ad:1a:b2:cd:5e:1b:a0:b8:
                    4a:b5:ec:3e:4f:3e:fc:47:a8:9f:99:e6:b2:d3:56:
                    e7:99:e8:86:a0:f5:fd:c6:f6:f3:cc:12:43:fe:7f:
                    d9:bd:f3:51:b3:ed:ff:c6:cc:95:bb:c6:cf:58:1e:
                    22:35:c6:9e:57:8c:26:63:2c:96:29:5d:b2:32:b3:
                    85:f5:a4:89:8c:5b:da:0b:1f:7a:ca:3e:48:a2:19:
                    43:9b:e0:d4:e0:30:74:98:41:ab:67:4d:6e:89:5e:
                    e8:d8:be:9e:26:bd:0b:4a:a3:ab:f9:e2:71:ea:85:
                    d4:a2:e0:8e:8b:e0:98:b7:4d:75:64:6f:b1:cb:4f:
                    d5:f4:c7:9d:56:55:63:ee:6f:ae:b0:ff:8c:b6:c5:
                    30:5c:4b:2d:fd:22:29:1b:7e:d0:54:12:56:95:3c:
                    b1:17:f6:09:3b:2c:d1:63:37:21:63:f2:88:bb:0d:
                    64:17:e4:83:c9:27:05:7e:bc:d2:f5:43:28:71:f4:
                    da:d0:61:2c:25:5c:25:a8:0e:47:d6:7e:14:1d:e0:
                    f0:d1:23:c3:ce:04:93:e7:e6:d5:58:c2:b3:51:b6:
                    44:83:ed:1f:28:98:2f:af:14:9f:f3:63:d7:d3:1c:
                    e4:a5:4a:00:fa:dc:8c:07:43:02:a7:a7:a3:c9:e0:
                    21:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4E:BF:5A:F4:41:CD:E0:72:96:ED:B4:D6:F1:F0:EA:71:13:08:07
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137302e38322e3232342e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bd:f5:20:a4:71:55:bd:79:cd:58:c2:bb:f8:8f:9e:6a:d6:8b:
         bb:30:f1:dd:aa:fc:9c:81:da:f5:e8:6f:51:d1:80:d6:c3:6c:
         25:e4:05:6a:21:bf:13:c7:ac:6d:95:49:2b:b0:21:cf:95:d8:
         99:44:4c:a9:e9:c3:75:0f:aa:4f:0d:44:0c:e7:40:41:7a:3e:
         d0:a0:a3:6c:48:f7:6e:09:04:2f:6c:cc:4e:24:de:3b:6e:e7:
         92:8f:d7:12:c4:a3:a1:b7:f8:16:c5:68:db:d1:78:26:5e:e9:
         67:ce:01:9c:60:d6:90:98:60:29:c3:87:2c:c5:be:f3:0f:bb:
         49:ee:8d:65:db:9f:58:8b:b1:a0:a9:6a:a3:f7:29:1d:75:9c:
         27:c6:8e:1a:33:68:1b:13:5f:a5:5c:1e:47:59:db:c9:4e:77:
         29:57:56:f5:11:a7:2d:0d:ea:60:3a:fe:34:bf:e7:b5:09:4a:
         1a:db:e3:26:d1:0c:a8:21:f2:6d:52:e3:d7:72:83:62:27:83:
         0b:7a:c7:d7:43:2f:51:55:71:3d:d8:66:ff:35:cf:1f:0a:1a:
         7e:97:a3:00:bd:34:54:23:19:82:b6:04:40:af:00:a1:be:54:
         2a:d6:2b:68:cb:29:6b:45:da:b4:b7:98:ac:0f:7d:b7:17:9e:
         4c:b1:f0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:13:47 2024 by rpki-client on console-fra.rpki-client.org