Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
File:                     3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa (raw, json)
Hash identifier:          ndTiPJeQ0aFRqFeI1AuROGN4Q4TPxXFR3au6YY1MPgI=
Subject key identifier:   B9:2C:D3:1C:B2:4E:67:99:CD:5B:60:8C:0F:B1:3B:0F:FF:AF:F0:AA
Certificate issuer:       /CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
Certificate serial:       0B4FC666292038091DFBF14EEBABE96E94C02C9E
Authority key identifier: 64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa
Signing time:             Tue 05 Mar 2024 18:09:50 +0000
ROA not before:           Tue 05 Mar 2024 18:04:50 +0000
ROA not after:            Tue 04 Mar 2025 18:09:50 +0000
asID:                     265633
IP address blocks:        170.244.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:4f:c6:66:29:20:38:09:1d:fb:f1:4e:eb:ab:e9:6e:94:c0:2c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64CA902FE672A198EBE9410C4C09F2FFF81502BB
        Validity
            Not Before: Mar  5 18:04:50 2024 GMT
            Not After : Mar  4 18:09:50 2025 GMT
        Subject: CN=B92CD31CB24E6799CD5B608C0FB13B0FFFAFF0AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1a:c6:46:71:3b:24:ed:5a:32:79:b0:e4:c3:
                    be:de:69:48:a0:dd:aa:19:c0:4e:e4:61:20:22:9e:
                    70:0b:80:54:43:d9:76:e5:e9:08:e5:c1:4f:58:d5:
                    42:56:bc:dc:f1:9c:21:e7:9f:ae:66:1a:6e:aa:a4:
                    52:47:5a:fd:c4:23:15:6d:2d:a9:ba:c1:e6:9d:ad:
                    2f:80:38:4f:83:94:5e:4d:01:10:ba:3d:55:21:da:
                    2a:0c:e5:96:57:0c:bc:ae:19:b4:d7:7a:c0:95:be:
                    ad:a9:b9:66:2c:6f:44:29:fa:5f:5e:b2:79:09:dc:
                    7f:cf:11:4d:74:4e:e3:62:03:d8:5d:4f:20:81:c3:
                    56:37:76:16:fe:e4:2f:d7:a2:43:28:4b:ca:2c:74:
                    ab:b7:a7:e3:27:5e:0f:13:c5:29:84:ae:03:2f:21:
                    c3:20:e3:fa:15:c6:c4:93:84:c2:87:d1:92:57:39:
                    17:03:f5:00:f4:9f:ce:53:de:d4:3f:ee:67:1f:22:
                    38:02:22:8b:13:4e:2d:2c:69:22:11:1e:f2:8e:05:
                    5e:ff:75:ef:fd:84:6f:ef:db:35:26:d6:e9:91:14:
                    b4:7d:c8:f8:23:98:60:38:8c:da:7c:04:2a:fe:73:
                    3e:43:5d:13:a6:37:fa:32:a5:6c:9e:52:d4:01:70:
                    f2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:2C:D3:1C:B2:4E:67:99:CD:5B:60:8C:0F:B1:3B:0F:FF:AF:F0:AA
            X509v3 Authority Key Identifier:
                keyid:64:CA:90:2F:E6:72:A1:98:EB:E9:41:0C:4C:09:F2:FF:F8:15:02:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64CA902FE672A198EBE9410C4C09F2FFF81502BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63B98F93D01E90BFE5D56BFBD45D2A441BE3B790695A98DD8BDF6BBF3CC3DC2D/0/3137302e3234342e35322e302f32322d3234203d3e20323635363333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:88:0b:fb:2e:b3:47:c7:6d:8f:74:3e:18:11:7a:b9:e8:7d:
         72:66:1b:3b:b0:56:3c:84:29:59:1c:c5:cc:87:ba:4e:b9:ea:
         78:f4:f9:cb:7b:47:19:31:73:97:cf:7d:2f:ce:0a:c0:cf:a7:
         9a:70:af:57:61:dc:5b:24:bc:ee:2d:b2:88:8d:4a:ba:d2:71:
         4e:b8:bc:4b:71:73:b5:10:a1:b6:a5:58:1c:b0:ee:ee:76:fc:
         20:c0:bc:d3:18:b3:d3:0c:f6:10:2f:fa:df:b1:c5:e3:1c:7a:
         1c:47:35:db:2e:ef:47:fa:e0:56:1e:ae:3d:a7:15:51:ad:49:
         9c:6c:27:31:60:7e:68:3e:a3:48:1a:d1:7c:70:1b:21:de:19:
         38:11:90:e9:7e:57:00:7b:de:41:bc:0b:0f:a9:39:c8:5c:ea:
         98:2b:1c:3a:65:25:59:0f:4f:8b:c3:f6:5e:3d:24:68:2d:1c:
         6a:bc:09:3a:63:e2:e0:8d:f2:bd:2f:46:45:34:08:a4:66:1b:
         6f:65:02:a7:a0:71:e8:ef:5d:60:da:62:a3:6f:b6:33:fa:6d:
         49:30:2e:6e:03:cb:17:86:5a:ed:f1:3a:28:8b:b4:b6:7b:b3:
         47:7b:2d:52:25:27:b9:d9:ff:5d:14:ec:fc:05:07:df:13:79:
         89:ef:89:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org