Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa
File:                     3137302e37382e34342e302f32322d3234203d3e20323634373931.roa (raw, json)
Hash identifier:          lOTgqo1bAjrSINmM+Kdd/Tjh06+2c7yuFfFrMKwsBF0=
Subject key identifier:   D8:06:BD:19:C7:B3:ED:CB:E0:9F:B6:0B:87:A5:48:61:5E:35:B2:22
Certificate issuer:       /CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
Certificate serial:       5BC2AF342B4CD16702A6F8C7D627E86580717BA2
Authority key identifier: 33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa
Signing time:             Tue 05 Mar 2024 17:50:39 +0000
ROA not before:           Tue 05 Mar 2024 17:45:39 +0000
ROA not after:            Tue 04 Mar 2025 17:50:39 +0000
asID:                     264791
IP address blocks:        170.78.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c2:af:34:2b:4c:d1:67:02:a6:f8:c7:d6:27:e8:65:80:71:7b:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E
        Validity
            Not Before: Mar  5 17:45:39 2024 GMT
            Not After : Mar  4 17:50:39 2025 GMT
        Subject: CN=D806BD19C7B3EDCBE09FB60B87A548615E35B222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:4b:a0:1f:eb:6c:47:9f:80:dd:bf:71:47:
                    26:cc:9d:bd:97:8f:1c:19:7e:3e:4f:c6:48:71:6c:
                    a6:a5:47:60:24:6c:1f:34:5f:6b:9a:f3:cd:97:4f:
                    08:ce:e2:b7:16:0e:b3:53:2c:1a:bb:2d:52:30:c8:
                    de:89:3e:a8:6f:7d:3c:a8:ad:fd:0e:18:e7:8b:12:
                    09:36:cf:24:35:03:9d:7c:d5:c6:35:64:01:c6:f1:
                    f9:aa:3c:e2:29:aa:d7:e2:b0:41:87:11:97:82:d0:
                    6e:87:1f:1e:a6:9d:8e:7c:0e:9b:25:86:80:02:0b:
                    cb:c2:c4:84:64:61:bf:e3:63:5d:24:c4:34:13:cc:
                    50:cb:24:09:15:ff:a8:37:18:1a:71:1c:c8:a8:60:
                    e1:bc:2e:d3:7e:ac:0e:14:b5:11:82:b8:4f:16:38:
                    31:a7:02:9b:b4:f7:a8:ad:8c:91:c6:bb:44:7d:de:
                    0c:89:0b:d6:42:4a:dc:36:34:6a:a1:b2:8c:0c:c4:
                    cf:f7:10:c5:0a:c2:cc:fb:48:1c:42:a3:02:50:90:
                    55:bc:44:b5:0c:b7:dc:cc:00:3d:b5:f8:7e:9e:bd:
                    86:b1:bf:37:15:ed:84:9e:db:eb:d5:56:9c:9f:96:
                    b8:8d:f6:09:dd:c5:ce:a4:74:dd:1f:32:a0:af:da:
                    2d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:06:BD:19:C7:B3:ED:CB:E0:9F:B6:0B:87:A5:48:61:5E:35:B2:22
            X509v3 Authority Key Identifier:
                keyid:33:16:61:CC:26:33:A6:AD:3E:DD:09:BF:EE:41:C8:33:7A:4D:5C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/331661CC2633A6AD3EDD09BFEE41C8337A4D5C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/698DF3A2D5D15B1A949C9697AE3C9AA6425560A8FD3EDE5296A3BBA560EB3D13/0/3137302e37382e34342e302f32322d3234203d3e20323634373931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:45:10:db:f9:a0:8b:d7:35:1d:bb:43:59:58:26:d2:74:c6:
         fd:fa:d7:ee:a7:d7:92:6f:69:1b:34:37:42:ee:02:8b:0f:67:
         30:95:7e:f4:20:0d:a6:cd:e0:ca:74:4a:8f:6d:e5:87:8b:4e:
         c0:fb:49:72:b7:df:4c:2f:1f:79:61:17:d0:de:54:3f:10:86:
         8d:69:e8:3d:3d:13:32:4f:73:32:9c:f9:7b:e9:b9:ef:00:2f:
         f3:30:a4:fe:82:05:c1:68:b3:a9:be:6b:38:a3:10:a9:c9:f9:
         80:51:f8:af:e0:52:f0:2b:25:7e:32:87:bd:ae:2a:d7:aa:0a:
         a7:a5:0f:fa:eb:aa:35:3e:3e:23:9d:b3:6f:c8:84:43:b6:d9:
         e6:a1:4f:68:3a:a5:d3:d3:3a:92:9b:7d:22:51:75:2f:38:a2:
         84:b0:e0:13:9a:4b:63:2a:bc:30:85:d0:2e:6e:6d:9e:6d:a6:
         68:7b:cc:b9:7d:3d:d3:d6:33:8b:7e:84:10:d5:0a:d6:09:16:
         62:1d:e8:e1:33:88:f3:61:aa:f2:18:25:3d:34:67:63:30:18:
         cf:54:e5:6c:eb:55:38:81:70:d6:5b:bd:fb:67:1d:1b:00:30:
         15:3f:c1:aa:72:34:db:97:fb:c5:e5:3d:e0:1e:ef:a9:95:5d:
         69:7f:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org