Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3137302e3233312e3136302e302f32322d3234203d3e203238303338.roa
File:                     3137302e3233312e3136302e302f32322d3234203d3e203238303338.roa (raw, json)
Hash identifier:          38TJdnsljg7MJQXbIEJQAVXtriLY0/V7HNX0c0h80AY=
Subject key identifier:   3C:CA:49:D3:85:F7:D2:42:32:10:99:D7:C9:8F:D8:F7:55:FB:00:4B
Certificate issuer:       /CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
Certificate serial:       0FD31510F64ECF240539141DB879B50B639F4025
Authority key identifier: CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3137302e3233312e3136302e302f32322d3234203d3e203238303338.roa
Signing time:             Tue 05 Mar 2024 18:02:33 +0000
ROA not before:           Tue 05 Mar 2024 17:57:33 +0000
ROA not after:            Tue 04 Mar 2025 18:02:33 +0000
asID:                     28038
IP address blocks:        170.231.160.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d3:15:10:f6:4e:cf:24:05:39:14:1d:b8:79:b5:0b:63:9f:40:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8
        Validity
            Not Before: Mar  5 17:57:33 2024 GMT
            Not After : Mar  4 18:02:33 2025 GMT
        Subject: CN=3CCA49D385F7D242321099D7C98FD8F755FB004B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:26:66:00:ed:50:22:2c:88:08:e6:ce:66:
                    b4:08:fb:be:05:c7:34:ad:70:b5:da:36:1c:df:fd:
                    e3:ee:0f:6c:8f:a6:d1:81:66:a9:1f:5d:69:06:ae:
                    62:4e:ce:a5:7c:a5:01:00:07:f0:2b:9b:d3:cb:e1:
                    7e:84:58:92:6d:47:4f:23:c5:d6:91:61:2d:77:7d:
                    dd:33:82:ad:0e:96:9a:a6:6f:e8:4c:78:9a:ea:dd:
                    91:41:df:0b:2a:55:ba:ce:f2:30:5a:01:fb:07:cd:
                    00:f2:28:96:a6:3b:7c:00:04:3d:88:4c:b2:42:44:
                    04:1c:ea:2e:3f:67:c8:b8:93:1d:96:db:3a:02:68:
                    36:ff:db:54:2e:3b:4d:91:c9:00:f1:f3:62:9c:77:
                    50:47:b9:84:8d:c4:0e:df:2e:6e:59:d9:3b:5b:cb:
                    b6:df:6e:2c:4d:f6:36:ac:12:ef:ec:1a:cf:32:29:
                    05:b7:d1:c2:3e:d2:8b:8d:ac:2f:f8:b9:6f:8a:42:
                    f3:b7:e3:f1:cd:d8:1c:96:5d:19:5d:22:cd:2f:cd:
                    92:76:fb:db:8a:73:bc:91:a9:42:45:3f:ed:00:35:
                    00:63:41:bb:7e:6f:2f:0a:4e:ac:01:37:ed:c2:5a:
                    7d:f1:a6:57:fe:60:d5:4d:3c:f8:c9:a6:d6:82:c2:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:49:D3:85:F7:D2:42:32:10:99:D7:C9:8F:D8:F7:55:FB:00:4B
            X509v3 Authority Key Identifier:
                keyid:CB:3D:66:30:5F:CD:8F:19:74:E1:E4:AD:92:D8:D4:F1:87:BA:51:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB3D66305FCD8F1974E1E4AD92D8D4F187BA51E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69D44F36490705CF133929528BB6793C3344D10F79254B6246513125A1042020/0/3137302e3233312e3136302e302f32322d3234203d3e203238303338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:99:e1:03:29:f6:4b:47:82:2f:3c:73:55:5f:b2:44:53:
         29:24:dd:e8:6c:09:8b:65:0e:26:79:06:6f:cb:b2:31:b6:f0:
         04:42:5c:4b:3f:0a:fd:f3:88:e1:4e:61:fa:9f:05:77:c2:03:
         72:fb:60:e1:b4:3b:c4:12:48:81:ca:8c:48:40:6f:9c:09:0a:
         c9:f3:f6:c9:c4:93:d7:5c:f1:b5:a3:2a:bd:29:17:3a:66:07:
         81:29:98:31:2a:c8:4e:61:ee:38:c4:75:79:0b:fc:1c:d1:a2:
         ac:b1:5e:85:83:a2:cc:e1:12:c6:69:a5:70:4f:b7:06:dd:ea:
         b4:b9:8a:5d:0f:7a:5e:64:70:ef:0a:49:b6:3c:10:7e:60:8e:
         ca:49:7b:7b:de:10:9f:b4:4b:da:25:41:aa:14:6a:11:a0:4d:
         ef:7a:2b:d3:1a:06:be:c1:53:bb:10:10:68:59:c8:e8:d0:d6:
         79:52:f6:1f:b3:1e:39:d9:f5:7b:4b:cc:5a:4f:81:cf:4f:9a:
         66:f5:d4:2a:41:cd:2b:e3:1d:b5:17:95:e7:c1:ce:b1:43:cc:
         a6:ee:15:4d:ef:45:e1:fc:fd:d5:c1:bc:e6:96:a1:48:8a:ca:
         b3:27:21:f5:fe:ef:5d:be:ea:7b:a9:fa:22:d3:3a:88:19:6f:
         2c:14:6d:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:42 2024 by rpki-client on console-fra.rpki-client.org