Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa
File:                     3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa (raw, json)
Hash identifier:          ucvriWmrlx9S5pmLpJ5L9aJr5OPkQ8xdE3WZpK+5Q7s=
Subject key identifier:   39:3D:37:32:9E:97:B5:12:CE:14:7F:DC:85:3B:01:92:A2:08:1B:7C
Certificate issuer:       /CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
Certificate serial:       55C45586B409CA609A76BBEE3F0093A98CD5EBE8
Authority key identifier: E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa
Signing time:             Tue 05 Mar 2024 18:05:34 +0000
ROA not before:           Tue 05 Mar 2024 18:00:34 +0000
ROA not after:            Tue 04 Mar 2025 18:05:34 +0000
asID:                     264741
IP address blocks:        170.233.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 11:55:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c4:55:86:b4:09:ca:60:9a:76:bb:ee:3f:00:93:a9:8c:d5:eb:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2AD036F3B8ACE531E1A095FAC1E13B2C7324430
        Validity
            Not Before: Mar  5 18:00:34 2024 GMT
            Not After : Mar  4 18:05:34 2025 GMT
        Subject: CN=393D37329E97B512CE147FDC853B0192A2081B7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:64:33:a7:86:ae:18:52:78:df:63:f1:f1:03:
                    b0:cc:4f:fe:c2:5d:15:c5:ad:37:a7:48:ab:49:ab:
                    bb:01:8e:93:82:02:0e:56:49:fa:d3:b3:b2:9e:62:
                    20:f1:de:68:20:d3:81:b8:06:1d:66:ac:28:62:b8:
                    9b:f5:58:22:5a:82:03:4b:e5:03:b4:f4:6a:d8:9d:
                    8a:4d:09:3b:7e:12:74:b2:e4:af:0b:99:55:8d:69:
                    75:d0:4c:3c:4c:e8:59:1b:4f:0d:19:16:fe:76:46:
                    fe:71:24:26:c2:2c:2e:58:3d:74:e8:f7:05:45:8f:
                    dc:8b:0c:68:54:bd:f7:14:e6:70:b0:e9:8b:ff:5c:
                    f4:40:fa:51:50:72:48:12:fc:5a:60:3a:70:fc:67:
                    f2:88:31:68:85:3b:17:03:c2:2c:eb:d9:19:98:31:
                    52:61:d3:69:db:99:b0:95:a6:e9:b8:a3:e8:4f:0c:
                    5b:6c:23:04:ba:d8:d3:b7:b5:29:83:38:c3:d4:1e:
                    ec:a2:18:54:32:68:07:a1:dd:c1:f3:b4:1f:cd:5c:
                    8e:7b:75:79:4b:80:7b:8e:fc:43:d3:8c:d1:c2:a9:
                    af:c5:74:f8:3f:f3:03:76:ad:f9:e3:c7:7d:88:c0:
                    da:26:f5:45:5c:3e:d8:85:c3:03:1e:b7:ca:f1:2a:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3D:37:32:9E:97:B5:12:CE:14:7F:DC:85:3B:01:92:A2:08:1B:7C
            X509v3 Authority Key Identifier:
                keyid:E2:AD:03:6F:3B:8A:CE:53:1E:1A:09:5F:AC:1E:13:B2:C7:32:44:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E2AD036F3B8ACE531E1A095FAC1E13B2C7324430.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6BEFC392F2381E797DDA0C0583BC361E29CB18ECEB78221B6E88749E2F205C3E/0/3137302e3233332e3233322e302f32322d3234203d3e20323634373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:26:9a:d2:47:ce:1c:a1:b0:c5:2b:58:cf:30:fb:ba:92:
         96:66:40:46:ef:0d:05:26:01:05:2f:a8:e6:43:d0:49:5f:6e:
         6e:97:86:ef:d1:80:1c:82:03:0a:08:07:2c:36:0f:5e:b3:b4:
         59:4d:6f:62:01:ea:a2:e2:1b:73:26:3b:f5:d5:ab:df:b9:58:
         98:fa:74:22:c8:24:48:1d:25:b1:64:3a:6d:6f:5a:45:82:a5:
         70:40:96:ce:f0:57:b4:01:0a:22:c1:53:95:a4:c3:61:bf:21:
         a7:20:9e:66:54:b9:3c:a7:07:f2:f4:3f:96:52:1d:e1:4b:9f:
         86:ac:cf:45:0d:91:69:a9:5b:1e:8a:b5:6e:d1:65:6d:0a:69:
         29:d4:ff:ed:3e:f6:0c:15:41:d1:a3:af:fd:3a:dd:2c:83:ac:
         c1:35:04:b8:99:6a:4e:85:b4:d0:c9:4a:0f:f5:4a:b1:31:35:
         1d:6b:41:f1:3a:51:4a:2f:2a:6a:48:95:20:c3:bf:8c:51:25:
         92:ea:32:89:1f:ee:f2:eb:ef:b4:5c:57:4a:c1:05:6f:0d:61:
         a5:69:9b:6b:03:39:b3:d6:8c:7a:b0:5e:8d:4d:71:5a:7a:d3:
         d5:dd:3b:6f:9b:cf:2c:b8:cf:45:54:04:58:11:55:74:92:ff:
         d2:d8:aa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:00 2024 by rpki-client on console-ams.rpki-client.org