Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa
File:                     3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa (raw, json)
Hash identifier:          Y03h3DMq1MFkpc889Cywi7ydL0X/fxH6WLYMWuIeGSQ=
Subject key identifier:   5B:93:CB:5A:E1:8C:C6:C9:5C:CD:2C:9E:2B:FE:4B:64:28:7C:BF:13
Certificate issuer:       /CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
Certificate serial:       230FB60A88138FF7E0F6430C0584368A5D799E5B
Authority key identifier: 4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa
Signing time:             Tue 05 Mar 2024 18:06:40 +0000
ROA not before:           Tue 05 Mar 2024 18:01:40 +0000
ROA not after:            Tue 04 Mar 2025 18:06:40 +0000
asID:                     271971
IP address blocks:        170.83.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0f:b6:0a:88:13:8f:f7:e0:f6:43:0c:05:84:36:8a:5d:79:9e:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F85099AE59F61C2363111166B9BC2E8D5203C8F
        Validity
            Not Before: Mar  5 18:01:40 2024 GMT
            Not After : Mar  4 18:06:40 2025 GMT
        Subject: CN=5B93CB5AE18CC6C95CCD2C9E2BFE4B64287CBF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:11:d6:bc:d0:ff:71:8b:e2:9b:6a:08:af:
                    cd:64:16:5a:c4:33:e0:45:f0:bd:b7:fc:41:3a:84:
                    07:e0:9f:26:d4:ea:cb:c4:d6:13:52:5f:50:8d:a8:
                    3b:d4:02:a9:4c:6c:58:79:d8:a1:9b:fe:07:25:53:
                    56:64:e2:c5:e9:68:ea:36:4b:aa:f9:a2:83:65:79:
                    a5:90:a8:df:4f:3e:1f:c2:30:b1:6f:a0:23:2b:e3:
                    75:25:0a:cf:40:b2:6e:be:fc:de:c9:9e:75:7c:3e:
                    d9:e3:df:70:07:8a:ab:45:84:2e:e2:51:a4:c8:98:
                    a0:5c:e0:56:03:6a:da:a3:ad:bc:ba:bb:a8:68:f3:
                    1c:82:79:99:a0:2a:61:dc:2e:cb:bf:0b:2e:7d:39:
                    ed:f4:0c:01:22:9f:4b:bd:d7:95:96:a5:6b:6d:99:
                    9e:cb:5a:3f:d5:cd:4d:fc:e4:fe:d8:ed:5b:f1:33:
                    13:57:7c:19:c0:7e:0e:f5:cc:75:3f:e5:01:57:44:
                    ac:95:4d:c8:7e:02:3e:39:25:88:a5:84:3d:e5:28:
                    cb:9f:ae:c1:7f:61:dd:b1:40:20:6b:a7:41:aa:68:
                    7b:a1:00:9d:5e:60:82:dd:50:8a:ec:59:5a:70:f4:
                    0b:26:61:4b:e1:3b:f5:18:b1:dd:5c:3b:25:ed:7f:
                    5c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:93:CB:5A:E1:8C:C6:C9:5C:CD:2C:9E:2B:FE:4B:64:28:7C:BF:13
            X509v3 Authority Key Identifier:
                keyid:4F:85:09:9A:E5:9F:61:C2:36:31:11:16:6B:9B:C2:E8:D5:20:3C:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F85099AE59F61C2363111166B9BC2E8D5203C8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7229EBE6570AB714CCF106E3BFAFEACD4A76A21E811421FEB023EA34E4447263/0/3137302e38332e3131362e302f32322d3234203d3e20323731393731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:84:87:17:47:ec:67:51:8b:35:37:46:dc:df:77:eb:6c:73:
         ca:e0:68:a3:47:82:c6:25:fa:81:d0:dd:17:f4:f2:9a:fc:89:
         f0:42:2c:be:1a:e4:01:a2:2d:3d:80:06:e5:ef:3a:c7:28:4c:
         9b:4f:fd:1b:7a:cf:9b:04:b1:d7:56:f0:9a:00:a8:ef:1a:e3:
         e8:79:e2:e1:84:fe:e6:b2:8c:10:09:a4:ae:ca:2b:d8:4e:c9:
         fd:c3:65:a1:78:dc:ac:53:d3:7b:80:a0:62:2e:a0:d2:ae:56:
         b2:65:ff:0b:17:b3:03:01:ac:6e:ea:c1:ba:36:cc:e8:16:ff:
         c8:30:21:84:b6:64:aa:9d:34:68:a9:ff:0a:98:09:13:f6:9d:
         db:eb:94:92:5c:d1:85:db:0d:21:b1:bf:d8:09:30:00:fd:68:
         c3:db:0c:aa:b1:2e:b1:b0:38:1b:2b:22:d4:02:ae:9a:c4:51:
         0c:7b:57:3c:ea:93:8a:20:1f:2d:86:49:3d:18:91:f9:d9:2e:
         9a:ff:91:75:71:78:2d:45:10:8b:a3:e6:a8:1e:37:a3:d3:c0:
         f7:53:a8:b7:f7:f0:99:85:3b:ea:e2:07:df:38:85:76:71:fd:
         f7:89:48:5b:54:3c:09:e7:83:67:42:d2:aa:76:1b:bb:c6:1e:
         33:bf:cb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:38:02 2024 by rpki-client on console-ams.rpki-client.org