Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa
File:                     3137302e302e3234342e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          rWY6QySfSxFJE1uvo6FrANZb0Yy93yl/UwYNIr6wGZk=
Subject key identifier:   6A:18:9B:9C:68:75:49:61:CB:FB:E3:E2:11:62:DA:BE:7D:67:67:CF
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       4E4EA6B271381D0AD06A06D56699C9F6AD9F2110
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 05 Mar 2024 18:18:18 +0000
ROA not before:           Tue 05 Mar 2024 18:13:18 +0000
ROA not after:            Tue 04 Mar 2025 18:18:18 +0000
asID:                     263222
IP address blocks:        170.0.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:a6:b2:71:38:1d:0a:d0:6a:06:d5:66:99:c9:f6:ad:9f:21:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Mar  5 18:13:18 2024 GMT
            Not After : Mar  4 18:18:18 2025 GMT
        Subject: CN=6A189B9C68754961CBFBE3E21162DABE7D6767CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:09:44:47:bb:71:7d:76:dc:95:75:67:ed:
                    f6:f6:39:f4:c6:33:45:57:34:c8:a3:2d:fa:0d:52:
                    0c:a5:6d:4a:13:0f:7b:6d:33:06:66:a2:c5:43:49:
                    09:46:e7:99:b9:6f:11:ab:ac:44:c9:aa:c2:93:36:
                    6a:f6:53:79:0a:57:61:49:45:45:29:34:e9:eb:7f:
                    d3:1e:e5:cb:98:80:bf:f7:be:e7:07:35:13:cc:75:
                    ac:5d:21:31:11:fa:07:f3:27:32:23:bd:30:d9:28:
                    3e:8c:2f:55:69:27:a4:7b:ee:7f:34:65:fa:10:fb:
                    23:94:76:60:ef:9c:50:b6:96:c5:5a:ce:4e:ee:0d:
                    4f:79:e9:9f:61:75:a8:9d:e5:0e:a5:25:d4:a4:de:
                    f1:0d:db:50:7c:6e:39:30:7b:73:f5:65:bf:56:07:
                    b9:ad:66:49:36:71:9b:ea:66:f5:92:26:f6:bb:4a:
                    e0:1d:22:76:e9:a0:ba:53:7a:48:81:f4:a1:78:56:
                    ab:c4:16:ab:a9:54:81:cd:57:f7:42:d4:a2:b6:f6:
                    93:2e:42:fa:2e:4e:b7:a0:a0:5a:e7:43:f4:cb:20:
                    8f:9e:92:85:a4:e7:f3:e3:7c:64:22:c9:12:08:98:
                    26:ed:13:bf:38:54:08:c4:f5:b1:d8:60:e7:49:34:
                    d7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:18:9B:9C:68:75:49:61:CB:FB:E3:E2:11:62:DA:BE:7D:67:67:CF
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e302e3234342e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:7a:15:4f:cc:63:64:08:cf:af:53:d3:03:b9:b1:f0:ab:fd:
         33:0e:b6:d1:38:2b:38:c4:d7:4c:b2:57:e8:fe:e2:7d:e4:7f:
         54:fe:d8:7e:5a:d3:8a:d5:c4:a0:7c:00:b4:a3:f6:e2:5b:e7:
         45:2c:52:fd:db:0b:46:dc:20:79:9a:88:8e:98:0d:01:43:e8:
         57:54:d8:29:6f:f3:06:3f:9b:8b:a0:ca:d6:35:78:17:74:dc:
         eb:c1:7b:09:55:be:c9:b5:7b:cd:33:84:df:b4:c6:ae:7a:07:
         b3:92:c0:58:c2:1b:e3:fb:3d:94:61:1c:c8:5a:77:b5:e8:f2:
         25:65:03:3e:24:56:7e:46:56:d8:92:f3:ad:fb:61:38:7b:af:
         6d:3b:44:0e:a9:b3:a4:0a:26:df:c8:ff:2f:bb:ea:54:47:1c:
         80:36:dc:79:81:b2:2a:07:a4:3f:ba:68:02:b8:c6:e3:3b:32:
         0f:50:7e:d2:c2:23:08:bf:92:bc:b4:43:71:16:03:47:bc:ef:
         d1:7d:87:d2:91:15:b3:a1:98:77:89:bd:17:91:b7:56:67:45:
         47:43:9b:24:06:a1:5b:c9:4f:ae:50:43:33:10:07:df:47:f4:
         8c:55:75:ad:38:7c:f1:ea:5f:d4:11:a4:14:96:40:a6:56:c6:
         f5:0e:39:5b
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUTk6msnE4HQrQagbVZpnJ9q2fIRAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYyMjlDRTU0Q0QwMzYyRTUyMzA0RjcxQzc3OTlDM0FE
MkIyRUZEMzAeFw0yNDAzMDUxODEzMThaFw0yNTAzMDQxODE4MThaMDMxMTAvBgNV
BAMTKDZBMTg5QjlDNjg3NTQ5NjFDQkZCRTNFMjExNjJEQUJFN0Q2NzY3Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI6QlER7txfXbclXVn7fb2OfTG
M0VXNMijLfoNUgylbUoTD3ttMwZmosVDSQlG55m5bxGrrETJqsKTNmr2U3kKV2FJ
RUUpNOnrf9Me5cuYgL/3vucHNRPMdaxdITER+gfzJzIjvTDZKD6ML1VpJ6R77n80
ZfoQ+yOUdmDvnFC2lsVazk7uDU956Z9hdaid5Q6lJdSk3vEN21B8bjkwe3P1Zb9W
B7mtZkk2cZvqZvWSJva7SuAdInbpoLpTekiB9KF4VqvEFqupVIHNV/dC1KK29pMu
QvouTregoFrnQ/TLII+ekoWk5/PjfGQiyRIImCbtE784VAjE9bHYYOdJNNejAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUahibnGh1SWHL++PiEWLavn1nZ88wHwYDVR0j
BBgwFoAUxiKc5UzQNi5SME9xx3mcOtKy79MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83NUQzNzY4N0I0RUJEQ0Y0MjU5ODIzMTkzMDM5RDVCNEI5
RDEwN0ZDMzExRjMzMUNCQkVBRTIzNTExRTQzMEVGLzAvQzYyMjlDRTU0Q0QwMzYy
RTUyMzA0RjcxQzc3OTlDM0FEMkIyRUZEMy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNjIyOUNFNTRDRDAzNjJFNTIz
MDRGNzFDNzc5OUMzQUQyQjJFRkQzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzVEMzc2ODdCNEVCRENGNDI1OTgyMzE5MzAzOUQ1QjRCOUQxMDdGQzMx
MUYzMzFDQkJFQUUyMzUxMUU0MzBFRi8wLzMxMzczMDJlMzAyZTMyMzQzNDJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzMzMyMzIzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqoA9DAN
BgkqhkiG9w0BAQsFAAOCAQEAnnoVT8xjZAjPr1PTA7mx8Kv9Mw620TgrOMTXTLJX
6P7ifeR/VP7YflrTitXEoHwAtKP24lvnRSxS/dsLRtwgeZqIjpgNAUPoV1TYKW/z
Bj+bi6DK1jV4F3Tc68F7CVW+ybV7zTOE37TGrnoHs5LAWMIb4/s9lGEcyFp3tejy
JWUDPiRWfkZW2JLzrfthOHuvbTtEDqmzpAom38j/L7vqVEccgDbceYGyKgekP7po
ArjG4zsyD1B+0sIjCL+SvLRDcRYDR7zv0X2H0pEVs6GYd4m9F5G3VmdFR0ObJAah
W8lPrlBDMxAH30f0jFV1rTh88epf1BGkFJZAplbG9Q45Ww==
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org