Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa
File:                     3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa (raw, json)
Hash identifier:          2R4DAbWtkCbRxK7pBn1bdLmg2zFSLoULGvvvcUwgGSc=
Subject key identifier:   9C:84:31:BC:44:56:48:23:5F:FA:E1:2F:D9:DA:1F:28:BA:2E:9C:2A
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       3B894AFEF1FBEBCDD482C68BA887ADC38EFB3903
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa
Signing time:             Tue 05 Mar 2024 18:18:20 +0000
ROA not before:           Tue 05 Mar 2024 18:13:20 +0000
ROA not after:            Tue 04 Mar 2025 18:18:20 +0000
asID:                     263222
IP address blocks:        170.82.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 13:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:4a:fe:f1:fb:eb:cd:d4:82:c6:8b:a8:87:ad:c3:8e:fb:39:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Mar  5 18:13:20 2024 GMT
            Not After : Mar  4 18:18:20 2025 GMT
        Subject: CN=9C8431BC445648235FFAE12FD9DA1F28BA2E9C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:5a:32:b6:54:a6:d9:a4:e6:1a:1e:30:5f:
                    10:91:ee:bf:bd:b8:b3:e6:b4:ad:ff:e3:da:28:33:
                    2f:76:20:f0:5f:71:01:e3:f6:d4:bf:19:25:f7:c4:
                    d4:3c:90:f1:d5:dc:61:94:b3:83:e9:35:27:3e:84:
                    a8:ea:ab:b7:a1:38:35:33:79:52:75:38:8b:60:02:
                    51:1e:40:76:6f:48:a2:35:cd:dc:02:a8:8e:5e:7f:
                    2f:76:06:0a:68:c8:66:d5:eb:ed:6f:c4:40:6e:0a:
                    c3:c7:7f:ed:bf:07:74:d8:ed:0c:cd:a8:50:85:3d:
                    0f:8a:b2:2b:27:50:a9:f4:60:14:f1:6e:4a:d5:b1:
                    bb:df:0b:ed:5f:66:6d:e7:2d:0c:ec:75:99:6a:8e:
                    cc:72:e4:de:4f:bf:55:7b:7c:ae:9d:63:c6:9f:00:
                    73:da:d7:ce:66:0f:b0:fd:e0:3f:92:1d:6a:c8:d4:
                    72:de:c9:23:b7:ac:f4:ad:50:58:61:b0:ab:f6:74:
                    70:e1:12:86:5c:a5:48:2d:15:a9:c3:3e:8d:d8:4d:
                    df:b8:16:8c:4a:09:7c:91:6e:a2:fc:3d:56:69:af:
                    a7:1c:68:18:5f:88:bb:7d:4d:59:e0:3f:70:2a:e2:
                    28:06:d4:c9:39:ac:ec:8e:f6:b6:ca:d9:7c:c7:6b:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:84:31:BC:44:56:48:23:5F:FA:E1:2F:D9:DA:1F:28:BA:2E:9C:2A
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/3137302e38322e3231362e302f32322d3234203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:35:7b:fb:98:5a:3f:ee:f0:30:53:7a:db:9d:2c:63:6c:2d:
         9e:28:50:38:9b:54:d5:06:3a:2d:ae:ee:34:e0:50:aa:f9:54:
         a3:9b:5a:d1:6b:41:8a:2c:e2:65:45:af:1e:5f:d5:b7:bf:e9:
         7f:00:ee:6b:b5:de:a3:f3:2d:2a:55:f9:c4:f6:80:4e:88:3e:
         bf:d6:8b:0c:04:59:27:cd:df:2c:68:1c:c1:e1:c1:48:78:ff:
         69:0c:80:c3:43:99:c4:12:ce:74:e6:00:e8:0f:df:e3:7f:f7:
         1b:46:7c:5b:93:63:c5:9b:c3:3d:9a:bf:34:4c:7f:49:17:6a:
         89:07:eb:7e:69:b3:6d:b8:ae:b1:f2:c8:2d:17:1c:bf:18:a7:
         96:d4:1d:5a:37:da:b0:bc:a2:61:e6:c7:e0:88:cd:37:81:6a:
         6c:18:1b:c8:70:fa:a1:35:44:87:34:f7:55:8a:a5:34:0a:87:
         6c:5e:aa:c3:25:76:ed:25:65:fe:9f:88:9b:d8:74:a7:23:b3:
         39:6b:09:a5:a0:fd:80:c6:72:a7:63:78:48:81:7c:2c:4d:38:
         c1:6a:f3:f1:69:bd:72:be:82:7e:da:ea:03:5a:9a:56:c5:e1:
         d7:18:7b:b0:bf:a9:62:59:c2:69:3e:6e:c3:bd:c5:0d:57:4f:
         44:96:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:49 2024 by rpki-client on console-fra.rpki-client.org