Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e203134323539.roa
File:                     3137302e3234372e3231362e302f32322d3234203d3e203134323539.roa (raw, json)
Hash identifier:          bxZLNGMh6Cd3sDQjAj0NqvO9kSSQc9eS8p2eV5Fo7TU=
Subject key identifier:   DA:3B:03:33:A9:5D:EE:76:E2:78:13:53:8B:5B:1F:16:56:02:6B:B6
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       3B76BA8DAFB4C4C10B2FD6A37EC0B82931AF167D
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e203134323539.roa
Signing time:             Tue 05 Mar 2024 17:58:37 +0000
ROA not before:           Tue 05 Mar 2024 17:53:37 +0000
ROA not after:            Tue 04 Mar 2025 17:58:37 +0000
asID:                     14259
IP address blocks:        170.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:76:ba:8d:af:b4:c4:c1:0b:2f:d6:a3:7e:c0:b8:29:31:af:16:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Mar  5 17:53:37 2024 GMT
            Not After : Mar  4 17:58:37 2025 GMT
        Subject: CN=DA3B0333A95DEE76E27813538B5B1F1656026BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:57:f6:ed:6b:ef:f1:9a:88:fe:b3:cd:8f:8a:
                    e7:d9:f9:71:ee:4f:b7:c1:9b:2b:71:80:67:ca:0e:
                    86:50:1f:a9:e6:94:59:09:86:b6:de:ad:36:8d:16:
                    c9:a1:ad:19:81:a8:b1:5d:08:c5:48:a9:93:6f:f8:
                    28:df:3a:d8:bb:48:ab:d8:13:06:7c:d3:74:96:16:
                    68:85:4c:41:22:6f:04:2a:19:f2:63:85:a5:6f:1a:
                    c3:bb:7a:5e:9d:59:0f:9f:25:d9:ac:15:8e:27:80:
                    2f:ab:93:4e:28:b7:8c:12:df:39:3e:f1:c1:ff:70:
                    2a:31:32:96:97:8b:c7:21:33:9d:03:c4:35:44:4d:
                    8f:8f:49:9e:1e:d8:29:0a:49:ad:41:d6:71:fa:86:
                    f7:33:98:cf:fe:c9:49:60:94:01:c9:30:0a:9c:d6:
                    00:71:e9:2e:2a:65:d7:1a:87:9b:79:b7:cc:8a:a6:
                    28:bb:31:87:d6:0a:7e:e4:f8:c3:c0:8d:ca:db:71:
                    07:3f:5c:0c:2a:8f:1e:74:f2:df:8d:71:f8:3f:33:
                    7e:91:e3:21:7b:46:8c:75:aa:b3:42:ef:3f:39:f5:
                    e6:15:c8:2e:1a:10:b1:8e:7d:06:28:1c:81:bb:48:
                    10:73:41:f3:95:9e:57:8d:ef:f4:c3:c6:db:a4:48:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3B:03:33:A9:5D:EE:76:E2:78:13:53:8B:5B:1F:16:56:02:6B:B6
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e203134323539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:fe:66:db:a6:79:68:86:c5:8a:05:8d:e7:f5:01:11:d1:b3:
         36:e7:16:29:9a:68:89:40:eb:3d:ea:21:93:3d:b7:ec:b6:32:
         48:1e:ec:44:cd:29:e4:90:41:5f:43:19:97:d3:72:c3:cd:2c:
         83:2b:4b:47:35:43:af:fd:21:84:69:18:c5:d6:44:05:74:59:
         92:12:10:c8:5c:83:c6:b7:96:05:0b:60:7a:0e:46:95:f3:c3:
         53:2e:e8:93:f4:ad:48:89:df:2b:22:95:e1:54:e3:bb:68:be:
         14:ce:50:95:fa:a9:b9:16:27:ea:a0:8a:2d:a5:fe:5d:c0:94:
         c1:32:8a:10:79:5c:e3:ae:60:0f:5c:e2:74:53:95:ac:9a:d2:
         be:fd:8d:82:f6:7f:07:76:39:de:61:ef:0f:23:41:9a:42:75:
         ea:56:02:2a:1e:d8:90:69:01:da:fe:05:96:13:69:a5:9a:33:
         a5:10:a0:1a:09:99:6c:2f:ce:e8:ba:bd:4c:de:0d:c0:e3:44:
         dc:08:33:a4:bd:4e:fe:6c:8b:bf:6d:70:3f:65:83:80:de:5c:
         d3:fc:54:7d:1d:37:cd:29:11:e4:79:03:b7:25:29:92:3e:ed:
         e6:0e:39:84:32:d0:62:5c:20:7a:01:d0:d6:37:9e:55:d8:63:
         75:f1:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:56 2024 by rpki-client on console-ams.rpki-client.org