Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
File:                     3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa (raw, json)
Hash identifier:          4YYfZcykEsLT7D6L71khDodaWwKsQa+aba+i7f1ZOgY=
Subject key identifier:   D3:6F:89:8D:9D:AF:05:AF:D9:9F:A8:4C:AF:C7:E2:D8:2E:D5:73:59
Certificate issuer:       /CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
Certificate serial:       4A1160A743D6CEAB6F603E9419EC4DEAE4F45E64
Authority key identifier: 93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa
Signing time:             Tue 05 Mar 2024 17:58:37 +0000
ROA not before:           Tue 05 Mar 2024 17:53:37 +0000
ROA not after:            Tue 04 Mar 2025 17:58:37 +0000
asID:                     272981
IP address blocks:        170.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:11:60:a7:43:d6:ce:ab:6f:60:3e:94:19:ec:4d:ea:e4:f4:5e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93A905B35648C76DDC2B5F7E48FE13AA127FC4AF
        Validity
            Not Before: Mar  5 17:53:37 2024 GMT
            Not After : Mar  4 17:58:37 2025 GMT
        Subject: CN=D36F898D9DAF05AFD99FA84CAFC7E2D82ED57359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:31:a1:28:bd:4c:b9:d5:48:f6:94:50:fc:
                    5f:13:28:65:66:01:a9:40:76:11:ad:d6:2d:76:46:
                    33:2b:f6:63:2c:a6:09:5e:9c:c4:83:5e:e0:fe:1e:
                    8a:ad:a3:9c:df:b3:5c:6e:d2:39:dd:3c:a4:cd:d2:
                    dd:73:54:42:6b:61:f3:df:50:38:2d:c7:3f:e8:52:
                    9b:2f:ac:0a:e9:07:e0:62:50:e8:7e:84:5c:ec:48:
                    4a:b2:ea:61:4f:b1:67:06:5a:0d:a9:33:25:cf:08:
                    90:08:ff:0d:db:ac:63:58:f8:d2:d5:5d:64:5e:77:
                    e7:66:da:96:38:13:7e:ed:9a:f0:9b:19:a4:8b:27:
                    d3:86:0d:7b:d3:1f:5f:dd:7a:f5:9f:c9:d7:b6:cd:
                    a8:83:83:37:29:f2:2d:4f:62:4e:a6:08:b5:72:30:
                    93:e2:c8:3d:96:58:68:23:82:5f:04:19:36:f3:bc:
                    49:20:c6:55:bb:22:80:a6:4e:3a:ee:f8:9e:34:b2:
                    fd:50:ea:a4:64:6a:f4:c6:ed:41:72:ba:31:6f:be:
                    a5:88:5a:a2:55:72:45:0f:68:0f:c4:ff:0a:ac:2f:
                    0d:35:26:4c:d7:36:3e:55:b2:1c:41:f8:34:33:05:
                    b9:e5:bc:64:5d:b8:31:b6:96:17:bf:b3:b0:ec:ff:
                    2d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6F:89:8D:9D:AF:05:AF:D9:9F:A8:4C:AF:C7:E2:D8:2E:D5:73:59
            X509v3 Authority Key Identifier:
                keyid:93:A9:05:B3:56:48:C7:6D:DC:2B:5F:7E:48:FE:13:AA:12:7F:C4:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/93A905B35648C76DDC2B5F7E48FE13AA127FC4AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7844D96180F85BDFEFBA089E996933B870D0DA5E3F85C5E9A106118D8124C6C7/0/3137302e3234372e3231362e302f32322d3234203d3e20323732393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:9a:d7:a4:a2:65:16:67:d6:82:ce:b1:1f:e4:41:3a:b6:7c:
         1a:ac:22:13:e3:1f:b0:46:6e:b2:d0:a9:cc:6d:de:89:7c:6b:
         00:22:48:80:05:5b:ae:8f:91:cd:06:34:b0:4c:01:28:75:54:
         4e:4a:89:f6:4d:35:d5:fd:e4:b6:18:81:e3:cd:55:13:3c:67:
         7c:ec:3b:b0:da:e0:dd:79:f9:59:4f:11:c5:49:4d:27:9d:70:
         5a:64:35:ca:4b:d5:49:4b:db:39:86:76:8e:4e:f1:2f:5c:13:
         b9:8e:01:32:17:33:71:dd:25:77:9c:1b:ed:95:dd:a9:07:6b:
         12:39:eb:62:2e:35:9d:f3:a7:2b:05:6b:95:ea:24:42:a6:2b:
         d1:2d:a1:41:f0:f1:8f:00:73:e6:58:04:16:90:6e:a3:8a:dc:
         6d:72:d2:ae:8a:16:0a:91:97:40:48:b2:4f:f8:51:60:91:a9:
         d9:a2:d2:5e:6b:0c:82:29:f3:bc:92:b9:b5:62:9d:fb:f0:06:
         53:75:8a:f9:4c:ab:39:32:ec:2c:61:b6:99:5f:12:48:6e:f7:
         d9:b3:16:48:9e:63:1c:d2:d4:9f:dd:f0:75:ad:7a:3f:bc:47:
         a1:79:ae:5b:85:ab:1a:5a:77:d3:8d:d3:44:f7:c5:84:fb:03:
         5f:94:c9:d6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUShFgp0PWzqtvYD6UGexN6uT0XmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTNBOTA1QjM1NjQ4Qzc2RERDMkI1RjdFNDhGRTEzQUEx
MjdGQzRBRjAeFw0yNDAzMDUxNzUzMzdaFw0yNTAzMDQxNzU4MzdaMDMxMTAvBgNV
BAMTKEQzNkY4OThEOURBRjA1QUZEOTlGQTg0Q0FGQzdFMkQ4MkVENTczNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKjGhKL1MudVI9pRQ/F8TKGVm
AalAdhGt1i12RjMr9mMspglenMSDXuD+Hoqto5zfs1xu0jndPKTN0t1zVEJrYfPf
UDgtxz/oUpsvrArpB+BiUOh+hFzsSEqy6mFPsWcGWg2pMyXPCJAI/w3brGNY+NLV
XWRed+dm2pY4E37tmvCbGaSLJ9OGDXvTH1/devWfyde2zaiDgzcp8i1PYk6mCLVy
MJPiyD2WWGgjgl8EGTbzvEkgxlW7IoCmTjru+J40sv1Q6qRkavTG7UFyujFvvqWI
WqJVckUPaA/E/wqsLw01JkzXNj5VshxB+DQzBbnlvGRduDG2lhe/s7Ds/y3FAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU02+JjZ2vBa/Zn6hMr8fi2C7Vc1kwHwYDVR0j
BBgwFoAUk6kFs1ZIx23cK19+SP4TqhJ/xK8wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83ODQ0RDk2MTgwRjg1QkRGRUZCQTA4OUU5OTY5MzNCODcw
RDBEQTVFM0Y4NUM1RTlBMTA2MTE4RDgxMjRDNkM3LzAvOTNBOTA1QjM1NjQ4Qzc2
RERDMkI1RjdFNDhGRTEzQUExMjdGQzRBRi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85M0E5MDVCMzU2NDhDNzZEREMy
QjVGN0U0OEZFMTNBQTEyN0ZDNEFGLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNzg0NEQ5NjE4MEY4NUJERkVGQkEwODlFOTk2OTMzQjg3MEQwREE1RTNG
ODVDNUU5QTEwNjExOEQ4MTI0QzZDNy8wLzMxMzczMDJlMzIzNDM3MmUzMjMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM3MzIzOTM4MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
99gwDQYJKoZIhvcNAQELBQADggEBAAKa16SiZRZn1oLOsR/kQTq2fBqsIhPjH7BG
brLQqcxt3ol8awAiSIAFW66Pkc0GNLBMASh1VE5KifZNNdX95LYYgePNVRM8Z3zs
O7Da4N15+VlPEcVJTSedcFpkNcpL1UlL2zmGdo5O8S9cE7mOATIXM3HdJXecG+2V
3akHaxI562IuNZ3zpysFa5XqJEKmK9EtoUHw8Y8Ac+ZYBBaQbqOK3G1y0q6KFgqR
l0BIsk/4UWCRqdmi0l5rDIIp87ySubVinfvwBlN1ivlMqzky7CxhtplfEkhu99mz
FkieYxzS1J/d8HWtej+8R6F5rluFqxpad9ON00T3xYT7A1+UydY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:59 2024 by rpki-client on console-fra.rpki-client.org