Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231362e302f32322d3234203d3e203532343535.roa
File:                     3137302e3233332e3231362e302f32322d3234203d3e203532343535.roa (raw, json)
Hash identifier:          DlqJA6WFWNwH63htQaCK844TeUp6BoWi0njzX0csrPU=
Subject key identifier:   93:17:3C:0F:29:DC:C3:D6:95:17:BB:45:D6:95:2D:03:DE:1C:30:12
Certificate issuer:       /CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
Certificate serial:       6AAC1587D53705136F18049D720D81822E45D789
Authority key identifier: 26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231362e302f32322d3234203d3e203532343535.roa
Signing time:             Tue 05 Mar 2024 18:19:40 +0000
ROA not before:           Tue 05 Mar 2024 18:14:40 +0000
ROA not after:            Tue 04 Mar 2025 18:19:40 +0000
asID:                     52455
IP address blocks:        170.233.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl
                          rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ac:15:87:d5:37:05:13:6f:18:04:9d:72:0d:81:82:2e:45:d7:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260F3C977C9EAACF80F67FC71EED2986EACDC496
        Validity
            Not Before: Mar  5 18:14:40 2024 GMT
            Not After : Mar  4 18:19:40 2025 GMT
        Subject: CN=93173C0F29DCC3D69517BB45D6952D03DE1C3012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:98:cd:ae:64:fb:33:84:33:2e:60:3a:48:
                    16:73:13:16:f3:21:58:0c:71:a7:f2:bd:a3:2b:a1:
                    0f:c1:6d:00:71:3f:2d:59:a4:98:2c:a3:da:0f:d2:
                    20:f6:2f:7d:67:85:7b:36:e9:37:dd:d5:0f:c1:16:
                    99:dc:5a:d3:55:73:92:6d:86:e9:2d:e3:c2:3c:9e:
                    24:8a:dc:e3:fd:42:01:0c:0e:b9:e5:45:b3:2a:ac:
                    fb:2b:cf:4d:a9:41:ef:62:c4:0a:e3:43:eb:b8:99:
                    52:0f:41:e0:25:ed:d5:bb:8c:47:58:06:ba:ea:38:
                    0a:ed:bf:13:ca:c3:bd:97:80:65:bb:3e:fc:35:62:
                    60:c3:35:07:d0:2c:ac:a9:a4:c2:1c:05:53:b2:b4:
                    ef:c4:80:ff:48:3b:a6:05:37:e5:c3:0f:dc:ea:3d:
                    b1:54:01:20:e6:43:71:be:e5:3a:93:f3:05:fe:76:
                    bd:e6:e2:7f:f9:21:83:90:0a:a2:14:bd:b9:e7:d6:
                    ce:3a:c7:73:67:04:d1:62:bf:57:ed:c4:85:5b:b7:
                    0c:e0:a8:1a:0d:da:19:eb:5d:fd:f9:61:f4:1f:91:
                    6c:10:fa:7c:a2:ae:5c:e2:7a:82:e9:b1:b8:d6:1f:
                    02:8d:a5:9c:1a:cf:29:83:6f:fc:96:42:22:92:7f:
                    4a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:17:3C:0F:29:DC:C3:D6:95:17:BB:45:D6:95:2D:03:DE:1C:30:12
            X509v3 Authority Key Identifier:
                keyid:26:0F:3C:97:7C:9E:AA:CF:80:F6:7F:C7:1E:ED:29:86:EA:CD:C4:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/260F3C977C9EAACF80F67FC71EED2986EACDC496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/79DC4F865545A109FDBBF411BB6F8ED44591278BA17587DE9E7721E9FC0AE174/0/3137302e3233332e3231362e302f32322d3234203d3e203532343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:01:3b:44:33:9b:ef:08:2d:ea:06:60:2f:07:4e:c3:0f:61:
         d3:b4:f8:84:a3:49:f5:b2:a7:77:e6:5e:ce:e0:52:ce:9e:12:
         5e:4b:80:db:a1:f2:ca:8a:11:60:6a:e9:f3:5b:80:cc:92:7a:
         6f:86:b2:74:2d:30:8a:e6:96:47:3e:b1:7b:fa:8c:d8:aa:9e:
         af:c2:7c:0e:89:c7:d2:7e:ca:1a:05:6b:f1:d3:4f:49:30:1e:
         4c:35:89:85:50:fc:0a:a0:fd:b9:ea:53:50:93:ac:d4:68:f7:
         17:04:ea:18:d6:92:35:ff:e7:80:f2:df:fd:63:92:19:0e:7c:
         e4:c0:7e:ef:7b:16:e2:56:f2:9c:a7:6f:04:fe:f8:33:ea:49:
         99:7e:20:00:78:24:23:6e:d7:40:d2:d4:47:31:c6:17:28:e3:
         1a:b2:0f:de:52:fd:28:f9:39:91:41:5d:9d:f2:48:1d:e6:b2:
         14:9e:42:43:fa:ae:1b:92:2a:e1:db:04:96:60:18:28:97:e7:
         4b:ed:de:ab:c0:6a:bd:6a:00:aa:a1:54:4f:e4:a6:c9:78:99:
         a0:ee:b1:8d:be:8a:c3:d5:9f:e1:a5:cb:2a:fb:1f:87:38:25:
         c8:11:ca:e9:1c:59:84:05:f2:53:5d:b8:2e:19:34:82:c5:4f:
         6c:d4:9c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:48 2024 by rpki-client on console-ams.rpki-client.org