Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa
File:                     3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa (raw, json)
Hash identifier:          cqjygboLLxnEjUvh3/paXpBL4+CuKVekOgdmnyZuyWs=
Subject key identifier:   1E:5C:0F:41:4E:36:EE:E6:CE:7C:91:5A:36:BA:EB:CB:79:14:7D:13
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       7F8EA3A86B6C4461786327D558B26163B79751FC
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa
Signing time:             Tue 05 Mar 2024 17:54:58 +0000
ROA not before:           Tue 05 Mar 2024 17:49:58 +0000
ROA not after:            Tue 04 Mar 2025 17:54:58 +0000
asID:                     264801
IP address blocks:        170.238.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8e:a3:a8:6b:6c:44:61:78:63:27:d5:58:b2:61:63:b7:97:51:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: Mar  5 17:49:58 2024 GMT
            Not After : Mar  4 17:54:58 2025 GMT
        Subject: CN=1E5C0F414E36EEE6CE7C915A36BAEBCB79147D13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b6:83:f1:61:b3:ba:c6:99:b8:b1:fa:56:9b:
                    d2:10:b1:8b:0c:43:5e:62:f6:7c:cf:c8:7b:96:d1:
                    49:82:94:39:ab:da:a3:f2:68:e5:76:5d:b0:da:ea:
                    8a:c0:37:55:e8:0f:6b:d3:dc:86:d8:fe:0c:f1:13:
                    93:ad:b4:c3:8f:2c:3c:8b:a4:28:2b:54:29:85:5a:
                    5b:53:3d:c9:f3:4b:6c:07:69:15:d4:89:8d:e2:71:
                    7e:4f:2e:e8:09:9e:6b:f3:c5:6f:fb:29:cc:c1:cc:
                    d2:ff:54:ac:87:c4:27:50:d0:62:a5:2a:da:91:8b:
                    39:bf:f8:97:cc:5b:1e:e5:7e:e8:09:3f:48:39:2d:
                    75:21:da:af:54:a3:13:d5:d7:6a:73:d9:07:9e:87:
                    98:ff:d9:64:ac:1a:f1:3d:56:53:5a:a1:43:c9:af:
                    c1:35:bb:8c:70:61:ce:5d:d7:7b:b8:54:92:5e:7f:
                    d5:f3:f7:7c:74:84:7e:43:4b:07:f2:61:32:a9:3b:
                    8d:32:42:75:1b:e7:29:e7:ce:72:35:a6:e3:91:02:
                    d0:8f:0e:98:9e:ff:d6:d2:65:70:2b:15:ad:49:89:
                    f1:b1:58:83:5d:d6:f0:89:90:b2:fb:b0:4d:a9:3e:
                    fb:23:34:61:db:4f:57:a7:36:26:f9:60:83:65:5a:
                    3f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:5C:0F:41:4E:36:EE:E6:CE:7C:91:5A:36:BA:EB:CB:79:14:7D:13
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137302e302f32332d3233203d3e20323634383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:65:bf:89:2d:e2:bc:9c:19:3f:0f:11:52:00:43:e9:35:5e:
         3d:64:6e:6f:f4:47:df:8e:09:ab:12:0c:b0:1d:68:eb:cf:d4:
         4a:65:b2:7e:60:5d:0b:59:53:88:23:19:23:ef:08:69:00:e6:
         39:ce:d4:2a:08:33:fe:40:a2:61:72:20:e3:f5:f4:fb:fe:e5:
         63:bd:cb:bc:a2:d0:18:07:2a:b6:d0:d3:14:31:cf:5c:02:78:
         c4:46:9e:e0:31:7f:a0:f2:e7:57:72:29:51:f7:59:d4:09:e2:
         90:15:70:dc:3f:c3:2a:34:3f:11:e6:b0:86:ff:bb:59:f7:19:
         70:d3:10:22:d4:72:3f:74:49:af:d2:9e:59:62:02:9a:40:d6:
         84:55:22:1f:e7:54:b5:a4:5a:f4:56:62:d7:52:e7:45:c4:79:
         b4:fe:22:ad:0a:37:52:e9:f1:67:7f:6e:31:d2:16:94:ea:3e:
         aa:f9:29:4a:ce:60:f2:42:61:ae:1b:66:32:7a:0d:b4:50:ae:
         14:f6:c7:d6:f4:13:9d:e8:0a:e4:b9:54:80:0c:21:61:56:20:
         5e:1c:a1:a7:d1:68:f0:ba:10:22:7a:eb:13:88:54:85:28:6b:
         c8:62:da:89:ea:9e:f8:25:34:d1:90:4f:76:ed:2c:63:1c:52:
         24:7a:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:17 2024 by rpki-client on console-ams.rpki-client.org