Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20323634383031.roa
File:                     3137302e3233382e3137312e302f32342d3234203d3e20323634383031.roa (raw, json)
Hash identifier:          EIO+fqnnfO3Colc50FNJ+3wb2m5Aalrloyvt0U925kc=
Subject key identifier:   56:3D:C2:6F:8E:3B:66:54:89:C3:0A:96:6D:35:E4:D1:97:8F:CF:13
Certificate issuer:       /CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
Certificate serial:       3E617149E3F5458F5548C4ED3972F3F1A81AFE1C
Authority key identifier: BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20323634383031.roa
Signing time:             Tue 05 Mar 2024 17:54:57 +0000
ROA not before:           Tue 05 Mar 2024 17:49:57 +0000
ROA not after:            Tue 04 Mar 2025 17:54:57 +0000
asID:                     264801
IP address blocks:        170.238.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:61:71:49:e3:f5:45:8f:55:48:c4:ed:39:72:f3:f1:a8:1a:fe:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD95557260FD7A36E6338BA61ED0BAA8DB4183F8
        Validity
            Not Before: Mar  5 17:49:57 2024 GMT
            Not After : Mar  4 17:54:57 2025 GMT
        Subject: CN=563DC26F8E3B665489C30A966D35E4D1978FCF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:19:dc:81:8e:81:b3:ca:14:e5:22:a7:ef:7a:
                    1f:d0:06:83:af:6a:0c:be:f8:ed:22:f7:e4:49:ab:
                    18:4a:38:8b:08:c8:44:d6:1e:01:70:49:20:b0:36:
                    7b:25:cc:62:14:9f:5a:00:69:53:ba:39:d5:e0:40:
                    4e:d5:73:3e:85:0b:ef:c9:b7:42:02:a4:65:2d:aa:
                    c5:ea:d5:95:b2:fd:72:28:86:66:3c:cc:2f:e6:5f:
                    8f:ce:42:a3:06:2f:61:0b:d6:84:c4:8c:72:32:11:
                    60:0b:28:55:15:ed:74:f2:70:a3:9e:39:b9:f7:6a:
                    f6:f0:c7:7b:d6:e0:85:bc:fd:b6:c3:0e:f9:20:a3:
                    5d:bb:d7:31:ac:24:f1:5b:a8:ed:a7:01:50:00:51:
                    ad:22:e0:5f:fe:69:50:e1:1e:00:13:d1:48:b0:53:
                    7b:f6:f3:26:fd:2f:74:4a:a3:b1:f4:69:96:47:14:
                    b4:a1:af:6b:e9:28:b7:55:03:16:df:81:84:64:a4:
                    ee:dc:a1:d3:e0:a6:33:f3:2f:b5:86:13:96:8a:e2:
                    d7:1d:f0:0c:25:81:42:87:83:43:67:5f:37:8a:3e:
                    fd:66:4d:37:2b:c1:46:30:73:9c:b8:48:9b:cb:c4:
                    5d:9f:01:46:d5:8f:7a:1e:46:fd:e4:0c:f8:6e:05:
                    bf:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3D:C2:6F:8E:3B:66:54:89:C3:0A:96:6D:35:E4:D1:97:8F:CF:13
            X509v3 Authority Key Identifier:
                keyid:BD:95:55:72:60:FD:7A:36:E6:33:8B:A6:1E:D0:BA:A8:DB:41:83:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD95557260FD7A36E6338BA61ED0BAA8DB4183F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E22BF8AC36F9B799BC2806417A17393F770E8043AF00DD68BD22E468A26E1AD/0/3137302e3233382e3137312e302f32342d3234203d3e20323634383031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:4a:55:50:5c:e2:33:9a:39:fe:d7:bd:e0:fd:fd:8b:08:
         af:52:24:9d:5c:88:67:4c:fe:a4:20:0e:6f:14:c5:f7:a8:29:
         0a:5a:96:94:18:78:fa:19:de:19:66:dd:91:f8:49:6f:d8:66:
         2e:1b:c7:fd:72:dd:ba:bd:92:64:44:6c:e8:e2:02:9d:33:31:
         b3:68:d3:cb:63:51:2f:07:71:1b:66:47:c8:2f:be:3f:d9:69:
         2c:8c:b4:c8:ea:5f:80:5f:ec:3c:57:d5:55:4d:d8:c3:f4:11:
         9e:62:f9:70:5d:42:01:59:a0:2b:e4:f1:cf:d3:86:05:7f:c7:
         5c:02:40:4f:f4:26:e2:3d:65:ba:34:85:b3:14:ec:fa:06:26:
         52:4b:3a:5b:b3:ed:c4:6d:d7:e9:90:4b:d6:6c:e5:4b:b7:fb:
         d9:20:a9:71:f5:c6:97:c4:1a:fb:a5:ff:d3:f4:a9:d8:9a:59:
         ca:10:68:a1:83:40:53:59:0b:fd:9f:7a:42:04:8f:c2:04:bc:
         36:c8:f4:47:5d:c8:5a:8b:5c:56:f6:69:23:2a:88:e7:c0:f5:
         42:79:78:dd:75:18:f1:d8:80:42:61:3d:1b:18:db:1d:a5:44:
         b8:72:11:74:da:fa:80:9d:5f:84:eb:97:1d:ef:12:06:b5:46:
         c1:5e:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org