Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa
File:                     3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa (raw, json)
Hash identifier:          0/jgwZo5qDss89jJMNbvlKUz6KVTDn4XPeTu61uyblI=
Subject key identifier:   FA:4C:99:5C:7F:83:D8:1E:38:46:36:42:2E:60:53:95:01:7F:05:45
Certificate issuer:       /CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
Certificate serial:       7CB9C2ADB21603A9FE4EA926A3228FE944E08D06
Authority key identifier: 5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa
Signing time:             Tue 05 Mar 2024 18:07:55 +0000
ROA not before:           Tue 05 Mar 2024 18:02:55 +0000
ROA not after:            Tue 04 Mar 2025 18:07:55 +0000
asID:                     267858
IP address blocks:        170.244.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl
                          rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:b9:c2:ad:b2:16:03:a9:fe:4e:a9:26:a3:22:8f:e9:44:e0:8d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FAC4FA89218203214573AEA6EC449BC4CFD9640
        Validity
            Not Before: Mar  5 18:02:55 2024 GMT
            Not After : Mar  4 18:07:55 2025 GMT
        Subject: CN=FA4C995C7F83D81E384636422E605395017F0545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b3:10:48:12:77:e1:a3:95:d5:fb:57:03:40:
                    32:89:a5:d2:fd:cf:2a:d1:5e:08:27:03:3d:4a:f2:
                    57:57:c6:0c:10:64:a8:59:05:31:65:35:59:53:96:
                    f3:3e:01:01:69:cf:e8:f5:5b:ba:2f:1a:26:02:43:
                    6e:42:ca:7d:41:88:16:f6:77:03:65:22:91:2f:c3:
                    2e:d6:25:2b:6f:19:01:be:83:ab:a3:65:4a:39:6c:
                    99:1c:ff:1b:81:b2:51:f3:40:32:42:7d:c3:27:54:
                    06:81:de:79:56:33:c9:d9:bd:65:04:f9:f3:aa:0b:
                    58:b4:67:44:d5:93:af:2d:ee:84:45:bb:bd:47:de:
                    fa:ba:d8:86:a4:65:33:1d:b2:cc:9b:21:ec:89:0f:
                    7f:95:2c:eb:9b:e1:5c:3f:8d:e7:42:27:4e:65:f3:
                    b1:e7:31:15:28:ca:03:c8:f3:d1:94:bf:d9:25:a1:
                    a3:6c:ba:02:f0:0c:cf:35:46:0f:7b:e9:4b:23:ce:
                    01:28:fd:d9:94:d9:ce:46:49:d5:54:4e:55:48:74:
                    d5:2f:4c:27:a7:8c:86:09:e6:2c:dd:b6:f2:60:e8:
                    f3:44:f0:ba:3e:fb:36:b7:94:fa:b1:f3:d7:b4:e6:
                    39:52:b9:4c:72:69:a7:3b:d9:ff:47:c0:8c:a1:85:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4C:99:5C:7F:83:D8:1E:38:46:36:42:2E:60:53:95:01:7F:05:45
            X509v3 Authority Key Identifier:
                keyid:5F:AC:4F:A8:92:18:20:32:14:57:3A:EA:6E:C4:49:BC:4C:FD:96:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5FAC4FA89218203214573AEA6EC449BC4CFD9640.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/843FB03203AC44517EFC4DC748A4F46090697FAD2B3624CD1D66DA1FC4EB29CA/0/3137302e3234342e3137312e302f32342d3234203d3e20323637383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:5e:c9:87:59:84:c3:7c:57:80:b5:5f:59:1c:10:7a:81:
         7d:c8:15:1e:e4:40:f1:92:03:04:69:6b:31:cc:34:25:04:c4:
         16:39:2d:de:a1:11:eb:54:a1:52:e3:fd:ea:90:74:a8:a1:da:
         79:17:c1:bb:ba:5f:e3:7d:2d:a0:8b:19:6d:18:fb:97:e4:56:
         58:c6:6a:b1:31:b3:df:8f:63:09:a7:f3:c1:d8:0a:53:3a:63:
         5a:c6:75:40:f4:97:da:be:44:5d:de:a0:32:4a:e0:5f:25:e2:
         39:70:bf:24:ab:8b:62:db:85:3c:83:51:06:18:3c:fb:2d:67:
         01:fd:f5:40:ca:09:f4:23:15:2e:57:9c:23:10:12:38:c2:7f:
         7b:38:48:80:33:91:8f:13:ea:8c:a0:50:8f:c9:b9:bc:1c:e5:
         94:a5:da:73:ba:d0:ad:ce:12:4f:43:2e:ba:65:5e:c1:b7:12:
         92:1f:2e:9e:c7:c4:c1:4f:96:85:f2:93:ae:89:2c:77:e2:ec:
         82:1f:79:0a:85:e9:3c:e7:80:3d:87:a6:fe:48:62:bb:72:57:
         f1:e1:e2:d6:74:92:5f:fa:0d:be:5d:c9:8d:a7:72:89:9d:7d:
         78:09:5b:de:a7:51:db:46:ab:d0:ae:1d:7f:ec:b4:52:46:00:
         44:dc:8e:83
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfLnCrbIWA6n+TqkmoyKP6UTgjQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBQzRGQTg5MjE4MjAzMjE0NTczQUVBNkVDNDQ5QkM0
Q0ZEOTY0MDAeFw0yNDAzMDUxODAyNTVaFw0yNTAzMDQxODA3NTVaMDMxMTAvBgNV
BAMTKEZBNEM5OTVDN0Y4M0Q4MUUzODQ2MzY0MjJFNjA1Mzk1MDE3RjA1NDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsxBIEnfho5XV+1cDQDKJpdL9
zyrRXggnAz1K8ldXxgwQZKhZBTFlNVlTlvM+AQFpz+j1W7ovGiYCQ25Cyn1BiBb2
dwNlIpEvwy7WJStvGQG+g6ujZUo5bJkc/xuBslHzQDJCfcMnVAaB3nlWM8nZvWUE
+fOqC1i0Z0TVk68t7oRFu71H3vq62IakZTMdssybIeyJD3+VLOub4Vw/jedCJ05l
87HnMRUoygPI89GUv9kloaNsugLwDM81Rg976UsjzgEo/dmU2c5GSdVUTlVIdNUv
TCenjIYJ5izdtvJg6PNE8Lo++za3lPqx89e05jlSuUxyaac72f9HwIyhhYsdAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU+kyZXH+D2B44RjZCLmBTlQF/BUUwHwYDVR0j
BBgwFoAUX6xPqJIYIDIUVzrqbsRJvEz9lkAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84NDNGQjAzMjAzQUM0NDUxN0VGQzREQzc0OEE0RjQ2MDkw
Njk3RkFEMkIzNjI0Q0QxRDY2REExRkM0RUIyOUNBLzAvNUZBQzRGQTg5MjE4MjAz
MjE0NTczQUVBNkVDNDQ5QkM0Q0ZEOTY0MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81RkFDNEZBODkyMTgyMDMyMTQ1
NzNBRUE2RUM0NDlCQzRDRkQ5NjQwLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvODQzRkIwMzIwM0FDNDQ1MTdFRkM0REM3NDhBNEY0NjA5MDY5N0ZBRDJC
MzYyNENEMUQ2NkRBMUZDNEVCMjlDQS8wLzMxMzczMDJlMzIzNDM0MmUzMTM3MzEy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzczODM1Mzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACq
9KswDQYJKoZIhvcNAQELBQADggEBALoqXsmHWYTDfFeAtV9ZHBB6gX3IFR7kQPGS
AwRpazHMNCUExBY5Ld6hEetUoVLj/eqQdKih2nkXwbu6X+N9LaCLGW0Y+5fkVljG
arExs9+PYwmn88HYClM6Y1rGdUD0l9q+RF3eoDJK4F8l4jlwvySri2LbhTyDUQYY
PPstZwH99UDKCfQjFS5XnCMQEjjCf3s4SIAzkY8T6oygUI/Jubwc5ZSl2nO60K3O
Ek9DLrplXsG3EpIfLp7HxMFPloXyk66JLHfi7IIfeQqF6TzngD2Hpv5IYrtyV/Hh
4tZ0kl/6Db5dyY2ncomdfXgJW96nUdtGq9CuHX/stFJGAETcjoM=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:22 2024 by rpki-client on console-ams.rpki-client.org