Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3137302e3235342e3136342e302f32322d3234203d3e203532333732.roa
File:                     3137302e3235342e3136342e302f32322d3234203d3e203532333732.roa (raw, json)
Hash identifier:          9pNAPmouJAmZsdlVyHRXV00xsJxcbKyu+4aIzqMxEQA=
Subject key identifier:   70:D5:67:90:7E:52:0C:73:6D:C2:BF:73:7A:F8:D5:BF:78:3B:21:56
Certificate issuer:       /CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
Certificate serial:       34220CF580E8CAA50140865621CF1F3562510F0D
Authority key identifier: 66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3137302e3235342e3136342e302f32322d3234203d3e203532333732.roa
Signing time:             Wed 24 Jul 2024 15:15:00 +0000
ROA not before:           Wed 24 Jul 2024 15:10:00 +0000
ROA not after:            Wed 23 Jul 2025 15:15:00 +0000
asID:                     52372
IP address blocks:        170.254.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:22:0c:f5:80:e8:ca:a5:01:40:86:56:21:cf:1f:35:62:51:0f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=665B62B0D0F1D058A69B30EDFDD50B808A3A91EE
        Validity
            Not Before: Jul 24 15:10:00 2024 GMT
            Not After : Jul 23 15:15:00 2025 GMT
        Subject: CN=70D567907E520C736DC2BF737AF8D5BF783B2156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:8d:78:32:f1:2b:1b:f1:bd:6a:be:99:80:
                    3a:39:7d:51:b3:18:81:20:ea:6e:21:29:27:02:79:
                    b3:2e:dc:35:92:29:d2:f3:0a:3f:fd:7e:e5:57:24:
                    e9:92:82:92:f7:af:74:99:e3:f3:a0:6d:f1:79:0c:
                    00:ef:9d:5f:8d:10:25:fb:23:a9:18:4f:96:c8:84:
                    ba:22:27:5c:98:a8:24:53:47:93:f5:df:cc:22:52:
                    c4:55:79:c0:2a:c4:ca:a6:1a:8a:ff:0b:b4:a4:a2:
                    23:b8:4b:76:18:08:75:82:35:16:e6:63:81:3c:2a:
                    f3:15:34:2a:3d:d5:50:43:fa:8d:84:04:ad:90:51:
                    48:26:19:46:4f:e6:c5:13:f9:7b:b3:8a:68:aa:d0:
                    19:3d:77:c8:f1:6e:23:d3:7c:6e:3c:3b:86:62:38:
                    14:36:0e:05:fd:93:a8:5c:53:4d:6b:8e:8f:d8:60:
                    13:40:3d:f3:fe:97:8c:9c:da:bd:66:a6:4e:ff:1d:
                    ca:3f:02:a7:b0:e6:6f:de:30:b5:a8:14:84:e8:4b:
                    14:3a:58:5d:01:9c:fd:c4:2b:bc:60:df:d1:47:96:
                    5b:be:d0:1b:80:18:c0:52:1d:1a:a4:5c:57:e7:57:
                    7f:fb:0c:5d:5b:81:45:d9:d7:17:c7:fd:5c:7d:4f:
                    6b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:D5:67:90:7E:52:0C:73:6D:C2:BF:73:7A:F8:D5:BF:78:3B:21:56
            X509v3 Authority Key Identifier:
                keyid:66:5B:62:B0:D0:F1:D0:58:A6:9B:30:ED:FD:D5:0B:80:8A:3A:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/665B62B0D0F1D058A69B30EDFDD50B808A3A91EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8C5A7D5CFA59F52E6659DFF137630D20E6DD547F715E5C04A4D23E492C204212/0/3137302e3235342e3136342e302f32322d3234203d3e203532333732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:fe:bc:1b:72:87:1e:51:8e:93:63:f0:8e:99:b2:8a:52:45:
         fc:18:cc:07:2b:74:c1:94:95:80:ea:bd:5b:77:af:9f:9a:2a:
         f0:1f:aa:f6:bb:bd:86:7f:20:cb:67:c0:7d:fc:4d:3f:7e:fc:
         51:99:7b:ce:c8:85:e6:68:70:19:4e:69:3a:c1:f0:ae:4c:9f:
         16:fa:7d:ba:2a:39:c0:90:f7:7f:56:10:2d:56:4b:e3:64:f2:
         d6:2b:be:58:ec:bf:bc:2e:5f:b2:95:1e:80:f6:8c:76:8f:33:
         0b:d6:3a:8c:38:62:a1:10:ce:7f:61:e5:30:ba:2d:6d:60:84:
         3f:19:3f:99:94:cc:99:c1:22:5c:c1:53:29:49:66:23:fb:12:
         fa:46:90:56:86:fb:26:d4:3f:19:11:c8:18:14:69:3a:ce:30:
         c2:3e:97:db:1e:25:e3:37:e4:01:4b:e4:af:15:a4:42:e2:4e:
         6b:5e:2b:05:09:77:8f:82:3f:de:e6:70:13:e5:81:97:8c:a6:
         30:39:e6:40:b9:c9:7e:de:e9:b6:05:6b:9a:67:f1:56:37:b6:
         3f:85:5c:29:69:92:52:97:64:a2:29:8e:4a:dd:d0:73:58:1a:
         29:54:71:cf:75:76:9e:67:45:e3:29:04:f1:0e:6a:20:57:b0:
         ff:03:6b:2c
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNCIM9YDoyqUBQIZWIc8fNWJRDw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY1QjYyQjBEMEYxRDA1OEE2OUIzMEVERkRENTBCODA4
QTNBOTFFRTAeFw0yNDA3MjQxNTEwMDBaFw0yNTA3MjMxNTE1MDBaMDMxMTAvBgNV
BAMTKDcwRDU2NzkwN0U1MjBDNzM2REMyQkY3MzdBRjhENUJGNzgzQjIxNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0To14MvErG/G9ar6ZgDo5fVGz
GIEg6m4hKScCebMu3DWSKdLzCj/9fuVXJOmSgpL3r3SZ4/OgbfF5DADvnV+NECX7
I6kYT5bIhLoiJ1yYqCRTR5P138wiUsRVecAqxMqmGor/C7SkoiO4S3YYCHWCNRbm
Y4E8KvMVNCo91VBD+o2EBK2QUUgmGUZP5sUT+Xuzimiq0Bk9d8jxbiPTfG48O4Zi
OBQ2DgX9k6hcU01rjo/YYBNAPfP+l4yc2r1mpk7/Hco/Aqew5m/eMLWoFIToSxQ6
WF0BnP3EK7xg39FHllu+0BuAGMBSHRqkXFfnV3/7DF1bgUXZ1xfH/Vx9T2spAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUcNVnkH5SDHNtwr9zevjVv3g7IVYwHwYDVR0j
BBgwFoAUZltisNDx0FimmzDt/dULgIo6ke4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84QzVBN0Q1Q0ZBNTlGNTJFNjY1OURGRjEzNzYzMEQyMEU2
REQ1NDdGNzE1RTVDMDRBNEQyM0U0OTJDMjA0MjEyLzAvNjY1QjYyQjBEMEYxRDA1
OEE2OUIzMEVERkRENTBCODA4QTNBOTFFRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC82NjVCNjJCMEQwRjFEMDU4QTY5
QjMwRURGREQ1MEI4MDhBM0E5MUVFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEM1QTdENUNGQTU5RjUyRTY2NTlERkYxMzc2MzBEMjBFNkRENTQ3Rjcx
NUU1QzA0QTREMjNFNDkyQzIwNDIxMi8wLzMxMzczMDJlMzIzNTM0MmUzMTM2MzQy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNTMyMzMzNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqv6k
MA0GCSqGSIb3DQEBCwUAA4IBAQCB/rwbcoceUY6TY/COmbKKUkX8GMwHK3TBlJWA
6r1bd6+fmirwH6r2u72GfyDLZ8B9/E0/fvxRmXvOyIXmaHAZTmk6wfCuTJ8W+n26
KjnAkPd/VhAtVkvjZPLWK75Y7L+8Ll+ylR6A9ox2jzML1jqMOGKhEM5/YeUwui1t
YIQ/GT+ZlMyZwSJcwVMpSWYj+xL6RpBWhvsm1D8ZEcgYFGk6zjDCPpfbHiXjN+QB
S+SvFaRC4k5rXisFCXePgj/e5nAT5YGXjKYwOeZAucl+3um2BWuaZ/FWN7Y/hVwp
aZJSl2SiKY5K3dBzWBopVHHPdXaeZ0XjKQTxDmogV7D/A2ss
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:47:53 2024 by rpki-client on console-fra.rpki-client.org