Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa
File:                     3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa (raw, json)
Hash identifier:          Ar/Em/6v0wAke6z/TaeXyZJFRaYUcaheymI+aotGlSc=
Subject key identifier:   9B:95:BB:17:E2:D4:D4:B4:47:B4:13:77:DA:1D:D8:40:42:AD:E8:92
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       19E73D632E0C2F4EF280AFBE12B1769E09B8B17D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa
Signing time:             Tue 05 Mar 2024 18:22:52 +0000
ROA not before:           Tue 05 Mar 2024 18:17:52 +0000
ROA not after:            Tue 04 Mar 2025 18:22:52 +0000
asID:                     61496
IP address blocks:        170.210.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e7:3d:63:2e:0c:2f:4e:f2:80:af:be:12:b1:76:9e:09:b8:b1:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:52 2024 GMT
            Not After : Mar  4 18:22:52 2025 GMT
        Subject: CN=9B95BB17E2D4D4B447B41377DA1DD84042ADE892
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:26:ff:dc:7e:3e:0a:04:30:9b:48:45:07:07:
                    1c:df:79:fb:61:24:b4:82:bd:3e:15:6b:eb:08:9c:
                    4f:6f:2a:53:22:84:f7:3f:83:e5:3f:ed:84:cc:af:
                    5a:72:9f:2d:41:27:be:61:11:56:6a:17:ac:e3:c6:
                    e6:29:ba:3d:44:12:da:9d:f8:65:69:61:9c:ba:93:
                    ee:be:42:14:17:31:99:36:93:c3:aa:5c:3b:9d:8b:
                    9b:43:17:9e:26:c5:99:1c:ac:a5:40:26:68:fd:fa:
                    c6:37:cd:69:50:ff:af:82:ee:2d:20:d6:38:0f:c7:
                    73:1a:31:ec:9b:6c:58:01:c7:e5:27:9e:68:f0:cd:
                    53:ef:4a:3e:75:bf:5c:5e:5e:ec:e1:0b:00:07:e0:
                    01:22:49:91:e4:eb:eb:a3:cc:fb:a3:4c:a1:d1:76:
                    23:a3:2f:c2:66:db:3d:07:17:b0:fd:10:5d:11:4a:
                    74:d3:6c:a9:de:fb:f1:da:d5:31:c8:9e:3b:d9:ac:
                    4e:d0:77:15:ae:ab:f6:c9:04:40:fd:74:84:26:d8:
                    6e:fe:84:0e:de:91:dc:46:5d:66:14:ff:e7:94:2c:
                    39:b9:2b:2e:5c:5b:b7:e8:63:c5:d5:59:fd:ac:ae:
                    d5:e6:2d:b6:0a:3c:98:52:cf:b6:f7:b5:f7:91:63:
                    08:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:95:BB:17:E2:D4:D4:B4:47:B4:13:77:DA:1D:D8:40:42:AD:E8:92
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3131322e302f32312d3234203d3e203631343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         77:73:cb:40:ea:09:61:ab:df:40:cb:ea:51:2d:a1:d7:35:b1:
         f6:64:61:27:d1:a2:8d:56:f6:28:23:10:d6:7e:e8:54:f0:bc:
         66:ff:b4:eb:9e:84:9b:b2:a3:c3:fd:aa:d6:9d:f6:0a:d8:a6:
         8e:19:aa:e6:c5:ca:af:5f:65:f7:a8:cf:a9:98:83:fc:a5:c0:
         38:c5:19:b2:c0:e3:99:bf:3f:0b:cb:ce:ab:70:98:49:fe:57:
         57:d6:5e:82:2a:e1:66:17:be:fc:a7:85:4f:dc:cb:c4:35:d1:
         27:36:16:1b:4b:e2:e3:0c:b4:4e:b4:7c:24:18:32:26:4c:15:
         c8:f2:fa:6d:1b:4d:ee:ae:11:4e:fb:10:5d:1a:e0:bf:20:df:
         da:a2:47:1d:45:4c:5e:b3:6c:b8:c2:27:c2:4e:91:43:e3:ec:
         ca:2e:df:71:d1:43:27:f5:4c:d4:5d:7b:c5:5d:97:01:b3:fc:
         21:1d:8f:21:66:70:1e:ef:c7:b1:f3:02:fd:90:1d:b9:bd:3e:
         4a:56:bd:ed:b8:70:c3:2c:b3:d8:69:48:44:95:e7:7a:ce:47:
         7f:3c:4b:f2:f1:08:ce:cd:a7:a2:bf:ef:78:b8:5c:dc:5a:53:
         da:7f:77:c4:4e:0b:5e:5c:51:68:6b:6d:2a:01:54:dd:ec:89:
         5c:30:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:38:05 2024 by rpki-client on console-fra.rpki-client.org