Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132302e302f32312d3234203d3e203631343736.roa
File:                     3137302e3231302e3132302e302f32312d3234203d3e203631343736.roa (raw, json)
Hash identifier:          umX1MOD5OE6NMrtAzVbr5TcfFKA7BIteq7FETpavvz4=
Subject key identifier:   02:EE:DB:C3:21:55:4A:95:F6:96:24:00:EA:08:47:73:E2:07:18:7D
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       353E4F623CCE0B1C60EC584A2752A7AFC38CB243
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132302e302f32312d3234203d3e203631343736.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     61476
IP address blocks:        170.210.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:3e:4f:62:3c:ce:0b:1c:60:ec:58:4a:27:52:a7:af:c3:8c:b2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=02EEDBC321554A95F6962400EA084773E207187D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:ea:8d:79:06:41:a8:69:f6:b3:61:c2:fb:
                    e9:b9:59:e3:80:81:8f:96:2e:81:b5:e7:4e:ee:22:
                    b4:07:58:86:cd:46:e2:3c:f3:a9:51:29:fe:2e:bb:
                    fa:cb:2a:1f:56:0c:64:d4:94:83:4d:a7:c9:05:2d:
                    c3:b9:73:84:0f:24:8d:f0:0e:18:ba:d4:cf:32:53:
                    75:68:7d:de:1a:5e:29:ee:1a:01:48:15:fd:fc:20:
                    92:00:b6:1f:c5:a4:85:0e:a6:66:fe:1d:86:1d:a1:
                    9a:b9:3f:a9:df:43:fa:73:8f:6e:87:f8:bb:df:df:
                    6e:8c:eb:58:3e:0c:0a:3f:74:56:1a:c0:05:72:e7:
                    27:82:f5:1f:ce:90:d5:22:41:6e:e0:81:0e:cc:6c:
                    44:35:f3:ee:d1:e7:f7:a0:21:36:33:c5:39:13:08:
                    fa:2c:53:a8:49:9f:aa:01:9e:b6:fb:3d:17:ef:d4:
                    3f:86:7a:6d:d3:ae:44:07:64:dd:c8:44:c9:48:96:
                    07:4c:85:6a:a2:20:d6:99:e6:1d:15:11:5b:81:ce:
                    68:d2:16:7a:6d:0a:e8:cd:92:76:55:2c:58:99:70:
                    bd:b8:ca:c4:bb:36:ce:a0:89:92:bd:2a:c6:d8:ff:
                    a6:57:58:04:78:43:5c:51:cc:08:9b:1c:dd:34:11:
                    fa:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:DB:C3:21:55:4A:95:F6:96:24:00:EA:08:47:73:E2:07:18:7D
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132302e302f32312d3234203d3e203631343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:eb:11:f0:8f:dd:32:7a:9b:30:ac:be:77:3b:b4:28:21:1e:
         d9:8b:1f:39:72:cd:a3:f6:92:66:19:0d:1b:5a:2c:a8:eb:86:
         65:a1:f4:7b:f5:96:c1:8b:69:15:44:bb:ac:cc:79:fe:10:9c:
         f5:fe:73:9c:4e:bc:5e:2d:25:6a:c6:04:81:ae:8d:dd:3b:16:
         e8:10:de:ed:b5:48:c7:f6:10:0e:82:a2:47:19:60:10:41:09:
         55:9a:db:3f:6f:c7:40:b3:a6:7f:2f:89:80:69:0d:32:22:b3:
         a0:12:7a:1e:fd:2a:09:73:37:1c:bb:6c:9b:3f:ce:a2:12:8e:
         3d:32:40:19:02:4e:04:97:67:af:fb:62:d1:57:90:f0:7d:85:
         88:c3:0d:e9:5b:93:73:92:c6:ad:c9:23:08:0d:8b:58:e0:f2:
         96:25:64:64:dd:0f:05:ec:17:3e:55:a5:df:e5:31:43:e1:7d:
         58:aa:ca:f3:8a:6a:28:8d:82:85:0f:9b:91:be:22:d2:fc:bf:
         29:f9:55:87:ae:04:b0:5e:55:18:a3:70:f9:69:9f:e9:d6:d3:
         e7:fd:c0:53:96:13:84:a0:20:9d:09:2c:74:7a:e9:74:38:56:
         7d:4a:65:21:d0:c7:19:e7:f0:d3:fc:7d:bb:a5:87:e6:5d:54:
         b1:bc:53:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:25 2024 by rpki-client on console-ams.rpki-client.org