Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa
File:                     3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa (raw, json)
Hash identifier:          wt6oni+GNrQgOnqf3NN03X9cSFdBAcbbe4W9lJfMQLc=
Subject key identifier:   4B:28:32:C1:1A:DD:5E:8B:93:FC:75:85:A9:62:74:FF:EA:32:4A:8F
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       55C5F600C3AADEF9647078D1DA7629807E488B9B
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     27770
IP address blocks:        170.210.128.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c5:f6:00:c3:aa:de:f9:64:70:78:d1:da:76:29:80:7e:48:8b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=4B2832C11ADD5E8B93FC7585A96274FFEA324A8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:09:7c:7b:69:2a:bf:b3:ba:b9:24:9d:31:
                    e0:42:3e:c8:fd:95:2d:d2:0f:26:26:67:73:08:31:
                    5c:5d:c2:17:8d:32:c2:17:06:b8:a5:55:6c:9f:54:
                    f4:36:10:0e:89:1a:bb:02:f2:17:99:a1:cf:92:e8:
                    76:7d:04:97:61:ab:9d:b8:da:dd:65:93:4d:cd:35:
                    63:4b:58:90:f0:97:69:3e:12:dc:84:5d:fb:e8:c6:
                    a2:8c:e7:05:ef:cd:9e:07:b6:67:96:ef:05:b3:67:
                    a7:54:c8:be:d8:9f:4b:d0:03:f5:71:d8:37:b3:49:
                    81:fb:90:8d:bf:a8:e3:24:e0:88:38:6c:ae:ef:cf:
                    8d:ef:3b:9b:1b:52:90:e4:3c:8a:5e:ce:f9:9c:c2:
                    c3:e9:b4:37:3e:bc:0a:37:b2:97:67:cd:e5:8d:6d:
                    f2:4b:d1:51:32:c7:07:15:b5:9c:8a:60:45:02:aa:
                    22:4d:be:06:58:db:10:20:44:27:47:13:d9:8e:5c:
                    84:18:7d:31:ea:9e:db:f0:1d:3b:0d:f9:24:a7:69:
                    d8:42:8f:cc:5f:5d:1d:0d:3e:19:10:81:8c:8e:dc:
                    9f:50:d2:b6:f1:2b:1c:df:43:5e:8a:1c:14:b8:58:
                    e1:73:58:ca:67:f8:71:89:48:af:4e:11:6e:0f:2e:
                    3c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:28:32:C1:1A:DD:5E:8B:93:FC:75:85:A9:62:74:FF:EA:32:4A:8F
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3132382e302f32312d3234203d3e203237373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1d:e0:64:12:53:75:1d:83:f7:27:d2:f9:cc:ae:d3:83:86:08:
         78:91:25:8b:c5:30:3c:3e:35:18:d2:61:3e:ed:e6:a7:44:18:
         ac:6a:f1:2f:0f:44:73:4b:13:ec:fd:02:a6:21:09:b6:67:ae:
         c7:de:23:3e:cb:dc:a4:e5:8b:3f:d4:4c:da:c6:ef:9d:d8:55:
         8d:4a:92:88:70:f7:57:e7:39:76:f4:47:0b:d6:31:a9:0e:2a:
         be:25:16:0c:2d:7b:fe:94:52:f8:e0:2a:d2:41:03:9f:b8:d4:
         5f:df:6b:e0:73:b0:8e:12:9f:74:5f:27:97:6c:b7:5a:64:e5:
         08:92:b7:91:11:65:bc:90:c0:f2:ab:8f:e6:e1:13:61:5b:ff:
         90:7d:cf:ad:dc:79:63:f7:0f:b0:e9:44:60:c1:ec:c6:01:26:
         be:43:e0:46:9f:57:a7:8c:30:8a:1a:b2:9c:65:98:91:bb:b1:
         2c:a0:71:d3:21:4a:28:6a:f5:1e:42:9d:13:90:48:c8:b0:02:
         b6:53:1e:8f:65:1c:08:35:23:f9:55:8d:c3:c3:21:9c:ca:30:
         37:a8:ba:d2:e7:6d:bb:66:41:fa:02:32:76:c7:11:d8:70:9d:
         42:f0:39:ca:25:9b:92:0d:5c:5c:3f:74:1d:5f:e6:d4:f9:b9:
         25:2a:ab:6a
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUVcX2AMOq3vlkcHjR2nYpgH5Ii5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNDAzMDUxODE3NTRaFw0yNTAzMDQxODIyNTRaMDMxMTAvBgNV
BAMTKDRCMjgzMkMxMUFERDVFOEI5M0ZDNzU4NUE5NjI3NEZGRUEzMjRBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/Al8e2kqv7O6uSSdMeBCPsj9
lS3SDyYmZ3MIMVxdwheNMsIXBrilVWyfVPQ2EA6JGrsC8heZoc+S6HZ9BJdhq524
2t1lk03NNWNLWJDwl2k+EtyEXfvoxqKM5wXvzZ4HtmeW7wWzZ6dUyL7Yn0vQA/Vx
2DezSYH7kI2/qOMk4Ig4bK7vz43vO5sbUpDkPIpezvmcwsPptDc+vAo3spdnzeWN
bfJL0VEyxwcVtZyKYEUCqiJNvgZY2xAgRCdHE9mOXIQYfTHqntvwHTsN+SSnadhC
j8xfXR0NPhkQgYyO3J9Q0rbxKxzfQ16KHBS4WOFzWMpn+HGJSK9OEW4PLjwzAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUSygywRrdXouT/HWFqWJ0/+oySo8wHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzMTMyMzgy
ZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM3MzczNzMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqtKA
MA0GCSqGSIb3DQEBCwUAA4IBAQAd4GQSU3Udg/cn0vnMrtODhgh4kSWLxTA8PjUY
0mE+7eanRBisavEvD0RzSxPs/QKmIQm2Z67H3iM+y9yk5Ys/1Ezaxu+d2FWNSpKI
cPdX5zl29EcL1jGpDiq+JRYMLXv+lFL44CrSQQOfuNRf32vgc7COEp90XyeXbLda
ZOUIkreREWW8kMDyq4/m4RNhW/+Qfc+t3Hlj9w+w6URgwezGASa+Q+BGn1enjDCK
GrKcZZiRu7EsoHHTIUooavUeQp0TkEjIsAK2Ux6PZRwINSP5VY3DwyGcyjA3qLrS
5227ZkH6AjJ2xxHYcJ1C8DnKJZuSDVxcP3QdX+bU+bklKqtq
-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org