Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa
File:                     3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa (raw, json)
Hash identifier:          qb0gNb1C9PbYIwLitZJcTqyzM8ncojc2UQthFvlPwBo=
Subject key identifier:   E1:54:32:F2:F9:09:A8:AA:37:39:B1:F8:DC:68:F3:9C:35:70:F2:16
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       4EC7DC8475B2D070E2FC7686896EE8C75D09232F
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa
Signing time:             Tue 05 Mar 2024 18:22:54 +0000
ROA not before:           Tue 05 Mar 2024 18:17:54 +0000
ROA not after:            Tue 04 Mar 2025 18:22:54 +0000
asID:                     28107
IP address blocks:        170.210.160.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c7:dc:84:75:b2:d0:70:e2:fc:76:86:89:6e:e8:c7:5d:09:23:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:54 2024 GMT
            Not After : Mar  4 18:22:54 2025 GMT
        Subject: CN=E15432F2F909A8AA3739B1F8DC68F39C3570F216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7a:d9:1c:bc:bf:4f:b0:86:e4:e6:6d:7d:ed:
                    bb:a1:98:f7:c1:ac:24:27:2c:a6:e4:e8:e6:4b:ff:
                    f1:ca:97:c1:fc:35:de:3c:35:33:ed:a8:1c:7e:c9:
                    75:06:bd:71:7e:53:85:b6:e8:13:43:41:d7:f5:d5:
                    0d:f9:45:f0:a4:3b:66:08:88:1b:5f:fb:2d:c8:54:
                    6e:56:b5:47:6a:95:49:d5:9a:5b:d4:91:47:c0:29:
                    4d:26:b1:1b:70:0f:e6:f3:17:b8:8b:ca:5c:1d:16:
                    7b:bd:c1:f2:af:2d:80:3a:b7:9a:fe:48:34:00:69:
                    8d:09:e0:9a:fc:5d:7c:f6:0e:af:08:75:17:bd:c6:
                    a5:43:2d:62:42:1c:ef:9d:6c:03:3a:04:c5:da:00:
                    a9:09:f9:44:ad:b5:18:ad:23:16:b3:37:75:0e:65:
                    86:54:d1:50:27:15:25:f5:24:0e:24:c1:e1:40:bd:
                    2c:a2:c8:f5:1b:53:45:6b:6c:5f:dd:fc:2e:bc:61:
                    84:cd:ef:f5:34:76:19:0b:6a:38:bd:b4:a0:7b:4b:
                    f2:03:23:d7:54:5f:dc:42:6d:4c:ec:8b:79:cb:42:
                    44:37:0c:16:0c:d5:27:85:fb:1f:25:4b:26:37:80:
                    ab:61:7f:fa:6e:00:03:13:b1:94:1a:ff:a1:2c:f4:
                    1a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:54:32:F2:F9:09:A8:AA:37:39:B1:F8:DC:68:F3:9C:35:70:F2:16
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136302e302f32312d3234203d3e203238313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4c:94:79:5f:54:26:7d:3f:e8:1e:c5:de:7a:b7:87:2a:03:f8:
         7d:33:9f:ff:30:5d:b3:ec:1a:83:50:81:d5:d7:66:d7:96:ba:
         39:9c:7c:13:c6:eb:72:ea:5f:3e:39:8c:a5:ba:76:e1:12:d3:
         47:82:34:d5:ee:7a:94:e4:22:2b:f2:40:82:75:04:29:b1:d0:
         ae:f4:d2:72:bf:5b:14:44:55:88:cd:92:3a:e2:bb:b5:1e:85:
         dd:48:9d:4c:02:6f:40:02:11:26:be:ca:16:40:c4:b7:14:02:
         ef:31:a0:3d:ee:ea:5b:1a:1a:50:fd:b9:3d:39:79:35:31:1d:
         73:91:51:9a:07:54:dc:6d:3d:7c:2c:52:72:9e:c2:72:d2:ae:
         26:12:e3:29:b0:e8:29:57:4c:59:f6:c9:d7:f7:14:6a:d4:36:
         c0:de:83:34:5c:69:69:6f:46:59:bd:23:2c:ab:a4:60:ff:22:
         b9:c7:8c:a6:b2:1b:bd:da:50:56:f8:b5:7f:c2:e0:6b:fc:a6:
         71:ce:16:00:d4:3d:10:9c:ab:83:ed:f1:d9:a8:5a:81:af:8d:
         38:58:0a:82:4a:63:34:8b:7a:cc:53:5d:12:29:f5:19:78:a1:
         68:1b:e8:68:76:e4:1a:ea:fc:02:92:75:17:d3:00:e1:ca:74:
         da:48:32:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org