Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136382e302f32312d3234203d3e203238303638.roa
File:                     3137302e3231302e3136382e302f32312d3234203d3e203238303638.roa (raw, json)
Hash identifier:          qpxsKPS4xbMRxjv3HhWghYTiaN+AEtPeQ43OKEuc+fg=
Subject key identifier:   19:92:21:45:1F:55:7A:FE:14:AF:73:F8:A1:5A:68:1F:C7:77:1C:47
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       1AE640904B9C65FCF229AD9F1CF6ABACC4206FED
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136382e302f32312d3234203d3e203238303638.roa
Signing time:             Tue 05 Mar 2024 18:22:55 +0000
ROA not before:           Tue 05 Mar 2024 18:17:55 +0000
ROA not after:            Tue 04 Mar 2025 18:22:55 +0000
asID:                     28068
IP address blocks:        170.210.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:40:90:4b:9c:65:fc:f2:29:ad:9f:1c:f6:ab:ac:c4:20:6f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:55 2024 GMT
            Not After : Mar  4 18:22:55 2025 GMT
        Subject: CN=199221451F557AFE14AF73F8A15A681FC7771C47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:a5:e9:02:37:1f:52:80:1d:95:10:7e:f6:
                    0b:77:d8:73:28:d7:cc:85:b2:f4:76:be:d0:3a:8b:
                    78:b8:cd:55:a0:7b:42:1b:b1:70:61:dc:6b:d7:26:
                    5d:f9:4b:1f:35:2b:d9:c2:9f:9f:cd:80:3d:e3:5b:
                    47:dc:c6:35:7f:71:60:26:d9:25:a1:39:f9:db:9d:
                    46:c6:42:8d:d0:da:7e:21:de:ec:f2:60:68:5e:58:
                    00:a2:e9:b4:54:db:28:0e:c0:82:9f:8f:cf:e4:33:
                    fe:9e:fb:37:b0:40:76:34:43:2f:c1:97:1e:fc:f9:
                    2b:22:56:cf:7f:4d:92:39:6d:4d:11:99:b5:ff:23:
                    a7:2e:78:63:c1:06:60:b7:33:d0:d5:bb:68:8b:e9:
                    22:ac:65:8d:eb:3e:46:79:a3:99:81:6f:d9:f2:49:
                    15:28:f1:03:39:de:69:c6:61:03:c9:91:6f:94:4d:
                    fe:04:44:8e:d7:7f:17:f3:bf:a1:c3:4c:de:78:c0:
                    88:ec:7d:38:7e:1a:d3:d4:06:56:b9:fc:c3:91:20:
                    cc:e1:02:14:b8:9a:77:b0:d9:6a:64:89:e1:d8:18:
                    d1:37:c1:44:79:3d:ea:d6:b4:81:5b:55:57:4f:57:
                    6e:b3:13:3f:28:94:5c:1a:7e:d0:95:e1:25:a6:98:
                    d1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:92:21:45:1F:55:7A:FE:14:AF:73:F8:A1:5A:68:1F:C7:77:1C:47
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3136382e302f32312d3234203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:b3:d8:f7:64:bb:b3:bd:0b:03:15:c9:2b:93:f0:e6:a9:70:
         47:b7:5f:41:f0:94:dc:cc:ba:95:69:ca:9c:40:49:07:71:6b:
         d0:4d:17:e9:41:15:8f:45:29:8f:98:98:8a:c8:40:15:28:7b:
         88:a1:4e:1c:59:7d:cf:0e:8e:4f:e3:70:e2:20:d5:6c:da:53:
         43:e9:a1:eb:2a:55:0e:3a:5b:47:13:41:95:90:75:c7:ec:66:
         bd:93:0b:57:80:e9:ca:7c:6b:48:a8:16:61:01:66:3b:10:e1:
         9a:26:7a:8f:13:b0:a9:01:49:44:14:e1:25:81:b7:a2:53:f7:
         d9:20:b0:a9:bb:93:b9:4f:62:d7:a6:f8:af:d5:b7:c7:e2:96:
         1a:7a:f9:18:50:e3:ba:5c:05:8b:63:0b:dd:87:df:f1:cc:d7:
         56:88:ca:99:7e:8f:01:9a:27:c8:e4:ac:65:95:fa:a1:da:7a:
         72:f6:35:9c:2b:33:81:20:26:51:f7:15:f9:1f:9b:f0:5b:16:
         bd:3f:3e:6d:f7:fb:ee:31:9c:54:6a:57:a1:c9:17:8f:44:63:
         e2:98:15:5e:1f:2c:6a:81:98:06:ff:85:10:cf:5b:84:a7:7b:
         a8:64:23:d4:a2:d7:06:89:5f:0e:b7:85:cd:52:b6:a1:b4:dd:
         a4:6d:6f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:27:32 2024 by rpki-client on console-ams.rpki-client.org