Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa
File:                     3137302e3231302e3138302e302f32342d3234203d3e203432.roa (raw, json)
Hash identifier:          +53jQpoIOWO3SMBdhZZ4HHDDCaCDoe3D/NqORTu0Ylk=
Subject key identifier:   17:03:D9:2A:3A:6B:3D:88:8E:D8:07:82:91:E2:1C:AA:EF:4F:94:3B
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       6D9F1C492BEBE8DD1C3A29D0F219C19B2CFDC006
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa
Signing time:             Tue 05 Mar 2024 18:22:51 +0000
ROA not before:           Tue 05 Mar 2024 18:17:51 +0000
ROA not after:            Tue 04 Mar 2025 18:22:51 +0000
asID:                     42
IP address blocks:        170.210.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:9f:1c:49:2b:eb:e8:dd:1c:3a:29:d0:f2:19:c1:9b:2c:fd:c0:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:51 2024 GMT
            Not After : Mar  4 18:22:51 2025 GMT
        Subject: CN=1703D92A3A6B3D888ED8078291E21CAAEF4F943B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b7:bc:8c:43:94:61:ee:29:80:ac:09:6d:1f:
                    21:4a:6d:82:bc:81:96:b9:0a:be:5e:88:d7:fa:ff:
                    66:c1:86:7b:d2:70:8d:7b:d1:ad:b6:2b:ac:91:5d:
                    b2:9e:12:5b:6f:89:33:19:eb:2b:90:8c:a9:f5:18:
                    3b:2e:05:d1:59:9c:a9:15:ef:ee:fc:b2:03:fe:88:
                    94:01:c1:db:b3:f7:b5:d5:d8:f0:2d:ec:df:1d:5c:
                    57:d8:d0:d6:a4:c3:13:51:cf:9d:76:46:da:3a:0a:
                    fc:6a:58:4b:c2:44:0f:25:ba:c5:18:21:84:91:c1:
                    62:bd:9f:bb:cb:15:15:c3:d5:74:bf:78:4d:2b:ba:
                    f0:4a:4a:b4:c0:80:c4:0f:45:44:8b:51:b5:da:8c:
                    7f:56:92:51:3d:ad:65:fb:d2:62:09:68:04:0c:45:
                    98:72:4e:6c:2a:36:be:99:47:1c:d1:72:cb:cb:4d:
                    99:34:55:54:0d:11:ea:2e:7b:5d:5c:cd:b6:f9:17:
                    fe:bd:52:05:82:29:b5:7f:f4:59:c4:11:bd:f1:68:
                    89:67:1a:cc:c8:63:34:9a:99:b4:d3:54:43:c0:6d:
                    19:3a:7b:e8:f4:eb:f4:4b:53:dc:ba:1b:03:83:d9:
                    97:99:3d:a8:f9:69:73:86:23:13:17:d6:3d:c2:73:
                    3c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:03:D9:2A:3A:6B:3D:88:8E:D8:07:82:91:E2:1C:AA:EF:4F:94:3B
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3138302e302f32342d3234203d3e203432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:6f:17:b3:53:c9:55:3f:6b:57:25:5f:7a:20:98:7b:e0:b4:
         af:7e:e7:5b:9b:79:8a:d2:45:a4:95:20:03:ea:05:99:9b:b1:
         ae:80:36:5e:1c:fd:bf:76:ac:e4:c6:d6:88:fa:95:81:7f:6e:
         1b:3e:6b:f5:7a:f6:a9:ce:87:ce:0f:71:8f:25:7d:77:cc:0d:
         97:6c:9d:53:86:e2:01:7d:2b:0d:6b:76:1d:7e:04:e7:83:cd:
         9c:71:8a:fc:eb:75:57:b8:3e:b6:e1:d0:da:2a:f8:f7:e2:a9:
         1a:6b:f1:7e:6c:c9:c6:41:74:c6:5c:7e:5d:6d:8f:29:f4:32:
         0e:3d:32:52:e2:13:be:4b:7d:c4:b4:75:34:e3:7f:bc:32:d4:
         9f:a5:ed:dc:af:0e:85:46:08:25:c4:fa:42:86:95:c5:dd:48:
         92:e7:f6:dc:d3:53:13:1b:0f:98:67:ca:cd:01:18:25:75:98:
         ab:70:23:8a:03:bf:a9:97:f3:01:73:a0:82:49:c5:01:a0:ed:
         c3:76:7b:41:41:51:33:03:62:93:c5:e9:5c:81:b0:72:7d:09:
         d0:36:8d:38:e7:0b:6d:cb:23:23:83:dc:75:b5:78:28:70:57:
         8e:0a:12:e9:8e:87:30:18:04:4e:f2:a7:19:51:21:45:58:96:
         c2:3f:0a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org