Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
File:                     3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa (raw, json)
Hash identifier:          /WIf8qMjmlrHYVRB8UUT5xwogHz+Jsh2Jj3fDImR2ao=
Subject key identifier:   5B:4C:00:38:05:B0:4E:E3:0A:35:22:BA:C0:73:E6:0C:08:99:71:C4
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       6E12F4C3199BACD5455330556F261E20E0BC0493
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa
Signing time:             Tue 05 Mar 2024 18:22:50 +0000
ROA not before:           Tue 05 Mar 2024 18:17:50 +0000
ROA not after:            Tue 04 Mar 2025 18:22:50 +0000
asID:                     263235
IP address blocks:        170.210.192.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:12:f4:c3:19:9b:ac:d5:45:53:30:55:6f:26:1e:20:e0:bc:04:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:50 2024 GMT
            Not After : Mar  4 18:22:50 2025 GMT
        Subject: CN=5B4C003805B04EE30A3522BAC073E60C089971C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6d:0b:25:1e:9a:3a:23:5a:06:a6:89:34:00:
                    4b:38:88:81:87:ad:bc:7b:a5:a6:83:6a:a0:bc:42:
                    52:40:9f:0b:fe:4d:21:40:0a:6d:c0:02:8e:cd:e6:
                    7a:0d:23:31:2c:3d:f7:d3:c3:de:0c:d2:57:69:0c:
                    4c:44:ec:fe:b0:d1:e7:e6:35:b3:4c:ad:3d:92:b2:
                    aa:47:c6:46:81:c9:7c:01:0b:bb:9a:33:55:56:9d:
                    f7:88:b3:92:c6:d1:8c:d6:6b:59:18:77:19:fc:5f:
                    45:f1:c6:5a:f2:74:b8:c1:67:ce:03:83:16:8d:65:
                    13:4e:cd:f1:fc:92:2f:50:b4:e5:dc:20:7d:c3:1b:
                    e4:2d:27:06:bb:90:c5:23:fe:86:89:97:51:58:d4:
                    b4:9a:e7:74:4e:dc:6a:4f:26:e1:10:4e:20:3a:79:
                    fd:11:2f:d3:f5:87:e4:a7:23:30:83:52:66:bd:ba:
                    2a:c8:94:34:8e:bf:bb:ec:f5:ad:02:dc:69:ca:27:
                    8f:2a:a5:10:1b:4b:53:77:4c:72:b5:5c:17:c0:9c:
                    07:dc:56:b2:79:08:d1:1c:03:dd:fc:3b:39:8f:66:
                    05:32:dd:3a:f6:3d:ac:bd:1c:60:43:33:f0:da:58:
                    05:d2:11:b1:f9:11:f2:77:62:32:18:e3:94:f3:46:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4C:00:38:05:B0:4E:E3:0A:35:22:BA:C0:73:E6:0C:08:99:71:C4
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3139322e302f32312d3234203d3e20323633323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:ba:0d:81:97:e3:45:27:e0:3e:ed:29:a0:f6:43:9b:56:de:
         16:85:b0:6c:91:4b:eb:d5:7b:64:fd:e3:c4:3d:aa:0b:2d:0d:
         fa:5f:b8:8f:db:8e:9f:f5:45:68:39:6f:86:65:6f:ff:e0:e0:
         19:aa:1e:bb:db:62:78:dc:0c:29:7e:99:be:8e:50:37:52:c8:
         ff:47:39:04:2b:cc:82:6e:07:de:3b:9f:9f:57:47:70:07:0e:
         02:31:71:25:e6:81:f9:35:cb:7f:65:65:17:45:f7:0c:29:32:
         e1:22:53:cd:34:b6:c6:db:73:8b:da:03:c9:c8:b3:21:0b:31:
         b5:ed:2b:35:37:c6:95:e4:9f:e2:a7:4c:a8:ad:e5:c1:fb:25:
         90:d4:24:dd:93:81:54:8c:9c:7b:3f:29:51:71:9f:f6:85:ef:
         76:38:90:73:d0:17:71:da:8c:f8:fd:a9:90:d7:90:d8:6e:47:
         c7:6c:18:e6:cf:6f:5c:99:f8:69:59:fc:da:d1:f3:53:24:d2:
         93:5c:ef:69:d5:f9:49:31:04:63:27:69:97:ac:73:2b:04:1f:
         4a:2f:16:82:4f:4a:0a:3e:fc:8e:f5:51:26:1c:a3:2f:28:e1:
         63:de:01:44:9e:73:a3:cb:98:1e:73:bf:22:2c:f4:d6:d3:41:
         5c:f4:e6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 14:38:45 2024 by rpki-client on console-fra.rpki-client.org