Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa
File:                     3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa (raw, json)
Hash identifier:          7MclJgVT20fMudi7zgSQuVK+sux7SGb/glTnCnZqKOs=
Subject key identifier:   3C:4B:95:9B:E6:4B:95:99:ED:16:84:82:3C:08:3B:24:34:16:AA:68
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       0BF5A2D1490AA83D0FDAA524E08BC8822C915A20
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa
Signing time:             Tue 05 Mar 2024 18:22:53 +0000
ROA not before:           Tue 05 Mar 2024 18:17:53 +0000
ROA not after:            Tue 04 Mar 2025 18:22:53 +0000
asID:                     27790
IP address blocks:        170.210.248.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:a2:d1:49:0a:a8:3d:0f:da:a5:24:e0:8b:c8:82:2c:91:5a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:53 2024 GMT
            Not After : Mar  4 18:22:53 2025 GMT
        Subject: CN=3C4B959BE64B9599ED1684823C083B243416AA68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:af:e3:31:68:45:1d:8d:9f:88:d0:80:d4:ba:
                    71:f6:99:a1:5a:cf:d3:92:04:96:0c:29:d4:3f:55:
                    7f:67:77:51:01:bc:c8:71:e3:9d:75:d9:c5:6c:cd:
                    13:0d:72:4e:5b:d2:55:3c:6a:15:a8:6a:45:37:72:
                    5f:12:d2:f9:4b:48:b4:de:c7:42:c9:5e:ca:90:b9:
                    7a:ff:10:85:33:ac:d5:90:1d:bb:94:8e:10:a8:5c:
                    f0:65:50:11:d2:f7:c3:8a:98:c0:4f:74:a8:5d:01:
                    fe:c0:61:c0:bf:d7:21:72:da:15:6a:f4:f2:02:ce:
                    97:17:fa:07:13:3b:1c:df:77:50:8d:2f:97:fd:05:
                    86:fd:f4:81:f6:43:81:28:6f:fb:81:f2:2c:46:fd:
                    60:64:91:d3:d2:3d:76:f1:f0:ee:63:6c:df:d5:be:
                    26:37:d2:cb:d4:b1:b9:ff:fb:94:ff:9e:07:db:18:
                    5d:cd:1c:d3:f2:d7:dc:5b:54:f1:4d:ff:10:95:d9:
                    88:65:1f:2a:7a:0d:77:cb:a8:67:74:e1:a6:5b:f0:
                    37:a3:2b:d8:eb:02:e3:09:4f:e4:d4:ae:e5:6a:9d:
                    07:5f:87:42:e3:e6:a7:52:4f:1d:5b:99:e5:99:37:
                    22:6d:42:e0:9e:58:c5:ed:57:71:ba:45:e0:bf:ed:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4B:95:9B:E6:4B:95:99:ED:16:84:82:3C:08:3B:24:34:16:AA:68
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e3234382e302f32312d3231203d3e203237373930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:79:c8:9b:05:aa:6e:f2:39:eb:aa:54:88:4a:0c:f2:2f:cf:
         9e:4a:ed:c2:45:f1:f5:a1:64:95:07:8e:2a:1c:9c:bd:59:df:
         db:3d:bb:8d:ae:62:bd:d2:00:9a:2e:92:c6:49:34:bd:60:b4:
         92:dd:5b:4a:a2:66:65:fc:12:28:33:8f:7a:e6:3d:58:84:b4:
         7d:e0:11:65:3a:93:0f:f9:3c:16:df:1b:22:0c:e5:c8:d0:28:
         93:ec:74:70:fd:23:6f:83:05:a9:a4:4d:ce:af:57:2e:b2:b1:
         10:ae:aa:46:f3:b6:da:f8:de:96:d6:dd:67:05:9d:f8:e1:8e:
         91:e8:dd:1a:6d:89:d6:de:44:6d:6c:6f:48:a0:71:ac:9e:b5:
         a5:39:e3:46:a1:b2:95:1f:30:9f:d5:f4:7f:5e:be:0c:28:52:
         17:a6:f1:88:99:a7:d6:a0:87:a9:bd:1c:c0:b5:60:09:61:09:
         b5:37:07:a2:a8:a0:4e:36:e9:c6:bd:52:db:ae:7e:52:bf:a0:
         d0:12:ff:56:57:a9:4d:76:55:51:94:b4:63:7c:f4:83:af:f5:
         bb:79:7b:92:b7:30:84:04:76:88:d6:f6:45:1d:d1:a9:3a:ab:
         1d:84:82:f5:0f:8c:04:c1:a9:64:2a:51:08:78:4e:a1:55:2d:
         e4:5f:4a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org