Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa
File:                     3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa (raw, json)
Hash identifier:          3u23rf1rHmju8xBXanSd07Po5Nh+RkpmkNo4ALQsTCM=
Subject key identifier:   83:3B:1F:B9:89:DC:47:E6:EE:94:24:2D:16:4B:B4:2D:24:0C:E0:09
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       1E47289DA156499603D7D2396EEEC06E9CE7A8EB
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa
Signing time:             Tue 05 Mar 2024 18:22:56 +0000
ROA not before:           Tue 05 Mar 2024 18:17:56 +0000
ROA not after:            Tue 04 Mar 2025 18:22:56 +0000
asID:                     264785
IP address blocks:        170.210.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:47:28:9d:a1:56:49:96:03:d7:d2:39:6e:ee:c0:6e:9c:e7:a8:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:56 2024 GMT
            Not After : Mar  4 18:22:56 2025 GMT
        Subject: CN=833B1FB989DC47E6EE94242D164BB42D240CE009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:68:a9:7a:6b:03:e9:28:a9:70:6d:18:05:85:
                    dd:47:88:97:70:a3:ff:cf:0e:62:9a:be:c1:0b:d0:
                    01:6e:0f:80:8f:5b:a5:30:a5:48:27:0b:7c:e1:0b:
                    46:9d:35:e1:87:dc:be:2e:43:9f:7d:fe:c1:1d:f1:
                    cd:93:5a:90:bd:2d:86:36:8d:83:32:31:16:4a:85:
                    a6:af:c4:fc:0e:aa:1d:dd:fa:79:65:9d:6f:a8:cd:
                    fd:a4:e1:07:b2:84:2d:f8:68:96:59:40:5d:8e:16:
                    f0:d9:79:fd:b9:43:30:2e:31:cd:e5:3f:e5:aa:7a:
                    0b:8e:6e:b8:61:2e:ee:a5:0b:24:d5:64:12:51:d9:
                    db:e0:67:09:5a:71:a7:8f:4c:e1:77:70:24:a2:0c:
                    eb:7a:f4:da:db:3d:5b:92:4c:d6:01:3c:3d:2d:c4:
                    91:79:95:9e:73:69:64:8f:4e:67:53:a6:e9:ba:c5:
                    25:08:bf:f4:e9:16:9b:87:82:f2:cd:51:40:b8:e9:
                    2a:ac:5d:6f:6b:bb:b4:76:45:02:fc:38:a6:74:4c:
                    30:29:8b:be:81:b4:91:01:7a:a4:6f:77:5d:66:2c:
                    44:ba:c9:89:55:4a:d6:f8:31:d1:92:70:37:d0:14:
                    ef:84:34:81:c4:d4:e7:b4:56:64:19:00:bd:33:30:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3B:1F:B9:89:DC:47:E6:EE:94:24:2D:16:4B:B4:2D:24:0C:E0:09
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e38342e302f32342d3234203d3e20323634373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:27:4b:ee:a5:29:72:a1:fa:18:06:2d:ee:f7:81:a9:6b:32:
         57:e0:66:de:0a:1d:62:8c:18:5b:99:a1:37:21:6d:ce:8d:49:
         d6:19:07:8d:55:f7:cd:3f:e9:38:c8:6a:2b:65:8b:96:25:b0:
         de:ea:8a:d6:99:cb:24:e3:d0:60:be:54:bc:e4:f3:43:ee:9a:
         fb:fc:0c:ba:42:05:7f:0d:5a:f3:5b:3f:c1:42:0e:43:d4:7f:
         e4:62:7c:3a:36:ee:11:da:51:22:2b:8b:f8:22:39:df:aa:32:
         cd:62:b9:3c:65:4a:93:82:b8:cb:df:44:f8:72:db:3b:93:e1:
         13:db:5f:b6:14:a1:9e:94:fb:f2:71:b1:a2:30:4f:9a:49:c6:
         f6:d6:60:da:4b:88:5c:1f:ee:c0:da:d0:f2:60:db:72:19:80:
         83:db:b7:a4:21:22:33:44:7d:6c:6d:c8:90:00:3d:26:98:ff:
         87:10:45:23:dc:d5:03:61:b5:2b:5c:25:38:2f:89:a3:03:05:
         45:3f:27:53:50:5f:9f:b1:63:74:24:7e:72:f5:d5:c6:05:7b:
         f3:c5:24:a7:c1:95:86:82:31:02:b2:90:cd:c7:9b:81:ff:54:
         dc:9d:41:51:d1:cc:13:64:99:3b:b9:e4:69:c1:33:a3:4b:e3:
         d2:b5:68:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:49 2024 by rpki-client on console-ams.rpki-client.org