Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
File:                     3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa (raw, json)
Hash identifier:          GRfZlWkfaWP2x1210vODEgU9t600zb8Al3DkPbtB/+4=
Subject key identifier:   F1:E6:DA:2E:21:67:34:3E:42:05:5D:82:5A:33:FF:FD:08:08:E7:16
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       1A2B141D581161B397E3742DABCD2E390A2AE792
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa
Signing time:             Tue 05 Mar 2024 18:22:53 +0000
ROA not before:           Tue 05 Mar 2024 18:17:53 +0000
ROA not after:            Tue 04 Mar 2025 18:22:53 +0000
asID:                     265700
IP address blocks:        170.210.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 15:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:14:1d:58:11:61:b3:97:e3:74:2d:ab:cd:2e:39:0a:2a:e7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:53 2024 GMT
            Not After : Mar  4 18:22:53 2025 GMT
        Subject: CN=F1E6DA2E2167343E42055D825A33FFFD0808E716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:1c:77:aa:81:8a:1a:51:23:f6:76:f3:50:
                    a4:f1:19:33:66:11:88:2d:ea:bd:cf:89:ec:30:45:
                    af:6b:aa:1c:49:1e:73:16:9b:e1:39:e8:8d:63:e5:
                    d6:73:ae:54:a9:f5:d4:4d:c5:9e:2c:f9:92:fd:34:
                    01:58:8a:b9:61:89:31:3e:48:ba:6b:1b:f3:48:d9:
                    fb:03:4d:ee:4e:c4:54:38:3d:25:24:10:12:b7:76:
                    7b:42:44:67:7d:82:9b:74:48:f5:d1:e2:87:99:dd:
                    af:e5:6b:51:77:42:e8:8c:ff:cf:47:31:ca:c6:b3:
                    f8:bd:20:91:91:03:41:17:a9:6b:11:f1:4d:15:8e:
                    51:3f:7e:96:c8:eb:7c:21:60:64:29:97:8f:c5:a3:
                    6d:72:85:99:20:ef:48:5b:83:b4:4e:86:92:78:6b:
                    21:3b:ee:46:78:7f:77:e8:44:3a:e3:d8:38:14:a5:
                    71:fb:f6:c0:3e:70:f8:49:fe:0c:e3:4d:1f:21:78:
                    c0:df:68:2b:c1:fb:f7:e1:95:16:f9:4e:6c:22:fc:
                    7f:01:dd:16:75:6c:4d:7f:ad:e5:93:83:94:6b:5b:
                    34:9a:42:44:6d:ad:df:4c:84:f0:81:25:12:7f:b4:
                    4e:e3:4d:18:5a:aa:b0:02:db:0d:1e:df:53:ab:56:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E6:DA:2E:21:67:34:3E:42:05:5D:82:5A:33:FF:FD:08:08:E7:16
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39322e302f32322d3234203d3e20323635373030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:58:dd:75:7f:63:35:fe:b4:6f:6d:6e:89:0c:ac:ff:d9:12:
         9a:28:48:51:fa:f8:57:41:bc:f4:d8:22:f9:71:1c:0e:fe:c8:
         67:dc:ee:ff:c5:c8:ff:c3:8f:5f:38:14:92:9c:ae:69:47:8d:
         2f:6e:44:2c:e6:9d:c3:90:d4:a2:ec:25:71:3f:82:bd:81:1b:
         03:b4:49:c2:f0:be:b8:a9:0d:5a:15:5d:da:71:53:84:3a:27:
         2c:2d:32:b5:20:da:7c:2a:01:b7:7c:df:2a:02:2f:01:02:0e:
         1a:70:3f:ab:d1:e9:5c:4b:73:22:b6:7e:84:ae:c5:54:cf:dc:
         62:96:bb:39:c9:09:ab:2b:38:43:34:83:56:c2:ef:71:a1:6e:
         2c:ee:d7:71:d1:db:30:97:f4:5f:6e:cf:41:11:65:45:7c:b5:
         be:18:cb:69:d2:72:59:8f:02:a5:bb:57:7a:26:3a:44:db:ae:
         78:a9:d0:6a:c5:54:f8:7c:49:93:c7:d7:ac:18:44:6c:f2:6c:
         ab:2f:96:26:49:b2:fa:90:ca:e6:48:91:cb:83:49:7f:94:8a:
         32:48:ff:88:1d:f1:b8:7c:67:a8:5b:50:a4:db:1c:d3:8d:1e:
         3e:e7:57:a5:29:da:39:03:39:8e:3a:ba:a7:a6:f3:a1:57:e8:
         12:fb:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:31 2024 by rpki-client on console-fra.rpki-client.org