Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa
File:                     3137302e3231302e39362e302f32312d3234203d3e203532343432.roa (raw, json)
Hash identifier:          EmB6mZdkrRmE9CW40AE1oahtnDF5SPkIcrS0Q0ZtS/4=
Subject key identifier:   A0:14:E5:11:C2:BB:2C:B2:CF:49:F3:36:BA:F3:96:DA:58:78:80:9C
Certificate issuer:       /CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
Certificate serial:       1AEDCC18198A6D9139C9EDE61A40701637CBC27D
Authority key identifier: 22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa
Signing time:             Tue 05 Mar 2024 18:22:55 +0000
ROA not before:           Tue 05 Mar 2024 18:17:55 +0000
ROA not after:            Tue 04 Mar 2025 18:22:55 +0000
asID:                     52442
IP address blocks:        170.210.96.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ed:cc:18:19:8a:6d:91:39:c9:ed:e6:1a:40:70:16:37:cb:c2:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22D4B25C65781140A2B8DB968C7D0B813D457F0B
        Validity
            Not Before: Mar  5 18:17:55 2024 GMT
            Not After : Mar  4 18:22:55 2025 GMT
        Subject: CN=A014E511C2BB2CB2CF49F336BAF396DA5878809C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:57:99:fe:e3:31:a2:bb:98:19:51:00:db:
                    b1:e5:89:e9:6c:1d:fc:ff:fb:ac:04:3d:b9:89:9e:
                    b9:4a:e3:54:93:3e:c0:c1:86:72:d2:d8:e5:c3:a9:
                    3f:f4:e9:47:e1:bf:c0:95:a0:33:40:0b:5f:b8:61:
                    ea:f7:37:c3:25:60:10:ca:50:3e:e0:d1:97:fe:d5:
                    82:06:51:5b:e9:5c:e9:1b:aa:16:10:e6:80:24:42:
                    12:2d:fa:15:42:f3:04:c3:03:cc:df:25:06:4c:9b:
                    92:06:7c:22:7a:1c:ab:9a:a5:91:3b:3a:04:45:31:
                    da:4b:78:5a:2e:43:8c:70:4f:96:07:e8:21:ed:8f:
                    17:85:cb:8e:b9:f7:37:8a:1a:c1:de:6b:e0:f1:83:
                    98:b8:f2:08:25:97:bb:da:e0:04:e3:53:5c:6c:52:
                    e7:d9:e9:dd:72:94:19:d6:81:e6:87:d2:ea:51:ce:
                    f1:56:00:a5:29:7d:cc:eb:e4:35:95:44:b0:f8:94:
                    36:81:0c:ce:a0:02:5f:5f:8f:b1:fd:05:c3:8b:9c:
                    8d:2e:13:30:e4:c5:cf:64:99:08:03:4b:3e:8d:9d:
                    a5:4b:4e:91:b2:5a:c9:fa:fa:76:35:cf:57:80:96:
                    b1:a0:0b:40:7d:aa:2a:68:81:41:76:41:0c:cf:25:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:14:E5:11:C2:BB:2C:B2:CF:49:F3:36:BA:F3:96:DA:58:78:80:9C
            X509v3 Authority Key Identifier:
                keyid:22:D4:B2:5C:65:78:11:40:A2:B8:DB:96:8C:7D:0B:81:3D:45:7F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22D4B25C65781140A2B8DB968C7D0B813D457F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FECD5798E3294C3D469818A080FF5CECA775E61554192DD987E1EE7363DB6F7/0/3137302e3231302e39362e302f32312d3234203d3e203532343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:6e:53:01:e6:6e:81:4c:ee:a4:1f:1d:d2:04:93:09:17:86:
         8e:e2:87:20:5a:d8:4c:d5:90:55:f0:c2:d0:2c:f9:a7:2e:e8:
         74:82:ae:c8:ef:8b:3c:20:0e:06:9d:ea:dd:76:eb:c2:6b:eb:
         cd:24:39:72:90:4a:e9:d0:f5:98:dd:8e:b0:ef:69:a5:35:1a:
         44:8f:00:26:32:2b:0a:88:20:90:db:bf:cd:b0:8a:c2:7b:5a:
         ff:e7:aa:6e:c4:33:cb:5f:e5:f2:95:be:f8:f3:06:ae:36:6d:
         22:bb:77:db:e2:99:05:20:4f:fd:86:f8:af:c0:d0:d5:f1:f2:
         11:81:8d:82:15:05:e2:a8:31:65:70:47:9a:f0:79:39:fb:c4:
         80:3f:2c:71:2c:12:a3:16:b5:f5:a6:b5:b7:b3:f3:e6:5d:b2:
         7d:01:19:15:58:50:6e:ac:3b:49:c0:5f:be:cc:51:ec:89:53:
         3e:2b:26:d0:f2:17:b4:09:b2:c6:ec:59:73:ac:a4:79:89:03:
         9c:0b:06:55:7e:62:f5:e0:57:78:46:09:26:65:d9:57:5b:0a:
         a4:62:a7:f2:b1:a8:0a:40:52:aa:30:4e:1d:1e:30:b8:f6:d6:
         ff:8f:68:c2:1b:18:05:c7:b0:01:3b:ea:a4:ec:61:e8:b3:26:
         c4:e3:e8:db
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUGu3MGBmKbZE5ye3mGkBwFjfLwn0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJENEIyNUM2NTc4MTE0MEEyQjhEQjk2OEM3RDBCODEz
RDQ1N0YwQjAeFw0yNDAzMDUxODE3NTVaFw0yNTAzMDQxODIyNTVaMDMxMTAvBgNV
BAMTKEEwMTRFNTExQzJCQjJDQjJDRjQ5RjMzNkJBRjM5NkRBNTg3ODgwOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUrleZ/uMxoruYGVEA27Hliels
Hfz/+6wEPbmJnrlK41STPsDBhnLS2OXDqT/06Ufhv8CVoDNAC1+4Yer3N8MlYBDK
UD7g0Zf+1YIGUVvpXOkbqhYQ5oAkQhIt+hVC8wTDA8zfJQZMm5IGfCJ6HKuapZE7
OgRFMdpLeFouQ4xwT5YH6CHtjxeFy4659zeKGsHea+Dxg5i48ggll7va4ATjU1xs
UufZ6d1ylBnWgeaH0upRzvFWAKUpfczr5DWVRLD4lDaBDM6gAl9fj7H9BcOLnI0u
EzDkxc9kmQgDSz6NnaVLTpGyWsn6+nY1z1eAlrGgC0B9qipogUF2QQzPJb3TAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUoBTlEcK7LLLPSfM2uvOW2lh4gJwwHwYDVR0j
BBgwFoAUItSyXGV4EUCiuNuWjH0LgT1FfwswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy84RkVDRDU3OThFMzI5NEMzRDQ2OTgxOEEwODBGRjVDRUNB
Nzc1RTYxNTU0MTkyREQ5ODdFMUVFNzM2M0RCNkY3LzAvMjJENEIyNUM2NTc4MTE0
MEEyQjhEQjk2OEM3RDBCODEzRDQ1N0YwQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMkQ0QjI1QzY1NzgxMTQwQTJC
OERCOTY4QzdEMEI4MTNENDU3RjBCLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOEZFQ0Q1Nzk4RTMyOTRDM0Q0Njk4MThBMDgwRkY1Q0VDQTc3NUU2MTU1
NDE5MkREOTg3RTFFRTczNjNEQjZGNy8wLzMxMzczMDJlMzIzMTMwMmUzOTM2MmUz
MDJmMzIzMTJkMzIzNDIwM2QzZTIwMzUzMjM0MzQzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA6rSYDAN
BgkqhkiG9w0BAQsFAAOCAQEAhW5TAeZugUzupB8d0gSTCReGjuKHIFrYTNWQVfDC
0Cz5py7odIKuyO+LPCAOBp3q3XbrwmvrzSQ5cpBK6dD1mN2OsO9ppTUaRI8AJjIr
CoggkNu/zbCKwnta/+eqbsQzy1/l8pW++PMGrjZtIrt32+KZBSBP/Yb4r8DQ1fHy
EYGNghUF4qgxZXBHmvB5OfvEgD8scSwSoxa19aa1t7Pz5l2yfQEZFVhQbqw7ScBf
vsxR7IlTPism0PIXtAmyxuxZc6ykeYkDnAsGVX5i9eBXeEYJJmXZV1sKpGKn8rGo
CkBSqjBOHR4wuPbW/49owhsYBcewATvqpOxh6LMmxOPo2w==
-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org