Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa
File:                     3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa (raw, json)
Hash identifier:          ritk7Xm1eg8cgZvZz62cuMs3JDGKcIBKa/xZJgu1kjE=
Subject key identifier:   86:D8:5F:B5:42:8C:D8:D8:7A:2F:E2:0E:80:52:CF:25:69:19:B6:13
Certificate issuer:       /CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
Certificate serial:       6422442354BF674C1CB5EDF860337E0914AF657D
Authority key identifier: 7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa
Signing time:             Tue 05 Mar 2024 17:45:17 +0000
ROA not before:           Tue 05 Mar 2024 17:40:17 +0000
ROA not after:            Tue 04 Mar 2025 17:45:17 +0000
asID:                     264605
IP address blocks:        170.254.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 28 Sep 2024 16:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:22:44:23:54:bf:67:4c:1c:b5:ed:f8:60:33:7e:09:14:af:65:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F98F25356605E50F1B1C800B6E7128E7B3123E6
        Validity
            Not Before: Mar  5 17:40:17 2024 GMT
            Not After : Mar  4 17:45:17 2025 GMT
        Subject: CN=86D85FB5428CD8D87A2FE20E8052CF256919B613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:6a:84:7c:ce:4b:e3:32:eb:f5:77:20:4a:
                    7e:b9:52:6f:da:7f:9c:02:c3:2e:54:19:b1:9c:1b:
                    cc:e6:bf:6b:c9:53:a5:a9:aa:43:21:32:60:d8:bc:
                    19:41:7a:a7:d9:e0:3b:6c:0a:20:86:c3:de:12:b6:
                    c1:83:cc:6d:c8:ad:10:4b:5b:30:84:29:2d:4b:64:
                    40:e0:48:a3:c9:c1:36:ff:db:05:83:19:77:81:dc:
                    83:66:55:d1:80:9f:93:2b:39:ab:68:a5:8b:ca:37:
                    f3:9b:77:63:b6:db:88:39:02:8e:80:77:e0:bc:fe:
                    ea:1a:a4:eb:ad:5c:df:9e:5b:b8:9e:ff:a6:b1:2e:
                    24:8e:01:9e:ca:d8:ca:22:1d:50:93:af:1a:fd:1d:
                    dc:6e:2f:6b:85:10:97:32:c6:f6:4e:a6:6e:ed:50:
                    55:82:f4:17:4c:7c:0b:87:12:a3:eb:c7:fc:5b:98:
                    f4:e5:dd:43:cd:37:a5:14:b0:1b:c8:5d:11:3f:0a:
                    f3:95:17:c1:f9:2c:19:75:81:53:5a:c0:4f:88:05:
                    de:6b:be:a1:9a:7b:e9:fd:d6:b0:20:46:48:87:44:
                    00:aa:a4:d3:ce:cf:54:da:fd:c0:99:05:ad:61:26:
                    98:eb:a1:cb:66:8b:f6:21:2b:9b:f9:51:14:4c:e5:
                    24:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:5F:B5:42:8C:D8:D8:7A:2F:E2:0E:80:52:CF:25:69:19:B6:13
            X509v3 Authority Key Identifier:
                keyid:7F:98:F2:53:56:60:5E:50:F1:B1:C8:00:B6:E7:12:8E:7B:31:23:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F98F25356605E50F1B1C800B6E7128E7B3123E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90539462A4A1B3951607066D516B6BDF2F465E83FC3D92F209D6B0804F266E92/0/3137302e3235342e36342e302f32322d3234203d3e20323634363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:90:f0:d5:e6:5c:b8:10:81:4d:6f:29:4d:a7:4e:77:e4:2f:
         29:15:cd:5b:e6:54:8b:b9:9d:ea:6d:6d:0d:8d:d5:2f:06:7c:
         40:d6:14:f9:72:9e:01:23:f1:f0:c9:1b:cf:b8:c1:a7:bb:70:
         aa:81:14:a5:86:64:f5:e9:b7:4b:1e:c0:ee:04:12:fe:91:a7:
         3d:b6:ff:71:01:6d:f6:07:78:23:f1:5e:7b:b3:72:32:1d:73:
         97:cd:9a:70:89:7b:af:2e:bf:8f:e9:1b:9b:09:a3:a1:2e:96:
         ee:8b:2e:10:30:67:77:fa:e1:49:d6:0b:a9:cb:ed:0c:d4:0e:
         3f:50:b8:98:3a:7a:c6:88:30:3d:e2:a0:de:93:c1:e6:4e:62:
         17:61:c4:6b:49:db:60:20:6a:bd:5f:59:47:fd:82:54:4b:56:
         8f:4e:1c:44:95:53:ea:2e:4b:a2:16:bb:62:9d:10:fe:84:5b:
         23:03:66:a8:5f:0e:3b:8b:67:36:f7:15:c4:5c:8d:35:76:57:
         62:bb:32:f5:e5:96:25:b5:d5:e5:6b:83:81:c7:b4:d5:a0:00:
         09:ce:ff:5c:e2:ce:ab:7f:18:04:80:be:5e:20:e5:9f:cb:d9:
         7f:52:e1:e1:5a:c9:63:bd:cb:6d:9b:f6:6d:58:bb:d4:9c:7c:
         42:0e:07:36
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUZCJEI1S/Z0wcte34YDN+CRSvZX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Y5OEYyNTM1NjYwNUU1MEYxQjFDODAwQjZFNzEyOEU3
QjMxMjNFNjAeFw0yNDAzMDUxNzQwMTdaFw0yNTAzMDQxNzQ1MTdaMDMxMTAvBgNV
BAMTKDg2RDg1RkI1NDI4Q0Q4RDg3QTJGRTIwRTgwNTJDRjI1NjkxOUI2MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdW2qEfM5L4zLr9XcgSn65Um/a
f5wCwy5UGbGcG8zmv2vJU6WpqkMhMmDYvBlBeqfZ4DtsCiCGw94StsGDzG3IrRBL
WzCEKS1LZEDgSKPJwTb/2wWDGXeB3INmVdGAn5MrOatopYvKN/Obd2O224g5Ao6A
d+C8/uoapOutXN+eW7ie/6axLiSOAZ7K2MoiHVCTrxr9HdxuL2uFEJcyxvZOpm7t
UFWC9BdMfAuHEqPrx/xbmPTl3UPNN6UUsBvIXRE/CvOVF8H5LBl1gVNawE+IBd5r
vqGae+n91rAgRkiHRACqpNPOz1Ta/cCZBa1hJpjroctmi/YhK5v5URRM5SSTAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUhthftUKM2Nh6L+IOgFLPJWkZthMwHwYDVR0j
BBgwFoAUf5jyU1ZgXlDxscgAtucSjnsxI+YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85MDUzOTQ2MkE0QTFCMzk1MTYwNzA2NkQ1MTZCNkJERjJG
NDY1RTgzRkMzRDkyRjIwOUQ2QjA4MDRGMjY2RTkyLzAvN0Y5OEYyNTM1NjYwNUU1
MEYxQjFDODAwQjZFNzEyOEU3QjMxMjNFNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83Rjk4RjI1MzU2NjA1RTUwRjFC
MUM4MDBCNkU3MTI4RTdCMzEyM0U2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTA1Mzk0NjJBNEExQjM5NTE2MDcwNjZENTE2QjZCREYyRjQ2NUU4M0ZD
M0Q5MkYyMDlENkIwODA0RjI2NkU5Mi8wLzMxMzczMDJlMzIzNTM0MmUzNjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzMDM1LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqv5A
MA0GCSqGSIb3DQEBCwUAA4IBAQBOkPDV5ly4EIFNbylNp0535C8pFc1b5lSLuZ3q
bW0NjdUvBnxA1hT5cp4BI/HwyRvPuMGnu3CqgRSlhmT16bdLHsDuBBL+kac9tv9x
AW32B3gj8V57s3IyHXOXzZpwiXuvLr+P6RubCaOhLpbuiy4QMGd3+uFJ1gupy+0M
1A4/ULiYOnrGiDA94qDek8HmTmIXYcRrSdtgIGq9X1lH/YJUS1aPThxElVPqLkui
FrtinRD+hFsjA2aoXw47i2c29xXEXI01dldiuzL15ZYltdXla4OBx7TVoAAJzv9c
4s6rfxgEgL5eIOWfy9l/UuHhWsljvcttm/ZtWLvUnHxCDgc2
-----END CERTIFICATE-----
Generated at Wed Sep 25 12:04:52 2024 by rpki-client on console-ams.rpki-client.org