Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
File:                     3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa (raw, json)
Hash identifier:          PW5WPWQdBSVkKy5FTTRLUl7Dm3nuHao43xX1z5AVAHs=
Subject key identifier:   9D:C4:B1:D5:DA:79:58:E4:56:02:4B:55:BE:AE:25:D2:2B:29:6A:61
Certificate issuer:       /CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
Certificate serial:       14FDF27AE0C1FED2215685EBBD22D5D0E44D1902
Authority key identifier: 59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa
Signing time:             Tue 05 Mar 2024 18:17:20 +0000
ROA not before:           Tue 05 Mar 2024 18:12:20 +0000
ROA not after:            Tue 04 Mar 2025 18:17:20 +0000
asID:                     264635
IP address blocks:        167.249.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fd:f2:7a:e0:c1:fe:d2:21:56:85:eb:bd:22:d5:d0:e4:4d:19:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59A4FF40C45E2884AC4C181079D0846DC88152FA
        Validity
            Not Before: Mar  5 18:12:20 2024 GMT
            Not After : Mar  4 18:17:20 2025 GMT
        Subject: CN=9DC4B1D5DA7958E456024B55BEAE25D22B296A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:fb:fc:fd:d9:e6:79:b0:8c:c6:57:44:f2:
                    cc:48:bb:ea:82:87:d6:fe:45:98:6c:90:01:cf:4b:
                    81:42:f7:ed:67:ed:b5:f8:b8:0c:5c:28:43:91:e7:
                    73:31:d9:ea:60:bf:62:39:50:a1:34:41:74:94:b5:
                    7e:22:29:94:36:92:68:b2:4f:1e:98:dc:47:4e:ea:
                    ff:da:50:5b:af:e5:2e:77:3b:18:82:bb:d6:36:02:
                    2c:45:70:1a:93:9c:45:bf:4f:1a:c3:c8:9a:1e:1c:
                    95:40:05:72:5c:1e:b0:6d:5a:ab:29:6a:9c:4f:c4:
                    db:d0:4b:37:78:fd:15:5b:39:77:86:51:01:54:50:
                    d2:fb:89:7d:58:08:78:74:b5:e2:04:63:7c:c8:d4:
                    77:e1:7a:b1:0c:99:48:f9:89:40:63:b3:55:41:9b:
                    72:0b:f2:a2:36:8d:01:02:d8:db:6e:7e:48:f8:bf:
                    60:9e:d8:e8:79:90:0f:81:6c:43:72:da:00:bc:8d:
                    cc:98:fa:14:82:bb:42:e5:5c:e9:20:ca:84:e5:8e:
                    80:92:f7:22:90:88:94:b3:ec:54:f2:60:a1:7e:26:
                    72:39:e1:dd:37:87:fc:52:98:75:32:07:30:80:2b:
                    f5:52:c6:80:b8:bd:4e:7b:e0:a3:c2:5e:95:c1:b2:
                    f2:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C4:B1:D5:DA:79:58:E4:56:02:4B:55:BE:AE:25:D2:2B:29:6A:61
            X509v3 Authority Key Identifier:
                keyid:59:A4:FF:40:C4:5E:28:84:AC:4C:18:10:79:D0:84:6D:C8:81:52:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/59A4FF40C45E2884AC4C181079D0846DC88152FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91076D605524CF64D209FB2E0511C9A1D151C25B0F475DC704B17CAE56789A44/0/3136372e3234392e32302e302f32322d3234203d3e20323634363335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:d3:e5:cc:90:04:70:13:5e:51:ec:c5:bd:c9:e1:6f:a5:
         dd:0b:b1:87:9d:72:b1:4b:6d:32:56:60:d7:32:19:73:ad:d4:
         01:df:79:d5:98:fd:0d:f7:51:a5:65:4a:4b:91:56:a7:38:4f:
         11:17:f6:03:4e:5a:8f:6e:05:9c:b4:bd:b5:f6:16:b6:2b:63:
         b8:7e:02:bb:6e:79:bb:30:4e:2f:89:a2:ab:92:70:4a:78:32:
         97:f8:b0:f8:d2:1d:f1:6b:91:ee:83:b3:3e:a6:c9:63:2a:26:
         c4:21:8e:75:b8:0a:d1:9d:bc:b0:fd:13:56:a9:4f:d9:10:42:
         2c:ce:97:e7:27:62:06:04:0a:2a:09:ef:48:02:23:b2:14:cc:
         32:22:5e:03:ae:34:cb:97:97:6a:bb:fa:b6:8c:77:d0:7b:af:
         7a:31:cd:b6:b6:de:2b:ac:b4:ca:4a:18:29:2b:74:db:44:82:
         87:67:fe:d2:ee:e2:f2:b6:8d:d2:e7:60:36:76:73:a8:8a:1c:
         00:9b:18:1e:f4:f4:d6:02:e8:ef:8f:29:c0:a4:0e:4b:dd:e1:
         2b:00:2c:2c:fe:35:98:5d:b5:50:05:15:0b:51:34:7b:60:c6:
         24:2c:c5:b9:b2:d2:d9:f8:3b:c5:0b:f0:c8:28:35:2a:63:bb:
         cb:c6:87:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 01:20:22 2024 by rpki-client on console-ams.rpki-client.org