Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
File:                     3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier:          TVshWrMVGo3bPKYvQeHfMtl1noKRV555NfDnmf5BT/8=
Subject key identifier:   37:E8:2D:6E:1A:2C:8B:4F:06:20:05:CA:E4:1B:F8:80:2E:9F:29:48
Certificate issuer:       /CN=089B798E1BD051786195E5F9D02238D550A5EAD7
Certificate serial:       23FCF37CA1D4F0ACDA719CA31C359E6F46687536
Authority key identifier: 08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa
Signing time:             Tue 05 Mar 2024 18:08:03 +0000
ROA not before:           Tue 05 Mar 2024 18:03:03 +0000
ROA not after:            Tue 04 Mar 2025 18:08:03 +0000
asID:                     52468
IP address blocks:        170.244.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:fc:f3:7c:a1:d4:f0:ac:da:71:9c:a3:1c:35:9e:6f:46:68:75:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=089B798E1BD051786195E5F9D02238D550A5EAD7
        Validity
            Not Before: Mar  5 18:03:03 2024 GMT
            Not After : Mar  4 18:08:03 2025 GMT
        Subject: CN=37E82D6E1A2C8B4F062005CAE41BF8802E9F2948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a5:d2:3d:e3:32:3a:f4:10:05:3f:0a:54:a2:
                    1e:08:27:c6:e9:af:c6:25:5a:78:d2:df:33:c9:96:
                    ac:39:24:85:be:94:35:a6:a4:c8:8b:96:ae:d6:c3:
                    60:fe:de:35:29:ca:59:55:fd:f9:1e:a7:69:d2:f0:
                    d6:60:a0:6a:9b:2c:80:73:14:f5:94:69:c9:8f:42:
                    a1:68:93:52:9b:29:b6:27:96:c0:40:42:19:a5:30:
                    5f:fc:1b:7f:f5:77:20:45:53:c1:45:74:7b:dd:26:
                    bf:e4:ad:d3:c8:bc:87:2e:67:41:1d:5c:03:ff:55:
                    76:cb:b6:fe:77:36:a5:89:fd:a0:b4:c6:cf:72:3e:
                    78:55:84:df:2e:c3:92:fd:68:ea:eb:99:8a:58:07:
                    49:19:20:ba:0c:b4:e0:06:99:b9:d0:b2:b1:67:ab:
                    c0:a7:08:96:3d:4f:53:c6:34:c4:e1:f3:12:7d:d0:
                    e2:84:a6:f4:ce:73:5f:b0:cb:70:1b:a9:08:d7:03:
                    d3:6b:8f:a4:f7:ee:a0:8c:b4:2f:2d:26:2d:c8:99:
                    61:e2:93:1f:b6:e8:3a:c8:83:d5:c2:42:45:7c:d8:
                    c5:b7:84:5b:8e:b1:d8:b3:0b:d9:cc:ba:cf:58:07:
                    43:84:4c:47:79:d3:ed:c8:da:b0:da:93:f3:0c:4e:
                    b0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E8:2D:6E:1A:2C:8B:4F:06:20:05:CA:E4:1B:F8:80:2E:9F:29:48
            X509v3 Authority Key Identifier:
                keyid:08:9B:79:8E:1B:D0:51:78:61:95:E5:F9:D0:22:38:D5:50:A5:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/089B798E1BD051786195E5F9D02238D550A5EAD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/089B798E1BD051786195E5F9D02238D550A5EAD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91F3C1ECF874A453A4947E40E8F04A99F468AD3BF17A8132380702EE8748718C/0/3137302e3234342e3230382e302f32322d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:4f:44:3b:eb:59:4b:03:8f:0b:f9:d2:9e:2a:8f:53:fe:2c:
         51:f1:fb:87:ba:46:ad:71:dc:49:4a:9a:5e:44:a6:0e:91:e8:
         95:fb:fa:44:a0:87:76:a9:0c:a4:db:8e:c1:8c:18:9d:bd:8d:
         03:d6:25:99:24:92:f9:6f:92:86:31:ea:58:a1:25:9f:31:21:
         f7:2a:7a:81:5d:21:39:2a:c7:b3:01:d2:d4:f1:b3:99:f5:ec:
         65:4e:6e:e3:ec:e1:ba:26:28:8a:88:2e:f2:b9:1c:51:46:22:
         43:aa:56:3d:e4:73:6c:14:ee:f2:9d:fd:d3:ee:41:e9:85:13:
         fd:dc:7f:a7:27:fc:c8:1f:56:ce:71:c5:0c:8e:ca:e2:e0:d9:
         52:a2:7a:a1:00:8a:6e:1f:e9:90:a6:cc:c4:e5:31:84:c5:c5:
         90:bc:4a:d3:01:80:b6:4f:2b:d4:10:ae:90:7d:1e:0c:5e:e7:
         73:1d:06:4b:0c:c0:42:cb:3a:16:03:55:a1:f0:fe:6b:21:a8:
         1b:80:08:ed:32:1b:aa:0a:e5:b4:cc:67:5e:15:d1:96:ff:fd:
         3e:74:8b:8e:07:53:68:a0:f7:07:c3:35:dc:50:39:45:fd:3b:
         1a:e4:87:07:91:06:01:5c:65:bb:b2:1b:63:93:46:c5:c9:08:
         e8:ff:e4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org