Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e20323634363638.roa
File:                     3137302e38322e3135362e302f32322d3234203d3e20323634363638.roa (raw, json)
Hash identifier:          ctAMnnKn+ZZ/LOvTRDd7laRy/t1aWVZ7JYT2lfuSZvc=
Subject key identifier:   6B:5A:15:A8:EB:A5:BD:74:FA:EE:32:E3:85:39:C7:39:1D:01:17:A6
Certificate issuer:       /CN=04D30653956EB19B20571B774DBED43F32A8824E
Certificate serial:       3392B903346B4CBEDD0F8B1878E80063B4B2A521
Authority key identifier: 04:D3:06:53:95:6E:B1:9B:20:57:1B:77:4D:BE:D4:3F:32:A8:82:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04D30653956EB19B20571B774DBED43F32A8824E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e20323634363638.roa
Signing time:             Tue 05 Mar 2024 17:41:35 +0000
ROA not before:           Tue 05 Mar 2024 17:36:35 +0000
ROA not after:            Tue 04 Mar 2025 17:41:35 +0000
asID:                     264668
IP address blocks:        170.82.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/04D30653956EB19B20571B774DBED43F32A8824E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/04D30653956EB19B20571B774DBED43F32A8824E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04D30653956EB19B20571B774DBED43F32A8824E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:92:b9:03:34:6b:4c:be:dd:0f:8b:18:78:e8:00:63:b4:b2:a5:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04D30653956EB19B20571B774DBED43F32A8824E
        Validity
            Not Before: Mar  5 17:36:35 2024 GMT
            Not After : Mar  4 17:41:35 2025 GMT
        Subject: CN=6B5A15A8EBA5BD74FAEE32E38539C7391D0117A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:bb:44:b6:39:45:83:e2:3b:81:5b:bc:4e:
                    8a:cd:08:36:f8:30:01:4f:c1:75:3d:84:3e:a6:7f:
                    9f:e8:e3:e7:ff:37:a1:3c:a1:01:08:14:84:50:27:
                    25:d4:15:ce:15:80:01:5d:f5:5b:31:b2:da:87:35:
                    dc:b2:cd:4c:97:e4:4d:1f:b9:51:05:18:3d:9e:aa:
                    b1:6a:78:3f:38:f5:d1:63:58:55:ca:0d:ff:74:8c:
                    c5:6e:c6:83:0a:0b:0b:e0:00:40:81:4a:24:02:22:
                    87:a5:af:2c:25:07:ff:7d:79:b0:a4:21:8c:fe:41:
                    35:f4:0c:30:df:66:7f:5a:ae:a6:8b:1f:63:38:50:
                    08:ce:48:ef:24:7a:ff:1c:9a:29:6c:4e:b3:8f:87:
                    22:d5:73:af:da:71:75:8c:e2:9c:34:6c:ea:7a:c7:
                    49:0d:ad:2b:b9:59:6e:7d:94:47:c8:b0:f6:74:4f:
                    91:32:4f:11:14:4c:d1:55:d4:e5:8c:f7:95:c5:5c:
                    cf:f6:7d:49:96:68:2c:9b:8a:08:16:35:56:5d:f7:
                    27:d3:29:35:4b:07:2f:dc:b1:0f:b3:55:1c:8c:38:
                    c2:c8:81:76:34:c6:72:52:dd:09:a2:62:b7:95:82:
                    94:37:d7:0c:09:d3:d0:87:d9:a6:12:d3:17:16:fc:
                    b7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5A:15:A8:EB:A5:BD:74:FA:EE:32:E3:85:39:C7:39:1D:01:17:A6
            X509v3 Authority Key Identifier:
                keyid:04:D3:06:53:95:6E:B1:9B:20:57:1B:77:4D:BE:D4:3F:32:A8:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/04D30653956EB19B20571B774DBED43F32A8824E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04D30653956EB19B20571B774DBED43F32A8824E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93C2E4031050C2D10ED8B812E317448BC2C683B4C5CB73E9F5D9F02F74A1B3F1/0/3137302e38322e3135362e302f32322d3234203d3e20323634363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:4d:e8:f9:5a:bd:c8:64:76:8b:d2:cb:a7:8a:a0:86:40:f0:
         08:46:09:45:f0:99:37:c9:67:51:81:d3:ac:d6:01:da:bf:d1:
         5e:01:40:8b:2b:75:2a:45:f5:32:b7:d1:88:e1:33:fa:f1:31:
         43:ef:52:6b:23:e3:9f:e3:eb:ab:70:26:33:da:ae:0a:2c:e7:
         96:74:70:5a:7d:80:bb:ad:e2:5f:60:06:75:2a:96:fd:2a:d4:
         b8:7c:11:36:d4:a7:e7:b5:f9:ad:60:08:3e:c0:cf:0e:3c:08:
         1e:29:e0:1d:ab:ee:15:15:59:8b:02:ff:74:c9:b0:38:c0:a7:
         42:f1:cc:75:88:cf:95:45:2c:ec:12:42:84:04:df:b3:7b:a4:
         44:78:5a:31:6d:f8:63:22:03:c8:93:6d:5f:90:87:14:5c:66:
         fc:09:eb:f3:71:85:e1:c1:bd:41:2a:ef:ab:ed:4c:2a:56:7d:
         7c:64:be:a9:67:72:8a:90:6e:06:06:5e:55:a3:7e:c8:2c:88:
         d6:28:1d:ad:3e:37:13:5b:db:aa:20:9b:37:8a:09:be:c0:54:
         86:89:86:68:e2:39:e5:e8:d8:d9:28:71:8a:a2:df:d0:2d:c5:
         ab:4d:d8:72:39:6c:22:8f:a0:e4:2c:c6:1d:92:f2:80:11:0e:
         3f:88:1a:ce
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUM5K5AzRrTL7dD4sYeOgAY7SypSEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDREMzA2NTM5NTZFQjE5QjIwNTcxQjc3NERCRUQ0M0Yz
MkE4ODI0RTAeFw0yNDAzMDUxNzM2MzVaFw0yNTAzMDQxNzQxMzVaMDMxMTAvBgNV
BAMTKDZCNUExNUE4RUJBNUJENzRGQUVFMzJFMzg1MzlDNzM5MUQwMTE3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7VrtEtjlFg+I7gVu8TorNCDb4
MAFPwXU9hD6mf5/o4+f/N6E8oQEIFIRQJyXUFc4VgAFd9VsxstqHNdyyzUyX5E0f
uVEFGD2eqrFqeD849dFjWFXKDf90jMVuxoMKCwvgAECBSiQCIoelrywlB/99ebCk
IYz+QTX0DDDfZn9arqaLH2M4UAjOSO8kev8cmilsTrOPhyLVc6/acXWM4pw0bOp6
x0kNrSu5WW59lEfIsPZ0T5EyTxEUTNFV1OWM95XFXM/2fUmWaCybiggWNVZd9yfT
KTVLBy/csQ+zVRyMOMLIgXY0xnJS3QmiYreVgpQ31wwJ09CH2aYS0xcW/Lf3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa1oVqOulvXT67jLjhTnHOR0BF6YwHwYDVR0j
BBgwFoAUBNMGU5VusZsgVxt3Tb7UPzKogk4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85M0MyRTQwMzEwNTBDMkQxMEVEOEI4MTJFMzE3NDQ4QkMy
QzY4M0I0QzVDQjczRTlGNUQ5RjAyRjc0QTFCM0YxLzAvMDREMzA2NTM5NTZFQjE5
QjIwNTcxQjc3NERCRUQ0M0YzMkE4ODI0RS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wNEQzMDY1Mzk1NkVCMTlCMjA1
NzFCNzc0REJFRDQzRjMyQTg4MjRFLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTNDMkU0MDMxMDUwQzJEMTBFRDhCODEyRTMxNzQ0OEJDMkM2ODNCNEM1
Q0I3M0U5RjVEOUYwMkY3NEExQjNGMS8wLzMxMzczMDJlMzgzMjJlMzEzNTM2MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzYzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlKc
MA0GCSqGSIb3DQEBCwUAA4IBAQCoTej5Wr3IZHaL0suniqCGQPAIRglF8Jk3yWdR
gdOs1gHav9FeAUCLK3UqRfUyt9GI4TP68TFD71JrI+Of4+urcCYz2q4KLOeWdHBa
fYC7reJfYAZ1Kpb9KtS4fBE21KfntfmtYAg+wM8OPAgeKeAdq+4VFVmLAv90ybA4
wKdC8cx1iM+VRSzsEkKEBN+ze6REeFoxbfhjIgPIk21fkIcUXGb8CevzcYXhwb1B
Ku+r7UwqVn18ZL6pZ3KKkG4GBl5Vo37ILIjWKB2tPjcTW9uqIJs3igm+wFSGiYZo
4jnl6NjZKHGKot/QLcWrTdhyOWwij6DkLMYdkvKAEQ4/iBrO
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:18 2024 by rpki-client on console-ams.rpki-client.org