Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa
File:                     3137302e38332e33322e302f32322d3233203d3e203631353039.roa (raw, json)
Hash identifier:          J37Sm5KyIdHpdBabXoPyN+tOOxgSKL2yEKm+YVzB9OY=
Subject key identifier:   88:4A:37:3F:64:2C:CE:EF:64:AF:25:29:29:04:F2:7F:08:09:76:47
Certificate issuer:       /CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
Certificate serial:       5AA47EBD4A40D17DBE2B825B3827CA8EFAF0CD1D
Authority key identifier: 9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa
Signing time:             Tue 05 Mar 2024 17:59:45 +0000
ROA not before:           Tue 05 Mar 2024 17:54:45 +0000
ROA not after:            Tue 04 Mar 2025 17:59:45 +0000
asID:                     61509
IP address blocks:        170.83.32.0/22 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:7e:bd:4a:40:d1:7d:be:2b:82:5b:38:27:ca:8e:fa:f0:cd:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BBA3BFFF1467438CC1F9854758F6F54EFD08115
        Validity
            Not Before: Mar  5 17:54:45 2024 GMT
            Not After : Mar  4 17:59:45 2025 GMT
        Subject: CN=884A373F642CCEEF64AF25292904F27F08097647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:48:bf:01:22:a0:33:52:56:8f:af:0a:38:
                    8b:40:7c:09:bb:75:53:2b:6d:2a:45:dc:12:b1:15:
                    95:c5:af:cc:77:c3:0a:e2:0c:f5:3e:44:ae:f4:4b:
                    ae:d0:e0:f7:8c:9c:8c:0a:53:fc:84:62:bc:24:b0:
                    a2:4c:7f:39:e5:5a:c8:70:18:8c:e4:81:48:36:3e:
                    48:24:bf:95:6d:88:e5:a0:55:bc:f9:da:80:81:a4:
                    11:a1:b7:2e:26:df:2b:4e:ba:c4:ba:88:39:12:dd:
                    12:b0:2b:12:e4:bc:8e:06:ed:39:fa:75:0b:1e:0d:
                    16:93:c8:cc:fc:fa:9b:08:bb:a0:6b:f8:fb:63:03:
                    62:0e:29:48:bc:63:85:68:a1:ac:52:3a:a9:5a:25:
                    b9:5d:be:79:19:10:10:48:73:59:cb:21:b8:40:80:
                    55:ae:f7:e4:e3:43:96:5f:61:8d:28:2e:81:95:15:
                    fd:0e:76:a9:47:35:4c:50:f6:77:67:5d:5a:05:8f:
                    6f:c3:50:83:71:de:f6:52:2e:80:88:af:5c:53:78:
                    d1:05:4c:e7:f6:13:e8:10:8a:5d:34:d4:92:48:b3:
                    ce:70:18:f9:0f:a6:4a:f3:60:e0:52:d9:e8:c9:db:
                    35:3b:10:24:1c:29:b9:a9:61:99:30:55:7d:d5:c8:
                    d5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4A:37:3F:64:2C:CE:EF:64:AF:25:29:29:04:F2:7F:08:09:76:47
            X509v3 Authority Key Identifier:
                keyid:9B:BA:3B:FF:F1:46:74:38:CC:1F:98:54:75:8F:6F:54:EF:D0:81:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9BBA3BFFF1467438CC1F9854758F6F54EFD08115.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9965A621DAEB761DA1B423250742C538C2537DC7D1C2C6B04A23C860ED1FDAFD/0/3137302e38332e33322e302f32322d3233203d3e203631353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b0:47:c2:96:8a:5f:e1:09:e1:28:dc:30:9f:0c:71:be:4f:99:
         5b:cb:af:ca:22:c2:b9:47:66:ea:bc:43:00:17:a8:0e:fd:1c:
         57:35:74:3e:35:54:37:be:a0:bc:3b:2f:d6:d0:ec:db:4d:31:
         d0:99:fa:c8:f9:46:25:a7:98:e4:e2:04:52:91:80:39:c4:2f:
         75:bd:f1:90:b8:16:da:04:2c:59:08:27:0e:dd:65:da:6d:94:
         e7:1a:5f:53:8c:a5:05:60:db:b9:a3:50:5a:30:02:8c:c8:ec:
         74:27:79:8c:f0:65:f9:cc:0a:f2:d5:89:74:36:ee:37:d1:78:
         4a:87:69:19:2a:e6:85:04:8b:7b:9c:cc:b2:8e:92:31:d8:77:
         3e:8f:2d:20:d2:19:ab:45:1e:89:61:24:e8:cc:02:b4:c0:b9:
         6d:94:8c:1e:3d:b2:bd:82:71:bc:77:7a:75:88:27:d0:c1:3e:
         7c:01:2b:49:6f:ed:a1:ae:27:86:27:aa:4b:b4:bd:ef:22:08:
         0c:31:39:e3:82:fd:b0:c8:4f:f8:03:39:b3:f9:dd:c5:65:5d:
         97:5b:d0:62:e5:92:68:10:d2:62:5f:53:c4:26:09:b0:62:59:
         fd:f8:d8:3d:0d:aa:c6:50:35:78:b5:15:de:16:11:71:5e:4f:
         79:c9:e9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:30 2024 by rpki-client on console-ams.rpki-client.org