Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
File:                     3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa (raw, json)
Hash identifier:          aDnn5MB8ebvduAzWt+LdZu7toIj8iMqCzMo9bGUptEA=
Subject key identifier:   AC:B3:35:3C:B7:5A:4D:EF:BF:E5:64:E8:14:02:F8:D1:5F:17:CC:1D
Certificate issuer:       /CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
Certificate serial:       5A50EBCE6BC16A06122E927CB75FE63BEEFA374F
Authority key identifier: 9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa
Signing time:             Tue 05 Mar 2024 17:44:44 +0000
ROA not before:           Tue 05 Mar 2024 17:39:44 +0000
ROA not after:            Tue 04 Mar 2025 17:44:44 +0000
asID:                     27843
IP address blocks:        170.254.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:50:eb:ce:6b:c1:6a:06:12:2e:92:7c:b7:5f:e6:3b:ee:fa:37:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F08D38D4571C09A83B45ACFD10AEB7826CE8F84
        Validity
            Not Before: Mar  5 17:39:44 2024 GMT
            Not After : Mar  4 17:44:44 2025 GMT
        Subject: CN=ACB3353CB75A4DEFBFE564E81402F8D15F17CC1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:44:2d:66:d9:4e:ac:f2:83:ed:90:4b:a2:f5:
                    3a:08:95:89:43:55:56:8f:a4:00:43:83:de:25:d7:
                    79:02:be:67:30:d2:07:43:95:7a:1a:72:e7:a4:64:
                    71:60:9b:87:96:d2:7c:ce:0f:02:30:b3:69:4f:1e:
                    3c:f3:fb:df:5f:30:53:b3:6d:4c:ce:31:2a:90:e3:
                    25:2e:d6:0f:b2:2d:1d:7c:9b:5f:fd:9d:41:c4:cf:
                    d4:6d:1e:8e:ba:34:1c:a3:7c:a1:73:f5:0d:6a:b4:
                    43:b5:80:8b:12:f6:91:bd:56:b4:80:32:ae:36:65:
                    e5:e9:c5:89:68:c7:cc:30:df:b2:5e:06:29:cd:1e:
                    5b:6b:ad:a9:4e:fe:24:00:89:e7:fb:ce:9e:4e:d0:
                    6a:34:78:3e:e2:f7:e5:55:54:d8:15:08:cf:e2:93:
                    fc:b7:0a:33:2a:03:25:59:29:a8:78:b0:c3:4b:29:
                    5f:80:f7:4b:db:71:3a:03:64:8a:70:f7:bb:55:2d:
                    a1:a2:d7:79:9f:47:8b:48:00:f3:f3:60:22:66:bb:
                    e9:73:eb:45:7b:22:54:7a:1e:a0:50:7a:0a:4d:3f:
                    91:71:e7:2e:d1:0d:00:f1:78:8c:8f:09:ef:fe:46:
                    de:de:1a:46:8a:6a:45:13:cf:bf:ac:0c:22:19:9c:
                    59:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B3:35:3C:B7:5A:4D:EF:BF:E5:64:E8:14:02:F8:D1:5F:17:CC:1D
            X509v3 Authority Key Identifier:
                keyid:9F:08:D3:8D:45:71:C0:9A:83:B4:5A:CF:D1:0A:EB:78:26:CE:8F:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F08D38D4571C09A83B45ACFD10AEB7826CE8F84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A16E8F103146B2850335023A70A6D39874766368DBDA5F048D55972B98FD8367/0/3137302e3235342e3233322e302f32322d3234203d3e203237383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:3b:12:0e:da:dc:ae:83:cf:41:dd:0c:01:e7:0d:4a:e7:7e:
         e0:94:01:f4:3e:73:1c:7d:08:ba:76:13:ef:47:01:b4:35:36:
         1e:80:f6:81:29:2a:9b:46:72:f2:ba:df:0c:86:46:f1:6e:1d:
         4c:5d:28:84:9d:22:8d:3d:09:cb:f8:fd:7e:02:82:2b:82:a4:
         4e:43:f4:45:c0:40:94:ba:29:10:6f:ad:15:cf:44:88:56:3a:
         e4:83:09:49:57:21:6f:63:fd:c7:82:97:d6:d9:0e:bf:0e:56:
         53:f0:69:12:7d:4f:94:30:0c:cb:44:30:7e:14:a0:80:31:04:
         80:76:8e:cb:d0:69:24:3a:bb:a6:c3:30:fe:b9:e2:9b:41:25:
         9c:fb:d9:1b:de:ef:f6:e0:0d:e7:3d:20:30:14:1a:43:7c:a8:
         e7:91:81:12:a9:8f:43:9d:92:51:47:a3:ed:8d:0c:ab:b7:97:
         25:f7:e5:14:e0:b6:2b:96:62:29:56:7f:a5:90:9f:d3:88:f3:
         d2:af:19:db:f2:c6:7a:8e:1f:4c:69:30:00:33:0c:34:53:64:
         52:77:db:6f:68:c2:52:69:18:ab:49:9a:8b:a4:d6:26:ca:ff:
         f0:91:57:62:3f:84:ec:be:b3:3d:e4:3c:db:ce:44:84:4c:17:
         30:54:c0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:49 2024 by rpki-client on console-ams.rpki-client.org