Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323632313931.roa
File:                     3137302e38302e39362e302f32322d3234203d3e20323632313931.roa (raw, json)
Hash identifier:          uXbrNq56WJe9QKCkrFXCmBg4wv7IW2/7584lTt+oSXs=
Subject key identifier:   E7:4D:47:D9:0D:46:65:6A:E9:0D:E9:4A:05:07:6C:9D:E6:47:66:7F
Certificate issuer:       /CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0
Certificate serial:       1E66A6D8AEE8EA0A9BA8569D994867BAC610BA25
Authority key identifier: 5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:04:43 +0000
ROA not before:           Tue 05 Mar 2024 17:59:43 +0000
ROA not after:            Tue 04 Mar 2025 18:04:43 +0000
asID:                     262191
IP address blocks:        170.80.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:66:a6:d8:ae:e8:ea:0a:9b:a8:56:9d:99:48:67:ba:c6:10:ba:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0
        Validity
            Not Before: Mar  5 17:59:43 2024 GMT
            Not After : Mar  4 18:04:43 2025 GMT
        Subject: CN=E74D47D90D46656AE90DE94A05076C9DE647667F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f9:43:43:bf:92:02:a6:22:ab:59:2d:d9:d4:
                    cc:69:59:89:7a:28:89:ee:6c:7e:5e:a3:4e:dc:00:
                    b7:c5:04:ff:41:0b:a9:d3:3f:96:e6:d3:a4:b3:2d:
                    44:24:10:5b:1f:32:19:06:b6:4b:1d:4c:98:8c:45:
                    6c:14:5d:31:3c:16:29:36:6a:07:f2:9b:fe:4d:a4:
                    e3:95:29:81:7a:71:c0:67:63:26:93:5a:56:25:f7:
                    1b:8d:b7:a2:24:39:28:8a:8c:47:f1:e2:51:20:66:
                    9f:09:82:19:52:c9:7f:6d:5a:bf:26:44:59:6c:43:
                    81:28:05:28:90:cb:dc:eb:69:46:7f:32:15:d5:aa:
                    99:26:35:66:be:c6:10:79:d1:e3:19:bb:6f:5d:b0:
                    e2:df:b4:70:9d:d4:d1:85:95:5f:94:ea:65:dc:82:
                    42:7d:19:0f:a7:0f:fc:31:6a:70:35:0d:b2:8f:76:
                    61:c6:53:16:65:34:d9:4c:13:22:46:cb:85:4c:55:
                    7c:a8:19:30:9c:39:e9:7c:1c:36:b1:7f:76:b7:41:
                    ad:c9:49:a2:01:0f:48:ba:55:c0:b6:57:46:36:ec:
                    94:6d:05:a4:8f:60:7f:f1:4c:50:64:9d:c3:cf:fa:
                    7d:d0:50:82:31:de:1c:81:a2:2b:dc:b8:7e:69:0e:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:47:D9:0D:46:65:6A:E9:0D:E9:4A:05:07:6C:9D:E6:47:66:7F
            X509v3 Authority Key Identifier:
                keyid:5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:13:26:80:e5:be:5a:90:9f:26:9e:4a:81:da:46:9a:27:90:
         21:d7:75:cf:6a:29:31:72:43:57:4d:92:aa:3b:7b:74:d0:02:
         29:3a:4d:2e:f4:b7:89:f9:9e:6a:db:c1:61:33:57:73:85:14:
         94:ab:87:02:03:8d:8d:45:79:3f:ff:91:1a:0a:36:b0:fc:bd:
         6b:af:84:8a:18:3c:0e:25:51:9a:4b:e3:b1:17:65:be:03:02:
         a8:ea:3e:0c:56:f9:a7:c7:50:3c:2d:69:19:91:f8:21:10:f2:
         be:2c:c0:b7:11:b1:75:6c:f6:15:34:c9:11:50:b1:5f:9f:5e:
         f5:21:f6:68:5c:98:59:0d:17:06:25:bf:2a:df:f1:48:2d:21:
         78:39:81:1f:04:83:06:25:11:70:9a:31:7d:03:c3:0a:b6:f9:
         f0:c6:40:08:63:8d:54:78:c9:77:1b:55:ca:5a:a0:fc:ef:77:
         bb:b6:15:24:63:fb:65:08:39:71:cf:14:35:3d:b0:a1:03:f8:
         cb:e1:71:db:6c:c2:70:53:1d:10:a6:eb:81:68:69:42:2d:f2:
         46:60:ba:75:be:4b:bc:16:0f:96:2e:0a:0b:05:7b:e2:62:37:
         0b:fe:df:d1:3f:05:19:3b:cb:47:55:3d:54:3b:dd:5b:da:30:
         c0:16:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:56 2024 by rpki-client on console-fra.rpki-client.org