Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323634383239.roa
File:                     3137302e38302e39362e302f32322d3234203d3e20323634383239.roa (raw, json)
Hash identifier:          YC4r65OFjn0XvRJfu2rB/0WB34U94ZJ242DjnKGIZto=
Subject key identifier:   69:04:7D:AF:B4:A7:1B:EC:07:25:ED:EE:2E:50:CD:17:B2:F8:5E:A7
Certificate issuer:       /CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0
Certificate serial:       4BBE127B8167ABFC7DA0C4E774925D43F90E65EC
Authority key identifier: 5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323634383239.roa
Signing time:             Tue 05 Mar 2024 18:04:43 +0000
ROA not before:           Tue 05 Mar 2024 17:59:43 +0000
ROA not after:            Tue 04 Mar 2025 18:04:43 +0000
asID:                     264829
IP address blocks:        170.80.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 01 Jun 2024 05:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:be:12:7b:81:67:ab:fc:7d:a0:c4:e7:74:92:5d:43:f9:0e:65:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0
        Validity
            Not Before: Mar  5 17:59:43 2024 GMT
            Not After : Mar  4 18:04:43 2025 GMT
        Subject: CN=69047DAFB4A71BEC0725EDEE2E50CD17B2F85EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:cf:71:b9:7b:14:f1:75:ef:1f:40:c7:24:
                    7a:19:9f:a4:b4:9c:86:05:2e:94:f4:87:38:c1:a4:
                    41:2d:b5:87:da:39:5a:06:cb:49:cf:06:e4:f4:e6:
                    a4:17:b1:e1:b2:c3:52:15:64:52:10:5e:ff:17:13:
                    4e:67:be:97:89:d1:31:eb:ce:5e:38:24:ad:71:c3:
                    f5:af:33:f8:eb:1f:d2:04:25:b3:38:cf:b5:9f:86:
                    c8:c9:94:00:30:72:20:c1:33:14:d1:a6:81:2f:96:
                    48:24:5a:97:1b:39:73:c5:a1:16:9e:68:b1:6e:48:
                    60:51:b1:a5:6c:26:b8:6d:ee:88:39:76:0d:13:56:
                    d3:04:80:da:3f:01:4a:55:b2:e9:03:75:27:28:6b:
                    13:a7:37:92:5f:ed:e7:dc:17:a3:ff:98:a2:c0:7a:
                    91:59:ca:10:40:30:db:35:1a:ab:91:09:fc:0b:80:
                    8d:19:48:e7:8c:d2:bf:48:e6:e3:de:a5:08:70:3f:
                    0b:70:9a:14:16:00:00:f7:e3:6a:e9:64:87:d3:56:
                    f6:4c:6a:67:36:28:5a:52:3e:b9:04:f5:70:70:25:
                    bc:23:9d:0d:44:f0:90:e1:34:7e:c3:8d:a5:b0:6a:
                    0b:7c:27:3b:e9:f8:4e:6a:5f:bf:0e:ad:d1:c8:9d:
                    f3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:04:7D:AF:B4:A7:1B:EC:07:25:ED:EE:2E:50:CD:17:B2:F8:5E:A7
            X509v3 Authority Key Identifier:
                keyid:5E:12:23:CC:9D:CD:0E:1E:40:AC:E1:5A:1E:34:93:DE:1B:6B:4D:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E1223CC9DCD0E1E40ACE15A1E3493DE1B6B4DC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A585C5CC7E596C06F7E4F7EF44AFEB111827847B239A53FB6479F44AA6BE4C92/0/3137302e38302e39362e302f32322d3234203d3e20323634383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:fa:36:fd:45:fc:d2:6c:7f:a6:6b:24:ba:95:a2:d2:3f:
         95:1d:5a:79:43:71:a8:62:f9:60:b6:64:6f:b1:49:e4:89:5e:
         2a:f8:69:bf:ca:90:0c:d2:e8:af:f8:98:eb:5f:99:26:16:35:
         e0:fe:5a:55:4a:a2:58:69:3f:8a:0f:60:99:ea:ef:54:1b:e2:
         23:c2:a8:da:bb:9c:49:9a:a0:31:7b:ca:51:e2:b5:f8:1b:74:
         09:be:7a:8e:f6:4f:cc:9e:7a:60:e5:20:57:2e:f8:73:c0:75:
         44:ae:7a:53:ac:81:21:38:1e:67:91:bb:da:6c:a8:d5:91:4d:
         a1:f2:6a:9c:fd:a3:1c:fb:8a:ed:1b:d2:37:24:a0:4c:75:bb:
         28:f9:e4:6e:db:f2:ec:4f:0a:78:54:06:a1:fb:04:47:18:56:
         7e:0a:e8:d3:5d:5f:cf:a7:1d:b3:8d:ff:1b:78:a5:2b:d0:7d:
         4b:1e:4a:a7:f8:86:3e:3a:c0:4c:bc:a5:a5:38:cf:0f:d1:7d:
         19:17:bf:4d:56:23:cf:c9:93:8a:03:c6:85:43:0d:db:70:9a:
         44:39:62:61:ba:49:e7:6d:43:2d:5b:dc:cb:b8:df:33:53:da:
         e6:f1:b5:fe:a1:df:fa:82:94:47:22:b4:3e:e4:1e:a4:63:c6:
         16:ad:78:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:28:50 2024 by rpki-client on console-ams.rpki-client.org