Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa
File:                     3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa (raw, json)
Hash identifier:          KTPv3f+vr29EqVblKx9xJj1GGnp8++NpSaq66kFDWTo=
Subject key identifier:   7B:D5:D3:5C:01:D3:26:C8:EE:24:1E:CD:8C:DC:52:DE:06:FC:E0:13
Certificate issuer:       /CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
Certificate serial:       28968140471E0AC9D220D229C29945289A4C9E47
Authority key identifier: 21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 17:56:36 +0000
ROA not before:           Tue 05 Mar 2024 17:51:36 +0000
ROA not after:            Tue 04 Mar 2025 17:56:36 +0000
asID:                     262589
IP address blocks:        170.238.236.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:96:81:40:47:1e:0a:c9:d2:20:d2:29:c2:99:45:28:9a:4c:9e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA
        Validity
            Not Before: Mar  5 17:51:36 2024 GMT
            Not After : Mar  4 17:56:36 2025 GMT
        Subject: CN=7BD5D35C01D326C8EE241ECD8CDC52DE06FCE013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ac:ed:0f:45:57:89:3c:76:88:a8:9c:da:03:
                    85:83:36:b2:2a:76:c1:b5:00:b7:c1:a0:30:a7:67:
                    fd:5e:28:74:1b:0a:bc:3d:01:4a:bf:89:97:be:30:
                    86:b5:8a:ae:ab:41:74:54:2e:7e:14:2b:b1:55:47:
                    63:02:55:82:47:52:9f:8e:dd:b5:e0:23:57:63:b7:
                    d2:1d:54:3a:0d:f6:c5:d4:d1:28:56:b9:57:71:fe:
                    0d:4f:e8:dc:e0:06:61:d3:48:62:5e:93:7a:11:1c:
                    3a:b1:bf:43:83:f7:fc:b1:4d:19:57:62:03:cc:65:
                    84:3d:90:58:d7:7c:ac:65:30:04:38:03:17:4a:d1:
                    c8:3c:e1:b7:d9:57:54:39:3c:4d:08:82:ac:5b:4a:
                    d5:d1:f4:61:cc:0f:a0:6a:57:ba:6a:0c:18:ca:40:
                    86:ac:dc:c3:4f:02:39:f8:58:5d:f7:f7:8d:98:8b:
                    cf:db:97:98:e1:90:c8:3f:28:11:08:f2:f9:fa:8c:
                    b4:b7:9d:a5:86:e8:45:1f:f4:19:53:7f:4d:f3:88:
                    7b:55:4b:f3:d6:35:cc:93:7d:12:ea:e5:ab:41:84:
                    53:fd:4c:33:eb:69:84:a5:08:b0:4a:6c:a4:59:ed:
                    e2:02:7d:82:76:87:12:51:31:3b:a1:05:a7:35:a6:
                    7c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D5:D3:5C:01:D3:26:C8:EE:24:1E:CD:8C:DC:52:DE:06:FC:E0:13
            X509v3 Authority Key Identifier:
                keyid:21:9F:CB:A9:FF:EA:47:17:AB:F6:A9:EF:85:B7:C6:36:D9:D2:3B:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/219FCBA9FFEA4717ABF6A9EF85B7C636D9D23BEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A63E44195B15618226F93AF42A2D6CB52A6E73BC1D027C964ECD92A0216FF6D7/0/3137302e3233382e3233362e302f32322d3232203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0a:e6:17:9f:fa:24:2f:b5:b8:a7:43:a8:49:d4:1e:49:67:af:
         34:8d:61:69:80:cd:a1:76:e5:d9:b8:df:a6:66:6b:84:c5:b2:
         d4:8a:c6:eb:15:d9:d1:3a:12:b1:3c:bf:b8:c0:11:11:e3:7d:
         48:cf:a9:32:80:07:61:27:a8:7c:e0:14:98:d9:0b:a2:f8:3f:
         0f:50:61:bc:94:13:77:d7:cc:51:c6:91:27:b6:f0:22:fa:c9:
         ae:c5:79:b3:27:1c:d5:64:2a:cb:7f:00:72:18:c3:6e:61:e4:
         2d:32:0c:37:b0:07:ce:ac:28:ec:ae:75:01:98:26:97:b2:05:
         32:9a:28:78:26:ec:69:f7:c8:2a:23:23:03:01:b4:a4:1a:a7:
         20:32:1b:b4:42:7b:c3:b2:0c:84:e4:be:17:52:5a:7b:cc:41:
         d6:9e:4c:45:1e:95:56:ea:62:9e:cd:51:95:0f:74:53:ec:15:
         47:3a:88:e9:19:7e:bf:dc:8b:9f:79:01:e2:43:5a:7f:ab:ad:
         e5:63:c0:73:86:a4:1c:49:2e:73:ee:3e:5c:81:65:b9:11:36:
         0d:75:df:8b:4b:b6:65:85:f1:5a:b4:51:03:6c:94:1e:ec:1c:
         fc:b4:6a:df:73:65:a6:04:19:e7:9d:a2:5c:c2:71:f1:7b:7b:
         b7:0a:d2:ff
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUKJaBQEceCsnSINIpwplFKJpMnkcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE5RkNCQTlGRkVBNDcxN0FCRjZBOUVGODVCN0M2MzZE
OUQyM0JFQTAeFw0yNDAzMDUxNzUxMzZaFw0yNTAzMDQxNzU2MzZaMDMxMTAvBgNV
BAMTKDdCRDVEMzVDMDFEMzI2QzhFRTI0MUVDRDhDREM1MkRFMDZGQ0UwMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3rO0PRVeJPHaIqJzaA4WDNrIq
dsG1ALfBoDCnZ/1eKHQbCrw9AUq/iZe+MIa1iq6rQXRULn4UK7FVR2MCVYJHUp+O
3bXgI1djt9IdVDoN9sXU0ShWuVdx/g1P6NzgBmHTSGJek3oRHDqxv0OD9/yxTRlX
YgPMZYQ9kFjXfKxlMAQ4AxdK0cg84bfZV1Q5PE0IgqxbStXR9GHMD6BqV7pqDBjK
QIas3MNPAjn4WF33942Yi8/bl5jhkMg/KBEI8vn6jLS3naWG6EUf9BlTf03ziHtV
S/PWNcyTfRLq5atBhFP9TDPraYSlCLBKbKRZ7eICfYJ2hxJRMTuhBac1pnwLAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQUe9XTXAHTJsjuJB7NjNxS3gb84BMwHwYDVR0j
BBgwFoAUIZ/Lqf/qRxer9qnvhbfGNtnSO+owDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BNjNFNDQxOTVCMTU2MTgyMjZGOTNBRjQyQTJENkNCNTJB
NkU3M0JDMUQwMjdDOTY0RUNEOTJBMDIxNkZGNkQ3LzAvMjE5RkNCQTlGRkVBNDcx
N0FCRjZBOUVGODVCN0M2MzZEOUQyM0JFQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yMTlGQ0JBOUZGRUE0NzE3QUJG
NkE5RUY4NUI3QzYzNkQ5RDIzQkVBLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTYzRTQ0MTk1QjE1NjE4MjI2RjkzQUY0MkEyRDZDQjUyQTZFNzNCQzFE
MDI3Qzk2NEVDRDkyQTAyMTZGRjZENy8wLzMxMzczMDJlMzIzMzM4MmUzMjMzMzYy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzNTM4Mzkucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
7uwwDQYJKoZIhvcNAQELBQADggEBAArmF5/6JC+1uKdDqEnUHklnrzSNYWmAzaF2
5dm436Zma4TFstSKxusV2dE6ErE8v7jAERHjfUjPqTKAB2EnqHzgFJjZC6L4Pw9Q
YbyUE3fXzFHGkSe28CL6ya7FebMnHNVkKst/AHIYw25h5C0yDDewB86sKOyudQGY
JpeyBTKaKHgm7Gn3yCojIwMBtKQapyAyG7RCe8OyDITkvhdSWnvMQdaeTEUelVbq
Yp7NUZUPdFPsFUc6iOkZfr/ci595AeJDWn+rreVjwHOGpBxJLnPuPlyBZbkRNg11
34tLtmWF8Vq0UQNslB7sHPy0at9zZaYEGeedolzCcfF7e7cK0v8=
-----END CERTIFICATE-----
Generated at Tue Nov 19 15:06:57 2024 by rpki-client on console-ams.rpki-client.org