Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa
File:                     3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          iyE85A/JCf5DankoQuaf70fLfVZl/oJg8yOEv0zq/4s=
Subject key identifier:   EC:AE:B7:0E:87:27:9B:DB:9E:A7:2D:52:80:51:A7:E6:2E:3A:38:E6
Certificate issuer:       /CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
Certificate serial:       7C2967970370F2FB240B30978B181829CB353792
Authority key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 17:49:07 +0000
ROA not before:           Tue 05 Mar 2024 17:44:07 +0000
ROA not after:            Tue 04 Mar 2025 17:49:07 +0000
asID:                     264738
IP address blocks:        170.233.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:29:67:97:03:70:f2:fb:24:0b:30:97:8b:18:18:29:cb:35:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4
        Validity
            Not Before: Mar  5 17:44:07 2024 GMT
            Not After : Mar  4 17:49:07 2025 GMT
        Subject: CN=ECAEB70E87279BDB9EA72D528051A7E62E3A38E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:6f:bb:42:96:d3:c0:96:2c:73:b8:be:2b:
                    38:e0:83:84:d5:87:b8:7e:ff:82:22:1b:02:6b:d5:
                    d0:46:24:69:45:ee:54:d2:54:96:cd:17:4c:61:fe:
                    19:fc:c1:24:19:79:6e:5d:4a:17:99:b7:f6:6b:37:
                    c4:77:70:c4:ed:64:b0:fe:32:48:79:7b:ea:6b:62:
                    b5:69:6f:ab:87:d1:be:7c:f1:9b:9e:1d:a9:ef:e6:
                    20:86:db:a8:d6:d4:1b:e7:61:c3:99:01:a9:e4:92:
                    a2:41:f9:f1:2e:ce:bc:39:14:c9:c2:12:96:15:40:
                    de:07:77:5f:d8:f9:3b:08:e3:06:c1:84:48:ca:38:
                    3e:71:c6:2f:4a:d1:11:a8:65:73:20:b6:0a:a7:4c:
                    56:9b:98:9a:89:d9:99:36:65:82:b1:50:11:8d:a6:
                    f9:ce:d9:71:3e:a7:c7:84:52:32:9f:39:9c:da:af:
                    80:9d:72:77:b1:ca:7e:51:f2:ed:a2:d0:43:fe:a3:
                    81:4c:ed:85:fb:f9:86:3b:95:df:e4:34:57:89:45:
                    da:dd:b9:99:22:f1:cb:e4:76:42:62:1c:af:98:da:
                    97:e3:b7:b0:51:95:f5:a8:4d:27:97:96:41:5e:0c:
                    4c:ba:a0:32:95:80:c9:5d:18:b4:ef:be:37:00:86:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AE:B7:0E:87:27:9B:DB:9E:A7:2D:52:80:51:A7:E6:2E:3A:38:E6
            X509v3 Authority Key Identifier:
                keyid:B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/3137302e3233332e3131362e302f32322d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:dd:d3:b0:20:f1:62:2e:13:cf:a0:e6:69:cb:dc:c5:50:
         b6:52:63:c5:d6:43:cd:25:84:28:a0:8a:88:1d:e4:4a:d5:e3:
         33:f7:b7:22:1f:a5:41:3c:2f:6d:87:0c:9a:7c:79:a4:c2:2e:
         f0:02:3b:e2:24:f5:33:b5:45:a3:c2:c2:39:2a:2e:75:3e:c6:
         46:6b:e3:ea:9c:59:99:53:20:bb:be:66:3d:fb:80:70:ec:24:
         95:9a:99:da:73:21:21:85:94:78:d2:16:a0:4c:67:1b:4d:6a:
         b3:48:43:a4:56:a4:c9:08:97:dd:90:7e:75:5e:43:8a:a6:52:
         4d:28:af:e0:95:4b:be:23:a0:4c:92:77:b0:7a:6c:85:68:64:
         42:c7:f6:b8:8b:c5:99:0d:5d:da:05:56:1e:8f:26:2f:35:db:
         ad:b3:f6:a1:d0:e5:5b:4f:c7:eb:47:8d:d4:5c:53:3b:94:0c:
         f2:8f:2f:99:d3:02:ec:f9:c5:98:27:07:e7:98:d3:df:7b:86:
         0d:f2:5e:24:c9:ad:30:92:60:9e:65:9f:58:04:25:f2:57:18:
         91:b2:32:20:0a:66:e3:64:8a:4d:3d:59:c9:d9:72:df:a5:f5:
         f6:44:f4:ac:82:38:db:a2:4a:aa:88:3d:49:74:e0:b6:57:62:
         7b:8f:c5:2d
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUfClnlwNw8vskCzCXixgYKcs1N5IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQzA2NjQ3RkVCNDQ0MEQ0NzIzMzIyRUExODNDOEZG
RUJBODlFNDAeFw0yNDAzMDUxNzQ0MDdaFw0yNTAzMDQxNzQ5MDdaMDMxMTAvBgNV
BAMTKEVDQUVCNzBFODcyNzlCREI5RUE3MkQ1MjgwNTFBN0U2MkUzQTM4RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6G+7QpbTwJYsc7i+Kzjgg4TV
h7h+/4IiGwJr1dBGJGlF7lTSVJbNF0xh/hn8wSQZeW5dSheZt/ZrN8R3cMTtZLD+
Mkh5e+prYrVpb6uH0b588ZueHanv5iCG26jW1BvnYcOZAankkqJB+fEuzrw5FMnC
EpYVQN4Hd1/Y+TsI4wbBhEjKOD5xxi9K0RGoZXMgtgqnTFabmJqJ2Zk2ZYKxUBGN
pvnO2XE+p8eEUjKfOZzar4Cdcnexyn5R8u2i0EP+o4FM7YX7+YY7ld/kNFeJRdrd
uZki8cvkdkJiHK+Y2pfjt7BRlfWoTSeXlkFeDEy6oDKVgMldGLTvvjcAhs45AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7K63Docnm9uepy1SgFGn5i46OOYwHwYDVR0j
BBgwFoAUsswGZH/rREDUcjMi6hg8j/66ieQwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BRkE3MkE1QjRGRjM5MkMxOEI4Qjg1ODQyQjU1NDM1NzdF
M0IwRTFGMzJDRENCMTJBQ0Y0MTNBNzM4OUY2RjBELzAvQjJDQzA2NjQ3RkVCNDQ0
MEQ0NzIzMzIyRUExODNDOEZGRUJBODlFNC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMkNDMDY2NDdGRUI0NDQwRDQ3
MjMzMjJFQTE4M0M4RkZFQkE4OUU0LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQUZBNzJBNUI0RkYzOTJDMThCOEI4NTg0MkI1NTQzNTc3RTNCMEUxRjMy
Q0RDQjEyQUNGNDEzQTczODlGNkYwRC8wLzMxMzczMDJlMzIzMzMzMmUzMTMxMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzQzNzMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
6XQwDQYJKoZIhvcNAQELBQADggEBAEZL3dOwIPFiLhPPoOZpy9zFULZSY8XWQ80l
hCigiogd5ErV4zP3tyIfpUE8L22HDJp8eaTCLvACO+Ik9TO1RaPCwjkqLnU+xkZr
4+qcWZlTILu+Zj37gHDsJJWamdpzISGFlHjSFqBMZxtNarNIQ6RWpMkIl92QfnVe
Q4qmUk0or+CVS74joEySd7B6bIVoZELH9riLxZkNXdoFVh6PJi81262z9qHQ5VtP
x+tHjdRcUzuUDPKPL5nTAuz5xZgnB+eY0997hg3yXiTJrTCSYJ5ln1gEJfJXGJGy
MiAKZuNkik09WcnZct+l9fZE9KyCONuiSqqIPUl04LZXYnuPxS0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org