Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
File:                     3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          UCGm1c3F8lQj/zsYWJoOip3rntn54qgRVL/lNRoc5QI=
Subject key identifier:   16:AD:D6:6E:E4:B6:66:94:B7:95:4D:8F:B7:80:46:DF:CB:9F:78:91
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       5E7BE09BC538E55D4B1C08A1C51C1968145D23C6
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa
Signing time:             Tue 18 Jun 2024 17:20:00 +0000
ROA not before:           Tue 18 Jun 2024 17:15:00 +0000
ROA not after:            Tue 17 Jun 2025 17:20:00 +0000
asID:                     264842
IP address blocks:        170.81.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7b:e0:9b:c5:38:e5:5d:4b:1c:08:a1:c5:1c:19:68:14:5d:23:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Jun 18 17:15:00 2024 GMT
            Not After : Jun 17 17:20:00 2025 GMT
        Subject: CN=16ADD66EE4B66694B7954D8FB78046DFCB9F7891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:57:63:bf:92:81:87:97:f7:d9:93:a7:07:c4:
                    20:a8:34:6c:3f:62:65:e7:ec:f7:00:a1:f8:05:0c:
                    57:63:9f:ac:d4:2c:78:ae:6b:9c:44:98:d0:f2:55:
                    06:f1:32:8f:0f:9c:85:1a:7a:67:af:c5:0d:17:57:
                    50:2a:2a:81:25:0c:17:42:87:3a:08:88:fe:c0:36:
                    d4:21:f2:3e:29:e1:73:9f:95:c0:72:70:4c:2b:17:
                    1f:d8:42:7e:09:69:15:38:4a:59:c3:6e:8a:37:0b:
                    08:65:cc:48:11:ff:78:41:d1:68:df:c8:57:5d:a0:
                    87:e9:ca:59:24:e0:41:28:2a:67:1c:79:37:d3:e1:
                    d7:18:05:29:ea:68:58:33:81:a7:e8:97:a4:af:02:
                    d9:2c:d4:e8:12:d3:19:83:2d:96:8d:9b:e5:65:7b:
                    79:a4:e8:8c:1a:82:4f:b6:6c:72:46:3a:6f:3f:ff:
                    26:e5:36:05:b5:2f:bd:b8:1d:e5:56:8e:ba:da:e5:
                    c6:65:69:18:e0:58:c2:61:88:be:6a:b1:65:88:38:
                    2c:f6:dd:65:47:54:31:5f:aa:50:aa:1b:5a:ef:81:
                    bb:ce:51:e5:dd:60:0f:e1:b9:e2:91:a7:3b:61:61:
                    a4:63:cc:1f:d9:96:a7:92:ea:fe:92:00:eb:d6:bd:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AD:D6:6E:E4:B6:66:94:B7:95:4D:8F:B7:80:46:DF:CB:9F:78:91
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235322e302f32322d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:4a:4a:87:6f:8d:91:79:08:2c:58:fb:11:86:e8:ec:03:f7:
         1d:fe:7d:9e:e5:11:4a:bb:dd:bb:62:cd:68:9d:88:69:5e:e8:
         cd:7f:6f:7a:88:66:65:48:fd:de:ef:a5:6e:63:c9:78:5c:bf:
         ab:3d:20:58:da:29:10:43:2f:45:6e:e0:99:fd:b5:d1:fd:60:
         b9:e5:c0:63:74:89:37:9c:dc:e4:88:1b:6b:f7:6e:ff:e1:e4:
         75:b1:fa:5e:08:7c:dc:89:98:21:bb:d3:2b:01:6f:f0:3a:82:
         3b:b7:b8:cc:86:52:19:87:82:21:11:bf:82:9c:2b:3a:b6:ee:
         15:3d:3a:7c:43:70:d0:fa:08:6d:4b:d1:ae:dc:78:34:7d:44:
         c2:f3:96:5e:74:de:4d:68:fd:92:0d:df:79:b9:e8:57:c3:bc:
         dd:6a:93:03:b6:cc:c2:42:ce:ac:38:ea:70:c2:8e:58:47:3f:
         6c:bc:56:d1:f4:8e:fa:2c:f9:e6:92:5d:20:64:0a:1b:ab:ed:
         7d:15:00:d3:ea:c6:6a:6e:89:3f:0c:fb:df:25:5b:c7:e1:e4:
         b0:43:a9:d2:aa:27:ea:71:69:a3:eb:f1:8d:96:70:3f:87:7d:
         c0:ca:05:ab:00:45:8f:cc:32:b9:31:3c:d2:4c:c9:6c:7b:c2:
         f8:46:41:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org