Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa
File:                     3137302e302e3137362e302f32322d3234203d3e203237393033.roa (raw, json)
Hash identifier:          KVDQmtAGzXoH0M9cCeOMQK9yVAk/+10IkKG7soAb4rk=
Subject key identifier:   B8:A7:9A:3D:92:69:5F:DC:93:74:9B:97:89:17:A0:F0:79:D8:B4:C0
Certificate issuer:       /CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
Certificate serial:       1D1314A931D18ADF4172994E8F9CD84BF2D47E3E
Authority key identifier: 3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa
Signing time:             Tue 05 Mar 2024 17:59:42 +0000
ROA not before:           Tue 05 Mar 2024 17:54:42 +0000
ROA not after:            Tue 04 Mar 2025 17:59:42 +0000
asID:                     27903
IP address blocks:        170.0.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:13:14:a9:31:d1:8a:df:41:72:99:4e:8f:9c:d8:4b:f2:d4:7e:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB
        Validity
            Not Before: Mar  5 17:54:42 2024 GMT
            Not After : Mar  4 17:59:42 2025 GMT
        Subject: CN=B8A79A3D92695FDC93749B978917A0F079D8B4C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a3:27:6e:9e:8a:12:96:81:e9:5c:51:1f:dc:
                    ff:b1:66:fa:c8:af:15:b9:9e:f2:80:4d:ef:ba:8b:
                    ac:60:2c:40:5d:60:d6:57:36:9e:a8:eb:ff:fb:8a:
                    e2:8b:48:65:4b:48:20:4b:c1:32:88:aa:f8:e9:6c:
                    62:b6:1e:d1:f3:9d:90:96:b7:e3:08:2b:05:e3:df:
                    20:bd:7d:4f:76:71:7b:6b:d0:45:2f:8c:e2:5f:37:
                    b9:74:6d:18:46:8e:03:3b:e6:26:83:57:5a:9e:5f:
                    7a:14:dc:03:59:2a:7e:b7:c6:09:9c:b8:70:ee:97:
                    a0:6b:ba:19:ea:89:84:c7:20:c4:c9:02:eb:8d:17:
                    d6:cb:b2:fc:2e:fa:fe:7e:d6:6e:02:a1:7d:17:ad:
                    2e:61:f3:e5:87:e7:9d:fe:06:a4:c3:40:6f:10:bb:
                    fa:94:3b:05:dc:d0:52:f4:ac:29:36:d2:c9:fe:cd:
                    eb:75:5e:47:97:2b:cb:1a:53:c8:a5:83:30:4d:35:
                    2e:31:d1:de:e7:4c:f8:0a:eb:93:d3:51:bc:fe:e5:
                    65:4f:1b:40:e2:9f:ee:0b:6d:f0:fd:b8:af:60:f3:
                    4d:78:c8:38:a8:e2:5c:1d:5b:9c:e6:9f:43:bb:d4:
                    b5:d5:3a:89:93:44:45:ae:3b:f3:76:98:e0:45:23:
                    2c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A7:9A:3D:92:69:5F:DC:93:74:9B:97:89:17:A0:F0:79:D8:B4:C0
            X509v3 Authority Key Identifier:
                keyid:3A:82:50:F8:B4:61:7B:7D:F9:7D:5F:42:0D:32:F9:DF:DD:EE:82:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A8250F8B4617B7DF97D5F420D32F9DFDDEE82EB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B305B50C3C45F59BD2BD635A7A773BF770A1FA7F3DBF5CC0903892285BC2AD1C/0/3137302e302e3137362e302f32322d3234203d3e203237393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:00:50:3f:a6:5a:85:8e:ee:0d:e1:2e:21:12:f0:62:2a:94:
         71:b9:1f:42:ac:38:b3:d6:39:ef:05:87:56:c6:46:56:96:f0:
         5e:dc:5e:36:1a:34:5e:f9:b2:00:37:35:2c:35:64:7d:7d:d4:
         18:34:68:14:fc:fb:2d:4f:cd:8b:ba:f5:1c:44:94:d9:aa:db:
         c9:2c:0f:b0:8c:60:12:ba:f5:3d:21:78:dd:5c:15:e3:3d:19:
         cb:3a:79:5a:09:5c:d1:42:42:fd:ab:bc:71:c6:b5:6b:30:79:
         67:43:df:48:df:cf:4b:f8:db:36:16:bd:c0:a3:54:a0:f3:a8:
         e4:8a:05:99:c4:e8:15:30:c9:51:c7:0a:f0:56:64:28:bc:c8:
         b8:5d:96:1e:b6:82:c4:72:ea:8f:1d:28:79:c5:5d:10:5b:6a:
         1d:02:08:87:be:85:f0:6a:e4:7e:95:96:f4:b7:fd:64:3f:24:
         17:02:b6:19:66:bc:cd:08:82:1d:9d:48:fd:64:06:24:7e:bc:
         1d:b2:b6:22:a0:8b:82:d2:3d:10:cd:69:30:92:1d:1d:7d:14:
         2b:24:59:26:7a:d3:a9:6d:ad:38:6a:e2:3a:53:d6:d9:74:ce:
         77:37:13:80:80:e4:52:84:91:e6:72:35:2a:5f:8f:ab:eb:7e:
         e5:a5:b7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org