Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32342d3234203d3e20323634383434.roa
File:                     3137302e3234342e38382e302f32342d3234203d3e20323634383434.roa (raw, json)
Hash identifier:          h54MH4zSNHUoJi+uAn7ELIf8k+s5fujNmVZqXdVlpaE=
Subject key identifier:   36:4F:BA:3D:A0:CE:A3:A8:04:91:41:CA:59:DF:2E:48:54:F0:B0:F0
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       2AD5930A336AB98577DF0CA153388C97CA66198D
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32342d3234203d3e20323634383434.roa
Signing time:             Tue 05 Mar 2024 18:23:35 +0000
ROA not before:           Tue 05 Mar 2024 18:18:35 +0000
ROA not after:            Tue 04 Mar 2025 18:23:35 +0000
asID:                     264844
IP address blocks:        170.244.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d5:93:0a:33:6a:b9:85:77:df:0c:a1:53:38:8c:97:ca:66:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Mar  5 18:18:35 2024 GMT
            Not After : Mar  4 18:23:35 2025 GMT
        Subject: CN=364FBA3DA0CEA3A8049141CA59DF2E4854F0B0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:c1:2f:51:25:19:0f:93:6f:59:32:65:46:
                    ce:26:00:32:c4:1a:3f:7b:e1:37:d3:7f:8a:eb:12:
                    0a:66:a2:06:ab:97:8e:12:be:8e:e3:ba:9f:ab:01:
                    30:32:ac:f3:28:8b:aa:be:b6:cd:8b:db:8d:a1:e1:
                    4a:dd:18:8c:69:05:53:8d:9b:20:f6:0a:b8:74:a5:
                    64:82:c7:7a:db:48:17:6b:9d:29:ca:6e:24:91:e1:
                    0c:00:14:39:a6:67:1e:a9:52:48:a5:1b:ad:dd:f2:
                    b4:68:2c:7d:2d:c9:6f:3c:e9:cb:5e:a8:46:dc:aa:
                    62:eb:6e:9f:d6:2f:4d:9a:0d:bb:a3:bf:82:61:54:
                    a3:21:1c:07:cc:5b:0d:d0:c2:13:9c:96:32:68:07:
                    9b:09:95:51:80:51:fc:3f:23:f9:c7:d2:95:8f:c4:
                    bf:59:b1:74:b5:03:5a:f1:7b:f4:b0:8d:f4:bd:da:
                    69:02:a6:b9:3b:eb:29:c0:f3:64:ea:6b:a5:f1:75:
                    cc:b1:13:df:08:89:2b:29:ba:fc:7d:17:6e:cb:23:
                    2e:d3:7d:60:1c:87:79:5b:a0:ad:b8:06:cb:78:bf:
                    3b:6a:40:3b:9e:31:cd:c9:71:ef:ea:f5:f8:96:2f:
                    41:53:65:99:64:e7:86:87:9c:24:f3:75:c0:51:d1:
                    6a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:BA:3D:A0:CE:A3:A8:04:91:41:CA:59:DF:2E:48:54:F0:B0:F0
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e38382e302f32342d3234203d3e20323634383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7e:18:9d:cb:68:ce:4a:b4:d2:52:f2:13:da:36:13:64:37:
         24:87:66:24:d6:2b:d1:df:c8:96:e0:38:89:7e:c6:43:94:14:
         b9:70:79:eb:b6:5a:8a:f6:c7:4e:91:0e:87:cc:b9:03:83:26:
         fb:d0:34:02:5f:a4:d5:d5:a1:3e:2f:1a:20:14:9b:4b:36:6e:
         c0:4e:3c:6e:f1:82:02:4d:b6:ed:47:5b:67:81:91:d7:16:1b:
         aa:43:36:35:a8:b2:8a:c7:ee:d3:66:13:1c:f6:1c:aa:67:16:
         5e:6d:8d:f8:92:4d:74:d3:ac:20:b8:f2:48:af:65:fb:57:82:
         a1:f5:0c:92:2e:9a:51:50:1a:09:35:61:76:0a:36:1a:f4:5a:
         45:05:a6:42:ff:22:a4:ba:08:d8:5c:fc:5e:e0:6d:14:d4:c1:
         3b:54:86:be:1b:24:15:13:05:50:7d:56:60:f5:8e:9e:14:5a:
         ae:bd:3a:c7:c4:6a:63:5a:49:e9:36:76:c0:ca:b6:aa:d3:0c:
         73:77:f2:1c:70:75:45:18:71:72:e0:ee:35:f8:7c:96:67:81:
         ab:a4:69:ff:2a:d4:52:63:28:3b:f7:ec:fb:e0:4e:e3:25:29:
         cd:bf:61:ce:78:ab:29:61:30:77:f0:cd:0c:24:68:f2:42:4b:
         45:00:11:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:41:16 2024 by rpki-client on console-ams.rpki-client.org