Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323634383434.roa
File:                     3137302e3234342e39302e302f32342d3234203d3e20323634383434.roa (raw, json)
Hash identifier:          csqbuFsFnm86R+J4WNk9+3eorQkkRAlEa+61p/W71YM=
Subject key identifier:   5D:FA:08:1C:D9:3A:D7:AA:D1:75:19:3E:38:64:0D:EE:1B:86:1A:97
Certificate issuer:       /CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
Certificate serial:       4A19E68E6BDF766200CF66AE0F8F086C82F5EF09
Authority key identifier: CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323634383434.roa
Signing time:             Tue 05 Mar 2024 18:23:35 +0000
ROA not before:           Tue 05 Mar 2024 18:18:35 +0000
ROA not after:            Tue 04 Mar 2025 18:23:35 +0000
asID:                     264844
IP address blocks:        170.244.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 28 May 2024 02:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:19:e6:8e:6b:df:76:62:00:cf:66:ae:0f:8f:08:6c:82:f5:ef:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC
        Validity
            Not Before: Mar  5 18:18:35 2024 GMT
            Not After : Mar  4 18:23:35 2025 GMT
        Subject: CN=5DFA081CD93AD7AAD175193E38640DEE1B861A97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:50:a1:0f:2e:e5:f3:14:ec:57:0e:1f:f3:
                    a0:d1:16:85:6e:48:56:82:ac:c8:97:b0:43:d6:76:
                    bb:9c:5f:13:86:32:39:5b:fc:96:1d:b0:d8:75:24:
                    4f:eb:e6:99:2e:da:36:97:66:d5:a4:87:81:13:fe:
                    21:0b:d4:95:db:ed:b1:94:53:05:e8:b3:92:81:df:
                    80:6f:e6:37:80:c8:09:42:c8:33:d3:cc:9a:16:c2:
                    26:d3:e2:83:a2:ab:9d:96:27:a3:c1:06:e5:18:55:
                    0c:2e:34:7c:d7:05:b7:cd:d4:2f:8a:38:df:08:86:
                    b6:23:47:f2:18:98:2a:71:63:57:8d:a0:27:53:a0:
                    27:a0:44:27:86:22:0d:97:f8:2d:6c:ea:03:88:b7:
                    5f:07:f8:de:14:72:b1:ea:80:22:46:24:16:7d:cd:
                    49:1b:5b:d2:19:21:54:bf:fc:d0:5e:e8:6e:a9:cc:
                    25:60:62:e3:e7:45:b9:2a:71:f5:9a:a5:53:62:50:
                    a6:e5:b3:be:e9:20:63:db:45:79:2c:cb:0a:7c:38:
                    a1:46:b3:3c:a5:0d:ab:fc:0a:02:58:55:5d:4c:02:
                    ae:50:f3:4e:6b:c4:dd:52:1d:83:06:8a:c1:b8:08:
                    df:58:ad:91:16:54:79:ba:c6:cd:d1:9c:98:e1:53:
                    09:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FA:08:1C:D9:3A:D7:AA:D1:75:19:3E:38:64:0D:EE:1B:86:1A:97
            X509v3 Authority Key Identifier:
                keyid:CE:FF:58:50:7A:F1:A0:6A:EF:DA:67:DD:8D:65:12:5C:36:4A:4D:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEFF58507AF1A06AEFDA67DD8D65125C364A4DEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5DC9768EA0AACF46DC911E81D0D9D049927D24AACAF0685CB367D54CEE2BD95/0/3137302e3234342e39302e302f32342d3234203d3e20323634383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:be:cc:1f:0e:37:ec:03:cf:8e:2c:78:1f:d0:9b:a2:de:a0:
         de:95:12:6f:8d:86:ca:3d:77:d9:e7:49:05:eb:21:b5:6b:db:
         ba:98:2e:14:b4:a7:96:07:91:59:77:71:8e:18:29:bf:1e:17:
         fa:97:b0:00:cb:a9:72:80:03:2b:a6:e0:d5:e4:f3:ed:f0:c0:
         eb:9e:53:11:4b:4e:34:63:a8:bd:d2:e1:0e:97:7a:02:ee:70:
         34:e1:22:25:c7:6d:a9:2c:86:38:a8:31:84:fd:0c:e4:c5:be:
         5d:16:9a:b6:73:d9:51:e1:39:09:69:0d:4f:42:f3:5a:07:fc:
         fa:3e:75:a3:e6:d6:13:5c:d2:b6:5b:a7:da:17:43:61:e8:39:
         0a:97:a3:ad:fe:10:a0:92:29:53:e8:b8:ac:6f:f4:ae:b7:9d:
         f2:2a:04:ac:2d:0f:76:2c:f5:ee:ae:a1:d4:55:88:91:ad:d7:
         df:ae:bc:19:b8:34:01:d8:3d:27:76:dc:18:63:6a:28:a8:4c:
         88:fe:b7:f4:a4:d2:84:ca:4a:c6:77:87:0c:7a:92:b3:a0:cc:
         93:49:0e:6c:4f:e0:84:ef:16:68:6d:fa:5f:fc:68:43:10:b7:
         cf:e7:40:7c:b3:1d:16:7a:e4:a0:8d:51:6f:71:87:50:46:0a:
         19:58:c8:f4
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUShnmjmvfdmIAz2auD48IbIL17wkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VGRjU4NTA3QUYxQTA2QUVGREE2N0REOEQ2NTEyNUMz
NjRBNERFQzAeFw0yNDAzMDUxODE4MzVaFw0yNTAzMDQxODIzMzVaMDMxMTAvBgNV
BAMTKDVERkEwODFDRDkzQUQ3QUFEMTc1MTkzRTM4NjQwREVFMUI4NjFBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cFChDy7l8xTsVw4f86DRFoVu
SFaCrMiXsEPWdrucXxOGMjlb/JYdsNh1JE/r5pku2jaXZtWkh4ET/iEL1JXb7bGU
UwXos5KB34Bv5jeAyAlCyDPTzJoWwibT4oOiq52WJ6PBBuUYVQwuNHzXBbfN1C+K
ON8IhrYjR/IYmCpxY1eNoCdToCegRCeGIg2X+C1s6gOIt18H+N4UcrHqgCJGJBZ9
zUkbW9IZIVS//NBe6G6pzCVgYuPnRbkqcfWapVNiUKbls77pIGPbRXksywp8OKFG
szylDav8CgJYVV1MAq5Q805rxN1SHYMGisG4CN9YrZEWVHm6xs3RnJjhUwmvAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUXfoIHNk616rRdRk+OGQN7huGGpcwHwYDVR0j
BBgwFoAUzv9YUHrxoGrv2mfdjWUSXDZKTewwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNURDOTc2OEVBMEFBQ0Y0NkRDOTExRTgxRDBEOUQwNDk5
MjdEMjRBQUNBRjA2ODVDQjM2N0Q1NENFRTJCRDk1LzAvQ0VGRjU4NTA3QUYxQTA2
QUVGREE2N0REOEQ2NTEyNUMzNjRBNERFQy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DRUZGNTg1MDdBRjFBMDZBRUZE
QTY3REQ4RDY1MTI1QzM2NEE0REVDLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjVEQzk3NjhFQTBBQUNGNDZEQzkxMUU4MUQwRDlEMDQ5OTI3RDI0QUFD
QUYwNjg1Q0IzNjdENTRDRUUyQkQ5NS8wLzMxMzczMDJlMzIzNDM0MmUzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzNDM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvRa
MA0GCSqGSIb3DQEBCwUAA4IBAQArvswfDjfsA8+OLHgf0Jui3qDelRJvjYbKPXfZ
50kF6yG1a9u6mC4UtKeWB5FZd3GOGCm/Hhf6l7AAy6lygAMrpuDV5PPt8MDrnlMR
S040Y6i90uEOl3oC7nA04SIlx22pLIY4qDGE/Qzkxb5dFpq2c9lR4TkJaQ1PQvNa
B/z6PnWj5tYTXNK2W6faF0Nh6DkKl6Ot/hCgkilT6Lisb/Sut53yKgSsLQ92LPXu
rqHUVYiRrdffrrwZuDQB2D0ndtwYY2ooqEyI/rf0pNKEykrGd4cMepKzoMyTSQ5s
T+CE7xZobfpf/GhDELfP50B8sx0WeuSgjVFvcYdQRgoZWMj0
-----END CERTIFICATE-----
Generated at Fri May 24 20:47:34 2024 by rpki-client on console-fra.rpki-client.org