Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa
File:                     3137302e3233382e33322e302f32322d3234203d3e203631343636.roa (raw, json)
Hash identifier:          mZiXmYtlbLcoE0kMcfYzbNtRyaCf7OdJ+MeKd7OU7KA=
Subject key identifier:   59:39:FE:FD:CC:A0:76:25:AE:B9:DF:5B:CF:83:AD:2B:BB:CE:31:72
Certificate issuer:       /CN=05A27166426FE2603E20613021874022CADAB030
Certificate serial:       0E81C319305853A29DD1D573658D5C5E9AF7F543
Authority key identifier: 05:A2:71:66:42:6F:E2:60:3E:20:61:30:21:87:40:22:CA:DA:B0:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa
Signing time:             Tue 05 Mar 2024 18:03:54 +0000
ROA not before:           Tue 05 Mar 2024 17:58:54 +0000
ROA not after:            Tue 04 Mar 2025 18:03:54 +0000
asID:                     61466
IP address blocks:        170.238.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:81:c3:19:30:58:53:a2:9d:d1:d5:73:65:8d:5c:5e:9a:f7:f5:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05A27166426FE2603E20613021874022CADAB030
        Validity
            Not Before: Mar  5 17:58:54 2024 GMT
            Not After : Mar  4 18:03:54 2025 GMT
        Subject: CN=5939FEFDCCA07625AEB9DF5BCF83AD2BBBCE3172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1d:19:05:ca:55:ef:30:d0:11:c9:04:f8:51:
                    76:a1:cc:82:bd:b7:de:ee:30:ae:c8:e7:e2:05:67:
                    21:19:6c:6a:93:0a:83:3d:ae:4e:2c:8e:ec:66:20:
                    1f:3b:8e:7e:e6:d7:47:d0:96:b1:6e:81:2d:ef:a5:
                    06:e5:e7:22:90:e6:1e:67:1e:42:2d:d9:ba:72:0e:
                    45:6f:91:f5:07:5a:59:e5:af:1a:18:ed:6a:a7:ca:
                    79:c9:a2:d9:4d:fb:5e:10:7f:4c:38:97:c7:34:c8:
                    ea:79:ac:de:c6:9e:d9:f0:4c:39:7d:f9:79:4f:76:
                    a6:f2:eb:4e:2f:ef:91:46:9d:2b:53:06:e9:f0:2a:
                    e2:cc:d0:54:7c:1b:ca:c6:e3:3c:fc:f3:fe:2e:5c:
                    2b:46:4e:cd:6d:c6:c2:26:3f:5e:8e:ee:92:d4:90:
                    56:75:bb:2d:4c:e5:4f:a2:34:ed:e0:e0:ad:fe:ca:
                    f9:68:87:9c:ba:90:91:86:db:87:f0:b2:ef:b8:da:
                    a0:42:12:ce:1f:68:10:62:bb:f8:b9:2a:8f:21:3e:
                    67:e8:13:81:71:10:7a:27:2c:88:1f:49:8b:41:8e:
                    6d:47:ac:83:95:7d:96:db:a7:0c:f6:8e:f6:14:f5:
                    ca:36:61:fd:1b:d2:7f:2c:06:8c:9a:55:c6:eb:51:
                    69:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:39:FE:FD:CC:A0:76:25:AE:B9:DF:5B:CF:83:AD:2B:BB:CE:31:72
            X509v3 Authority Key Identifier:
                keyid:05:A2:71:66:42:6F:E2:60:3E:20:61:30:21:87:40:22:CA:DA:B0:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/05A27166426FE2603E20613021874022CADAB030.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05A27166426FE2603E20613021874022CADAB030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2046649F915BB384B59BCCA7986CE4E0A07839BBBC5429780AAE62C0B627EBA/0/3137302e3233382e33322e302f32322d3234203d3e203631343636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:60:a1:26:51:fe:61:82:28:e8:7a:7f:1f:60:c8:17:e9:c2:
         be:90:18:9c:3f:77:52:9f:3f:33:c4:31:88:02:2c:c9:b9:84:
         8b:5a:53:74:8e:5c:ae:59:47:45:cf:27:0c:2f:ed:14:26:61:
         2a:ac:6c:32:4d:82:68:0e:ad:49:5c:c3:0a:ab:29:51:56:fc:
         a1:39:e2:83:d8:0e:76:c9:7a:4d:c8:6f:89:33:f0:99:5f:da:
         5e:b4:0e:4d:84:02:c2:f9:2c:07:11:61:00:08:33:a6:43:da:
         64:19:7b:ab:08:4e:27:6d:71:c3:e1:e6:67:6a:70:7b:0d:74:
         fe:48:31:d8:35:f8:97:69:aa:c3:36:30:61:a1:3f:be:6b:a3:
         b0:3e:cb:32:42:a4:2c:66:8f:79:3b:ca:af:43:1c:8c:22:0a:
         fe:74:58:71:d4:b4:76:b1:2d:70:b0:7a:c6:25:9d:c5:21:6c:
         d4:02:37:78:e6:f2:20:44:bb:1c:06:f3:b1:b5:41:6c:99:be:
         aa:2b:6c:26:9a:ab:ef:4e:a4:d1:97:dd:5e:6f:09:60:b2:ad:
         3b:37:05:7d:3f:01:ea:59:b2:e4:1b:de:ab:d7:01:d4:cc:5d:
         10:9c:45:12:34:68:89:0c:97:99:ce:fe:3e:ab:16:dc:03:a9:
         50:12:5f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org