Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32332d3233203d3e20323637383332.roa
File:                     3137302e3234352e3135382e302f32332d3233203d3e20323637383332.roa (raw, json)
Hash identifier:          G2XTT2usf1HXuO6tW+XVV/ujjUTgzWYNYcU0/BH0ucg=
Subject key identifier:   2D:3B:F6:EC:D5:30:14:7E:8A:5B:D1:FF:86:C3:27:6B:0D:C5:2D:F9
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       18B9315ADFF632E1E8F3F039DB2E6228856F4174
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32332d3233203d3e20323637383332.roa
Signing time:             Tue 05 Mar 2024 18:19:41 +0000
ROA not before:           Tue 05 Mar 2024 18:14:41 +0000
ROA not after:            Tue 04 Mar 2025 18:19:41 +0000
asID:                     267832
IP address blocks:        170.245.158.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:31:5a:df:f6:32:e1:e8:f3:f0:39:db:2e:62:28:85:6f:41:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Mar  5 18:14:41 2024 GMT
            Not After : Mar  4 18:19:41 2025 GMT
        Subject: CN=2D3BF6ECD530147E8A5BD1FF86C3276B0DC52DF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:d0:93:4c:91:01:a3:04:2d:3b:c6:dc:7e:
                    b6:52:13:d3:e0:52:e9:fa:a1:7c:a6:3d:3c:17:7a:
                    82:89:4f:10:11:c6:a6:43:37:c8:42:ae:22:fa:6d:
                    88:b4:ee:db:91:7e:90:22:3c:89:43:2d:46:72:d7:
                    2b:23:91:8d:d1:fc:2f:49:b9:53:76:43:de:8c:dd:
                    c0:59:be:59:8b:21:cd:e0:c0:bb:9c:97:5e:02:be:
                    22:e1:6c:ad:cf:da:10:14:b8:1a:8b:8c:43:82:c8:
                    4a:e4:4b:e9:ac:fe:a1:5a:68:c4:d0:3a:8f:ab:0f:
                    e8:f3:5d:0e:19:6b:33:b5:a4:b5:cd:26:28:5e:c1:
                    3c:a3:bc:3a:80:63:00:7e:b6:77:f5:53:d5:83:ac:
                    7e:f3:95:3d:ba:e5:0d:3e:af:c3:24:c5:a3:54:83:
                    95:8f:c0:ee:e4:93:df:05:89:f4:13:bc:1a:ba:e7:
                    31:d9:f0:b8:2c:4e:9b:6e:6f:e1:36:42:47:4f:d5:
                    86:f8:ce:7a:7b:47:e1:35:c7:53:7f:0a:1f:a0:dd:
                    0a:5c:77:18:46:5d:ec:2d:d4:df:ec:5e:66:5c:55:
                    b0:d9:6a:d9:1f:f4:40:2d:31:29:ec:5d:8e:91:0e:
                    64:49:ed:84:bb:0d:e2:88:f9:d0:97:9d:99:46:0b:
                    85:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3B:F6:EC:D5:30:14:7E:8A:5B:D1:FF:86:C3:27:6B:0D:C5:2D:F9
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135382e302f32332d3233203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:0e:96:90:af:63:40:1d:eb:9e:c5:8b:6b:c5:b3:e4:30:33:
         9c:6e:63:71:e4:87:c4:4e:05:45:f0:88:e2:83:46:ce:da:46:
         d4:50:8d:3e:19:05:c6:ec:36:4c:14:64:8b:da:73:25:45:59:
         f6:73:c8:fd:39:a6:ea:30:29:57:6b:ca:e2:69:b3:75:ad:d4:
         43:18:0b:90:ed:63:b4:c2:1e:8a:5d:a2:ae:71:ea:90:29:b1:
         0b:d6:06:8b:69:23:39:18:d3:00:fb:3c:4d:10:46:58:95:cd:
         32:ef:bc:91:cb:c4:f7:36:86:6e:f6:8e:ec:e2:8d:b3:55:b3:
         03:ec:6e:4d:96:5f:1f:b5:c2:20:dd:33:8a:83:9c:3a:d2:60:
         f1:a9:08:49:66:91:8d:1d:fc:22:b4:08:6c:0d:5c:5f:51:6f:
         c8:de:18:bf:ce:69:a9:15:21:a4:6f:c0:34:e9:7b:38:0c:ab:
         5a:94:5e:63:5d:20:f8:58:7c:49:93:60:b5:ca:c6:a2:8b:32:
         cd:7f:14:08:7e:8d:24:c5:e5:27:59:a3:15:79:99:32:f4:f4:
         ed:4c:1f:2e:57:18:c3:b0:1c:78:75:ce:8c:da:c8:59:49:2e:
         47:70:7a:1c:5f:1b:1f:81:bb:1c:a5:af:db:65:62:0f:07:59:
         d8:0d:f7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:08 2024 by rpki-client on console-fra.rpki-client.org