Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/3137302e3233382e3230302e302f32322d3234203d3e20323634383134.roa
File:                     3137302e3233382e3230302e302f32322d3234203d3e20323634383134.roa (raw, json)
Hash identifier:          pcBeQcr0lduBNS8X1NIBOrz8GP39o1zTLuKiHNTyQiA=
Subject key identifier:   7A:0D:05:BC:30:56:D3:40:35:DB:35:2D:0E:B7:DF:39:7E:13:AF:8A
Certificate issuer:       /CN=5771463D9A603B67C2C5B155999D0F8CFE894F78
Certificate serial:       631F2D6DAB211520AAD8398EDF2B8D5F0CD2ECD8
Authority key identifier: 57:71:46:3D:9A:60:3B:67:C2:C5:B1:55:99:9D:0F:8C:FE:89:4F:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/3137302e3233382e3230302e302f32322d3234203d3e20323634383134.roa
Signing time:             Tue 05 Mar 2024 18:00:03 +0000
ROA not before:           Tue 05 Mar 2024 17:55:03 +0000
ROA not after:            Tue 04 Mar 2025 18:00:03 +0000
asID:                     264814
IP address blocks:        170.238.200.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:1f:2d:6d:ab:21:15:20:aa:d8:39:8e:df:2b:8d:5f:0c:d2:ec:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5771463D9A603B67C2C5B155999D0F8CFE894F78
        Validity
            Not Before: Mar  5 17:55:03 2024 GMT
            Not After : Mar  4 18:00:03 2025 GMT
        Subject: CN=7A0D05BC3056D34035DB352D0EB7DF397E13AF8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:17:8b:08:83:2b:93:02:4e:ea:70:92:9a:
                    a3:d4:f2:18:92:7e:65:44:52:e2:3f:03:9c:d5:19:
                    18:e3:b8:88:de:b0:10:05:5b:ac:ac:8b:c9:a1:c7:
                    5e:a9:a4:e0:3d:ab:13:52:e5:69:0f:e9:89:56:c7:
                    48:a8:fb:fe:6a:61:ac:48:89:d7:d3:96:49:34:d8:
                    ea:3e:b3:27:34:0e:15:8b:13:20:46:70:39:cb:09:
                    b5:b8:5e:26:72:b4:62:8e:70:1d:48:9f:6d:6b:d3:
                    6b:0a:08:2b:20:86:41:29:b5:87:18:da:d3:3e:b9:
                    79:16:ab:ca:94:f8:50:0f:29:17:56:1c:9d:14:04:
                    3b:be:33:b6:4b:56:99:41:51:35:f9:8d:e8:c0:be:
                    22:fb:41:f1:c5:fc:9d:63:34:5d:a2:5a:88:30:08:
                    7c:e9:71:15:68:1a:45:7a:1c:8f:ce:b7:c0:5f:a2:
                    fd:91:a9:d9:a6:84:e7:67:53:c5:b3:0e:40:87:93:
                    ae:72:f5:ee:86:15:94:3d:70:e2:52:a4:71:82:a2:
                    7e:95:e4:9c:dc:7a:fa:ad:8a:f6:0b:2d:e1:33:1b:
                    b0:e6:79:aa:81:89:ea:5b:5a:72:c4:90:6b:6c:3e:
                    a0:54:9a:2c:9e:d3:2c:3f:f3:49:c9:5b:cb:3c:0f:
                    95:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:05:BC:30:56:D3:40:35:DB:35:2D:0E:B7:DF:39:7E:13:AF:8A
            X509v3 Authority Key Identifier:
                keyid:57:71:46:3D:9A:60:3B:67:C2:C5:B1:55:99:9D:0F:8C:FE:89:4F:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5771463D9A603B67C2C5B155999D0F8CFE894F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C5E62F0B4A7E8D08961E23359E6B86CA00EC3EF0291CB105DF6B2B0A707D3694/0/3137302e3233382e3230302e302f32322d3234203d3e20323634383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:a1:55:62:48:63:f3:e4:7c:1c:7b:88:6c:ed:a1:8e:f2:84:
         30:38:f3:76:6a:7b:27:c4:27:bb:fd:24:c1:f7:f3:94:3d:95:
         23:1b:e7:e4:51:e8:b0:09:87:5e:14:e5:86:09:2c:0f:58:c3:
         76:df:68:8a:55:94:dc:be:22:8d:50:bd:98:62:05:88:b1:9e:
         7f:eb:1d:3b:13:98:89:7f:9f:0c:60:99:f9:ec:72:f8:5d:16:
         80:07:f1:72:5e:7b:61:6a:ec:11:67:39:6d:53:eb:0d:22:d1:
         aa:f0:ae:97:83:a3:b6:53:09:01:54:42:dd:3e:e2:c6:75:3f:
         06:f0:76:ac:4d:f9:43:5a:2b:97:3a:0d:82:3c:81:c0:08:d4:
         92:b1:0c:32:41:62:58:8a:06:b0:57:0c:9d:f9:9e:81:ed:0e:
         02:2e:9c:54:81:24:ac:d5:16:e9:fc:54:0b:95:58:39:1b:90:
         1f:c9:04:e4:6f:68:50:71:bc:ce:72:6e:e0:3f:c5:5d:f6:f3:
         26:09:c7:d6:76:e8:d3:e6:ef:bb:7e:1d:94:dd:d4:7d:a0:9e:
         ea:b8:ca:08:f4:c7:38:9c:dc:a4:79:3f:15:df:f9:bf:38:02:
         2c:39:8e:db:96:84:f6:14:94:09:80:d2:f7:de:a8:1e:34:b8:
         d1:2c:d3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org