Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa
File:                     3137302e38302e32382e302f32322d3234203d3e20323635353234.roa (raw, json)
Hash identifier:          dbFAR9zzmY5yBRMhn5JLNIDulj0PkKhUVxTjfHvR4vE=
Subject key identifier:   22:21:A7:CA:99:DA:93:E9:89:49:6C:57:B2:AA:A8:61:46:AB:EC:45
Certificate issuer:       /CN=2901A096C59DC3A27E514C8163A5215B8F72629A
Certificate serial:       44C348EBA3A935FFE38D5AFF604365F91A7F6F8D
Authority key identifier: 29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa
Signing time:             Wed 06 Mar 2024 06:55:01 +0000
ROA not before:           Wed 06 Mar 2024 06:50:01 +0000
ROA not after:            Wed 05 Mar 2025 06:55:01 +0000
asID:                     265524
IP address blocks:        170.80.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c3:48:eb:a3:a9:35:ff:e3:8d:5a:ff:60:43:65:f9:1a:7f:6f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2901A096C59DC3A27E514C8163A5215B8F72629A
        Validity
            Not Before: Mar  6 06:50:01 2024 GMT
            Not After : Mar  5 06:55:01 2025 GMT
        Subject: CN=2221A7CA99DA93E989496C57B2AAA86146ABEC45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e9:a7:b4:64:47:8a:76:9d:97:cc:cf:28:c0:
                    e3:93:95:a2:33:44:c3:d3:8e:fa:91:fa:05:9e:ba:
                    14:84:3a:9c:54:2f:a7:34:6e:58:81:e0:83:63:21:
                    2b:cf:ea:d7:fa:2e:e3:af:b7:87:97:a4:86:fd:db:
                    50:11:2c:a4:2a:56:01:e1:4e:3f:07:b5:1d:32:ea:
                    c2:e2:2c:ec:69:5a:90:11:65:9c:5c:4d:ce:bf:1f:
                    92:f1:f8:47:45:ec:8c:b7:d6:a2:2e:34:1f:d6:76:
                    fe:e2:bb:81:b9:3d:9f:51:e3:47:50:b6:1a:11:9b:
                    e0:6f:17:f3:1d:9e:8a:ff:31:1b:53:60:c0:f0:fe:
                    d0:d3:33:a7:08:b8:f5:b5:e9:5a:7d:3d:0e:ee:52:
                    50:e2:be:c5:75:49:e9:c7:f7:da:13:53:b4:98:67:
                    01:6b:64:b0:6c:63:95:33:84:bc:c9:3a:7c:3b:07:
                    70:ce:ee:66:94:23:79:1c:4b:f2:73:f9:87:6c:4a:
                    36:bb:80:e2:ba:04:3d:c5:a4:b5:d3:82:f6:43:1f:
                    d1:00:62:90:79:44:73:8a:3d:c7:a9:2a:d0:e6:71:
                    46:ff:9e:fe:c0:31:87:30:18:45:25:9b:b9:2d:d3:
                    4b:21:24:84:ee:f7:ff:b8:77:6e:1b:c6:b9:a6:48:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:21:A7:CA:99:DA:93:E9:89:49:6C:57:B2:AA:A8:61:46:AB:EC:45
            X509v3 Authority Key Identifier:
                keyid:29:01:A0:96:C5:9D:C3:A2:7E:51:4C:81:63:A5:21:5B:8F:72:62:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2901A096C59DC3A27E514C8163A5215B8F72629A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C731D1608DF84461D8D6892BF824F47311CDD3BD0C8BD89A4DFE8D66B9C1F8A4/0/3137302e38302e32382e302f32322d3234203d3e20323635353234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:f2:33:e0:86:e3:08:94:f4:49:eb:a8:9e:28:c2:34:2c:d9:
         2b:9e:e4:72:d3:04:43:77:ff:ee:b9:37:9e:83:15:de:e8:77:
         59:f3:53:86:d8:eb:9e:ff:e1:60:f0:db:e5:b9:ec:56:8e:79:
         63:14:d4:49:71:3e:5a:e3:e0:9c:0e:94:04:65:fb:d0:97:aa:
         f0:83:94:82:3c:75:74:9a:45:c5:72:31:ba:41:46:df:8a:c4:
         d6:98:4d:d0:3d:df:30:55:4c:c7:a2:7c:be:9d:c7:7a:e3:96:
         a3:21:db:d9:69:d4:25:97:b7:54:45:f8:3a:87:94:43:1d:ea:
         eb:f9:3e:2b:42:a6:ed:19:93:17:63:98:9f:e9:07:f5:d5:3e:
         4b:a0:96:7d:1a:e3:5d:62:65:5d:7b:59:13:ef:15:e7:48:49:
         ce:63:82:47:13:41:dc:28:ed:be:af:8e:19:37:66:07:4f:6a:
         47:78:37:35:4f:aa:84:15:89:fd:c0:d2:a9:a1:38:25:75:89:
         f2:0a:e6:87:2d:c4:5f:43:92:7a:6f:b3:dc:03:f5:a0:17:96:
         b8:4b:37:e4:7a:67:a0:84:3f:ad:4c:aa:28:a4:1b:08:ba:74:
         fc:5b:f8:74:1f:ca:81:91:23:74:29:5f:0b:c1:34:6e:1a:7b:
         18:b8:d4:c5
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURMNI66OpNf/jjVr/YENl+Rp/b40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjkwMUEwOTZDNTlEQzNBMjdFNTE0QzgxNjNBNTIxNUI4
RjcyNjI5QTAeFw0yNDAzMDYwNjUwMDFaFw0yNTAzMDUwNjU1MDFaMDMxMTAvBgNV
BAMTKDIyMjFBN0NBOTlEQTkzRTk4OTQ5NkM1N0IyQUFBODYxNDZBQkVDNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb6ae0ZEeKdp2XzM8owOOTlaIz
RMPTjvqR+gWeuhSEOpxUL6c0bliB4INjISvP6tf6LuOvt4eXpIb921ARLKQqVgHh
Tj8HtR0y6sLiLOxpWpARZZxcTc6/H5Lx+EdF7Iy31qIuNB/Wdv7iu4G5PZ9R40dQ
thoRm+BvF/Mdnor/MRtTYMDw/tDTM6cIuPW16Vp9PQ7uUlDivsV1SenH99oTU7SY
ZwFrZLBsY5UzhLzJOnw7B3DO7maUI3kcS/Jz+YdsSja7gOK6BD3FpLXTgvZDH9EA
YpB5RHOKPcepKtDmcUb/nv7AMYcwGEUlm7kt00shJITu9/+4d24bxrmmSOIdAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUIiGnypnak+mJSWxXsqqoYUar7EUwHwYDVR0j
BBgwFoAUKQGglsWdw6J+UUyBY6UhW49yYpowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DNzMxRDE2MDhERjg0NDYxRDhENjg5MkJGODI0RjQ3MzEx
Q0REM0JEMEM4QkQ4OUE0REZFOEQ2NkI5QzFGOEE0LzAvMjkwMUEwOTZDNTlEQzNB
MjdFNTE0QzgxNjNBNTIxNUI4RjcyNjI5QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yOTAxQTA5NkM1OURDM0EyN0U1
MTRDODE2M0E1MjE1QjhGNzI2MjlBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQzczMUQxNjA4REY4NDQ2MUQ4RDY4OTJCRjgyNEY0NzMxMUNERDNCRDBD
OEJEODlBNERGRThENjZCOUMxRjhBNC8wLzMxMzczMDJlMzgzMDJlMzIzODJlMzAy
ZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNTM1MzIzNC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpQHDAN
BgkqhkiG9w0BAQsFAAOCAQEAr/Iz4IbjCJT0SeuonijCNCzZK57kctMEQ3f/7rk3
noMV3uh3WfNThtjrnv/hYPDb5bnsVo55YxTUSXE+WuPgnA6UBGX70Jeq8IOUgjx1
dJpFxXIxukFG34rE1phN0D3fMFVMx6J8vp3HeuOWoyHb2WnUJZe3VEX4OoeUQx3q
6/k+K0Km7RmTF2OYn+kH9dU+S6CWfRrjXWJlXXtZE+8V50hJzmOCRxNB3Cjtvq+O
GTdmB09qR3g3NU+qhBWJ/cDSqaE4JXWJ8grmhy3EX0OSem+z3AP1oBeWuEs35Hpn
oIQ/rUyqKKQbCLp0/Fv4dB/KgZEjdClfC8E0bhp7GLjUxQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:54 2024 by rpki-client on console-fra.rpki-client.org