Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa
File:                     3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa (raw, json)
Hash identifier:          Vclgniz04yfwe/7PAUAHpL8jVAFqbMYK1/l2RpElzCE=
Subject key identifier:   C8:68:30:81:97:85:97:82:61:61:82:3F:9C:DF:87:CF:B0:71:2C:DC
Certificate issuer:       /CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
Certificate serial:       720F03F3AAC3516C57837240A67CF31CAE50CEA7
Authority key identifier: 70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa
Signing time:             Tue 05 Mar 2024 18:10:50 +0000
ROA not before:           Tue 05 Mar 2024 18:05:50 +0000
ROA not after:            Tue 04 Mar 2025 18:10:50 +0000
asID:                     265634
IP address blocks:        170.245.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0f:03:f3:aa:c3:51:6c:57:83:72:40:a6:7c:f3:1c:ae:50:ce:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=704D35555DB11E7E7E56BDCB34E635E30C8C6978
        Validity
            Not Before: Mar  5 18:05:50 2024 GMT
            Not After : Mar  4 18:10:50 2025 GMT
        Subject: CN=C8683081978597826161823F9CDF87CFB0712CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:78:4f:ee:46:a6:88:63:9c:46:38:60:d3:
                    86:97:88:1a:1c:3b:3c:0d:2e:0c:7a:69:1d:58:25:
                    e2:61:f7:ed:16:ee:6c:16:1a:19:56:86:e5:b1:9a:
                    8e:cf:a4:73:df:a7:b8:31:0d:17:ea:a4:6d:79:13:
                    1e:e3:3f:c5:b9:bb:50:fc:5f:7d:fb:ee:f2:c3:11:
                    3b:a1:b2:6d:14:9c:82:77:32:0c:c8:d1:2e:79:e2:
                    86:9b:97:ce:e9:69:a1:f1:a2:56:2f:5b:6e:b4:da:
                    1c:23:b6:82:69:95:c3:9c:b9:da:73:62:4e:2b:0e:
                    db:21:39:cf:d2:73:27:e8:d3:af:11:8f:58:7b:a0:
                    6d:7c:7b:87:2b:a7:40:9e:19:c5:a9:80:76:c0:3c:
                    d6:36:bd:bb:bc:51:51:45:16:e5:f3:e1:7a:14:34:
                    3c:89:c1:e0:2b:76:6f:28:4d:36:6f:fe:38:29:69:
                    da:a3:96:9f:9f:08:72:a6:50:11:10:7a:f4:6c:0c:
                    a9:1f:63:bc:e4:4e:00:1b:64:5d:0c:09:9e:29:61:
                    3a:4a:63:50:84:64:72:14:64:fc:cb:54:fd:32:5d:
                    63:05:8f:66:5b:0c:0f:61:5e:af:8d:68:56:c4:9b:
                    07:6f:da:66:7d:6a:ec:23:13:2e:75:eb:c6:47:e7:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:68:30:81:97:85:97:82:61:61:82:3F:9C:DF:87:CF:B0:71:2C:DC
            X509v3 Authority Key Identifier:
                keyid:70:4D:35:55:5D:B1:1E:7E:7E:56:BD:CB:34:E6:35:E3:0C:8C:69:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/704D35555DB11E7E7E56BDCB34E635E30C8C6978.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3CC60F06C7CB4308859E8355EC0A740C38F1BFB096D51AC2BDFD8727F90152/0/3137302e3234352e3233322e302f32322d3234203d3e20323635363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:67:61:18:df:c3:1d:29:0f:e1:a5:16:7a:fd:4d:63:ba:0a:
         17:4d:42:26:f8:9a:2d:c0:df:f0:c4:ea:51:b1:d6:0d:99:ce:
         b9:0b:8d:22:6e:f2:45:92:1d:ef:ae:24:d8:49:cc:db:75:5a:
         aa:ae:7d:9a:1f:08:74:aa:45:97:f8:7f:62:dd:7c:c7:2a:60:
         87:3f:fc:aa:14:b4:0c:61:38:77:bd:c4:a1:4c:ce:7a:03:e6:
         e0:97:04:ea:93:d1:20:12:82:e2:e8:ef:a8:3a:0c:2c:3b:72:
         56:ae:23:05:6b:96:79:33:e2:48:bd:e6:2e:86:ea:65:70:d4:
         db:76:06:b1:c6:1e:5c:87:ea:3d:de:22:75:59:3e:75:c2:2c:
         a2:93:74:4c:f5:a9:ef:8d:38:15:d7:78:b9:48:d5:de:ee:a7:
         eb:75:ef:58:14:d7:89:fe:9a:4c:b6:86:2f:54:6d:56:d7:e6:
         67:b9:80:4f:1a:99:63:a8:58:ed:91:35:92:c4:00:6f:35:41:
         62:95:5f:cf:19:63:b0:d5:d5:cd:e5:fa:0d:ed:55:29:ac:54:
         97:da:a9:e1:0d:3f:0f:67:16:6c:35:91:c8:4c:33:fd:53:d3:
         10:cc:2b:e0:52:95:c3:9e:99:40:6a:22:90:55:01:3d:33:c3:
         88:29:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:51 2024 by rpki-client on console-ams.rpki-client.org