Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130392e302f32342d3234203d3e203238343038.roa
File:                     3137302e3234342e3130392e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          r/4ZnQG9HtjTscoTbdCr65sOrbs/G8u9lIw0Wez/Qic=
Subject key identifier:   B1:E9:25:6F:94:95:DD:B4:04:36:4B:19:97:04:74:5A:8F:9F:14:9F
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       4F7F52668160ADAAA39FACAB73D5AFCA3B9696A8
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130392e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 05 Mar 2024 18:03:33 +0000
ROA not before:           Tue 05 Mar 2024 17:58:33 +0000
ROA not after:            Tue 04 Mar 2025 18:03:33 +0000
asID:                     28408
IP address blocks:        170.244.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:7f:52:66:81:60:ad:aa:a3:9f:ac:ab:73:d5:af:ca:3b:96:96:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Mar  5 17:58:33 2024 GMT
            Not After : Mar  4 18:03:33 2025 GMT
        Subject: CN=B1E9256F9495DDB404364B199704745A8F9F149F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:eb:e4:24:f4:d3:58:5b:8f:78:b9:40:0b:
                    d1:9d:8b:df:38:b5:70:3f:c6:24:79:04:38:48:22:
                    ae:24:aa:a5:1b:56:9b:67:37:7a:d1:47:7e:d5:90:
                    2d:22:dc:d1:02:48:f6:b9:6f:06:ce:a0:23:bb:2e:
                    c2:be:93:a0:b5:12:c3:c2:0c:fa:81:02:63:79:7a:
                    2d:6f:cd:87:2c:d9:2e:37:91:2a:67:cd:3f:b9:47:
                    21:41:6d:76:de:88:49:0d:b1:98:2c:69:74:4b:69:
                    49:8a:d9:96:10:54:35:58:4d:67:ef:dd:bc:15:2c:
                    a9:d1:3e:eb:df:e8:cf:34:4c:95:5b:8a:45:20:79:
                    83:10:4d:2c:9d:ca:48:0e:71:25:9b:f1:46:51:1d:
                    d7:0b:2c:13:2e:4f:b6:7e:c4:94:5c:7f:46:93:ce:
                    11:72:8f:03:7c:a2:fc:18:99:4f:21:e7:f9:78:ee:
                    71:51:63:03:bd:be:ad:ba:46:7f:ac:ce:aa:58:8c:
                    d1:f1:f9:5f:f7:b9:5a:96:84:f1:75:72:26:ed:17:
                    b8:56:1f:43:bc:ca:4c:4d:83:73:77:7d:55:c4:4e:
                    57:8d:18:69:e1:65:58:dd:73:9f:ae:fd:06:5a:91:
                    d4:2f:54:09:d8:ed:0f:38:a9:a1:b4:35:cb:61:ee:
                    59:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E9:25:6F:94:95:DD:B4:04:36:4B:19:97:04:74:5A:8F:9F:14:9F
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3130392e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:78:88:ea:44:5e:2d:03:ff:67:ae:90:ae:59:62:60:81:90:
         9f:42:4a:c7:09:39:b4:b9:ed:6f:e2:d7:4d:1e:09:e7:57:76:
         79:89:d1:72:f2:04:53:ba:bd:d5:f5:85:e5:5e:f1:34:46:22:
         22:ad:4e:da:a4:a4:35:20:4c:09:4f:9f:57:2f:57:6d:28:30:
         80:cb:34:c6:89:36:11:7c:1e:5c:e3:b5:03:02:cc:b6:2b:b4:
         16:4c:40:ba:05:3f:a1:a3:5b:69:21:2c:5b:4e:b7:4f:6e:f0:
         4e:c9:e8:fd:21:e9:c4:4f:18:05:c9:6b:2c:54:09:65:07:33:
         86:29:14:a2:34:ee:ae:31:b6:18:36:d2:a7:da:ce:4f:c1:75:
         a0:04:8d:b4:36:a7:a1:33:11:fc:68:86:90:7b:12:95:b6:ba:
         6e:6c:89:49:29:95:74:6d:67:8e:42:4c:17:b9:c5:f1:bd:6c:
         14:d1:f0:e4:14:d0:45:0a:24:83:1f:bd:a0:08:37:4d:b0:d6:
         88:69:da:1c:3d:52:17:20:80:18:46:51:31:ef:8f:4a:dd:14:
         4a:bc:12:13:79:23:1c:d3:07:02:7b:61:88:0a:a1:6e:1d:65:
         1f:cc:a1:3e:50:31:f6:25:ba:7a:c3:62:84:f7:0e:4c:ca:95:
         9c:d1:78:fa
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUT39SZoFgraqjn6yrc9WvyjuWlqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFFRDU4NUM3RkY2OTVENTE1QzIxM0NDRDkyRjk4QTI2
QUY4MThENzAeFw0yNDAzMDUxNzU4MzNaFw0yNTAzMDQxODAzMzNaMDMxMTAvBgNV
BAMTKEIxRTkyNTZGOTQ5NUREQjQwNDM2NEIxOTk3MDQ3NDVBOEY5RjE0OUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpHuvkJPTTWFuPeLlAC9Gdi984
tXA/xiR5BDhIIq4kqqUbVptnN3rRR37VkC0i3NECSPa5bwbOoCO7LsK+k6C1EsPC
DPqBAmN5ei1vzYcs2S43kSpnzT+5RyFBbXbeiEkNsZgsaXRLaUmK2ZYQVDVYTWfv
3bwVLKnRPuvf6M80TJVbikUgeYMQTSydykgOcSWb8UZRHdcLLBMuT7Z+xJRcf0aT
zhFyjwN8ovwYmU8h5/l47nFRYwO9vq26Rn+szqpYjNHx+V/3uVqWhPF1cibtF7hW
H0O8ykxNg3N3fVXETleNGGnhZVjdc5+u/QZakdQvVAnY7Q84qaG0Ncth7lm7AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUseklb5SV3bQENksZlwR0Wo+fFJ8wHwYDVR0j
BBgwFoAUAe1YXH/2ldUVwhPM2S+Yomr4GNcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9DRDk2QTEwQTY1MUUwMUMwMzJGN0YyNUFBMjBBRjMxMUJG
RTM2RjA0Nzc2NjA2MTI1RDM3MEE2Mjc3Mjc2RjI5LzAvMDFFRDU4NUM3RkY2OTVE
NTE1QzIxM0NDRDkyRjk4QTI2QUY4MThENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8wMUVENTg1QzdGRjY5NUQ1MTVD
MjEzQ0NEOTJGOThBMjZBRjgxOEQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQ0Q5NkExMEE2NTFFMDFDMDMyRjdGMjVBQTIwQUYzMTFCRkUzNkYwNDc3
NjYwNjEyNUQzNzBBNjI3NzI3NkYyOS8wLzMxMzczMDJlMzIzNDM0MmUzMTMwMzky
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4MzQzMDM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvRt
MA0GCSqGSIb3DQEBCwUAA4IBAQAHeIjqRF4tA/9nrpCuWWJggZCfQkrHCTm0ue1v
4tdNHgnnV3Z5idFy8gRTur3V9YXlXvE0RiIirU7apKQ1IEwJT59XL1dtKDCAyzTG
iTYRfB5c47UDAsy2K7QWTEC6BT+ho1tpISxbTrdPbvBOyej9IenETxgFyWssVAll
BzOGKRSiNO6uMbYYNtKn2s5PwXWgBI20NqehMxH8aIaQexKVtrpubIlJKZV0bWeO
QkwXucXxvWwU0fDkFNBFCiSDH72gCDdNsNaIadocPVIXIIAYRlEx749K3RRKvBIT
eSMc0wcCe2GICqFuHWUfzKE+UDH2Jbp6w2KE9w5MypWc0Xj6
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org