Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa
File:                     3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa (raw, json)
Hash identifier:          0gSySMCTbRAs9cHovmAPnKpAM+2flRP7RRKvJc0ia48=
Subject key identifier:   32:41:82:99:67:13:D7:34:E8:2A:F3:D3:00:7F:3B:55:0F:61:6B:51
Certificate issuer:       /CN=C3A4C72D613B89220886ECA00755498ABF1F663F
Certificate serial:       4E4F318256C8F997860D5C0CB816690EA707CB83
Authority key identifier: C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa
Signing time:             Tue 05 Mar 2024 18:14:43 +0000
ROA not before:           Tue 05 Mar 2024 18:09:43 +0000
ROA not after:            Tue 04 Mar 2025 18:14:43 +0000
asID:                     262202
IP address blocks:        170.246.148.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 13 May 2024 14:21:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4f:31:82:56:c8:f9:97:86:0d:5c:0c:b8:16:69:0e:a7:07:cb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A4C72D613B89220886ECA00755498ABF1F663F
        Validity
            Not Before: Mar  5 18:09:43 2024 GMT
            Not After : Mar  4 18:14:43 2025 GMT
        Subject: CN=324182996713D734E82AF3D3007F3B550F616B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:a6:96:76:dc:bf:8c:32:2c:85:74:20:f6:
                    7e:42:dd:4b:dd:fb:f8:e5:4e:50:ec:1f:f0:0f:51:
                    3e:dd:a9:32:4d:40:de:7c:17:e1:4a:d3:33:fb:66:
                    f4:7a:c7:e8:f2:f5:9d:6e:45:06:7d:8b:1a:36:5b:
                    7e:d8:23:69:a7:4e:98:1a:58:db:bd:6c:cf:5c:56:
                    f9:0f:5f:72:6b:29:4a:0e:98:06:62:7b:54:5e:ca:
                    e5:fb:85:14:bf:4c:7b:20:95:7c:d0:93:f3:c5:78:
                    ea:ba:cb:5a:32:f2:00:bb:ef:72:6c:53:ce:49:55:
                    d0:c2:7a:3e:e0:77:be:bf:0a:89:85:b4:93:77:e8:
                    35:7d:d6:58:a5:20:07:8c:a0:78:97:39:05:03:31:
                    68:e9:61:fd:89:68:70:44:3a:64:6a:44:e3:7a:14:
                    fc:0f:20:b9:b2:b8:3a:5a:f4:c0:c3:f2:73:fb:2a:
                    d8:8b:ad:b6:4c:50:47:3b:4a:cb:d3:4b:3b:50:c9:
                    5d:a6:69:f2:eb:ed:c9:ef:9a:2c:69:20:e5:e8:89:
                    6d:8b:e9:62:9d:b2:e4:86:66:af:fd:c7:00:f2:5c:
                    61:27:41:52:1f:8c:de:4e:77:58:af:66:67:0c:1f:
                    02:f8:52:88:ff:e1:11:41:ee:43:c7:23:ce:c8:fd:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:41:82:99:67:13:D7:34:E8:2A:F3:D3:00:7F:3B:55:0F:61:6B:51
            X509v3 Authority Key Identifier:
                keyid:C3:A4:C7:2D:61:3B:89:22:08:86:EC:A0:07:55:49:8A:BF:1F:66:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/C3A4C72D613B89220886ECA00755498ABF1F663F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3A4C72D613B89220886ECA00755498ABF1F663F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE8E1685E153FC4EB9919C52C7DA2B793C30180023365E96F73E7DAC6A04E9FD/0/3137302e3234362e3134382e302f32322d3234203d3e20323632323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:51:7f:74:55:f9:ef:d6:01:32:52:7b:bb:5b:6a:73:95:5e:
         fc:e4:77:29:97:01:53:3f:f0:3f:f7:21:2b:17:0d:f7:f3:6a:
         c8:98:7b:bf:fb:34:ca:a4:69:76:c5:ec:4c:14:3c:3c:57:87:
         5b:26:89:5a:aa:6c:c0:ab:38:3d:b6:2e:2f:95:12:19:b5:ae:
         59:75:a2:53:f0:43:55:0f:c7:5b:9d:16:14:22:8e:ff:28:68:
         50:44:2e:5f:ab:f8:09:f7:2b:d8:db:7b:e1:12:9f:da:59:fa:
         6a:85:b0:d8:e8:4c:df:e4:98:49:90:87:b0:9a:f9:b2:d8:f7:
         a2:c2:04:41:32:47:f7:bd:df:33:14:8a:d8:87:5b:e7:08:44:
         5f:97:f2:75:28:60:25:53:ce:52:80:a5:34:42:a2:ad:52:9b:
         35:86:a7:b3:78:d5:18:16:e7:d7:3e:c8:21:82:2e:16:0b:9a:
         54:78:b3:8d:96:03:fd:ed:57:c0:e7:d1:4a:3a:16:2a:5c:7b:
         fe:62:52:8e:ad:38:77:bb:b9:50:03:16:c2:a7:d3:46:7d:e7:
         60:22:8a:a4:21:e6:57:55:b1:f1:1e:af:a5:65:90:b3:47:82:
         e3:74:2d:e0:b0:8a:6b:81:a2:f2:ab:54:85:dc:12:48:76:51:
         05:5c:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 20:54:38 2024 by rpki-client on console-fra.rpki-client.org