Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
File:                     3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          qUGYm3hwwEEPhubf3XwTJWzYfrbXBO9FnUB/Pz/xo5M=
Subject key identifier:   CF:F1:D9:80:31:2C:2D:0F:67:33:29:2C:A7:31:C1:71:6E:76:D9:86
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       1B74392C323CF08ED298B44A1F22B245781B344B
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa
Signing time:             Tue 05 Mar 2024 17:51:46 +0000
ROA not before:           Tue 05 Mar 2024 17:46:46 +0000
ROA not after:            Tue 04 Mar 2025 17:51:46 +0000
asID:                     262262
IP address blocks:        170.231.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 00:58:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:74:39:2c:32:3c:f0:8e:d2:98:b4:4a:1f:22:b2:45:78:1b:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Mar  5 17:46:46 2024 GMT
            Not After : Mar  4 17:51:46 2025 GMT
        Subject: CN=CFF1D980312C2D0F6733292CA731C1716E76D986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:43:17:27:5d:b8:cb:1e:bb:b0:74:6a:60:
                    83:1d:9b:b4:2f:13:34:3b:5e:e8:36:81:b8:b1:4d:
                    34:0c:74:fe:63:79:4a:de:2e:03:e6:cc:ff:a1:e1:
                    b7:f0:ed:ab:12:bd:4a:c4:fe:15:49:f4:e7:4c:cc:
                    f5:e6:0a:2f:e6:ef:59:ef:40:b4:e8:38:07:1f:00:
                    b8:35:c5:5c:c9:b8:e6:e3:01:e6:22:a1:00:00:ae:
                    a1:ec:06:dc:31:6a:eb:3d:b0:0b:14:12:24:52:d0:
                    ae:21:e7:e9:07:29:74:43:15:b5:6a:d5:8d:9e:c3:
                    8d:78:19:10:70:a8:c0:00:6a:87:1a:35:97:55:61:
                    9e:0b:d7:66:76:74:bb:f9:3b:73:c0:d7:ca:b9:0e:
                    0a:ca:bd:95:be:9e:8f:28:76:1a:ac:b5:39:85:ba:
                    c7:23:4d:a8:df:f1:49:22:51:8b:da:f0:2b:82:6e:
                    3e:02:82:ff:92:22:b7:76:01:0b:01:18:ec:5f:a9:
                    78:bc:2f:6d:02:21:12:f4:b7:99:ea:10:a2:84:e1:
                    f2:83:d7:6b:9d:3a:f8:a9:2f:bf:bb:4f:b1:a2:06:
                    54:50:9a:04:1c:c1:88:11:b1:f5:2b:9a:d9:1c:8a:
                    70:97:a7:43:b2:1b:72:a5:0c:4d:08:08:20:e9:40:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:D9:80:31:2C:2D:0F:67:33:29:2C:A7:31:C1:71:6E:76:D9:86
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3233312e35322e302f32322d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.231.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:d8:0b:ff:e6:36:c5:4d:fa:b4:4c:d2:37:9d:c3:20:14:
         e7:90:38:1a:47:7b:a9:04:e3:c7:dc:81:d4:9f:b1:49:5c:75:
         a3:00:31:c4:3a:3a:81:d6:61:1f:ec:bb:f3:0e:60:d3:f3:9d:
         87:41:2c:8e:3b:30:31:84:7c:43:22:1f:5e:ac:12:e0:10:4f:
         09:a4:17:be:19:a5:97:a9:4a:46:f2:99:dc:42:af:b7:c5:87:
         1e:42:ff:ba:ca:20:00:c0:b3:fa:3a:7e:3b:5c:4b:ad:28:c4:
         7d:25:b7:c8:b1:48:40:48:ab:2c:a9:f8:48:2b:1c:53:1c:ca:
         83:ae:e2:ee:d6:1c:04:46:f9:a8:de:36:97:7f:93:02:bc:e1:
         c8:7c:e2:78:a0:43:04:25:ba:67:f5:23:a5:3d:fb:51:79:bb:
         33:4f:39:bd:40:26:15:a6:95:cf:42:0b:09:c6:0e:95:b5:76:
         e1:85:a3:ee:84:0b:cc:05:71:43:bd:5c:d6:b6:69:3e:ab:91:
         0f:3b:bc:d7:a2:43:7e:e3:c0:9d:3b:0f:2a:f0:13:6d:a5:d4:
         d6:11:49:1c:ac:20:34:6f:a5:bf:c3:88:63:3d:dc:c0:a2:bf:
         b9:7e:d9:ab:18:ee:e6:d7:4a:7f:0c:b7:8b:ef:c6:f6:65:20:
         23:5a:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:46 2024 by rpki-client on console-fra.rpki-client.org