Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa
File:                     3137302e3135302e38382e302f32322d3232203d3e203630343538.roa (raw, json)
Hash identifier:          7bBnrE8wtIy0FsK4Pi4VA0WNp2RbLJHccFoy3Qx5BwI=
Subject key identifier:   8E:14:D5:4C:BF:CD:CD:49:D6:14:B5:5D:45:11:B3:A0:C2:65:80:8E
Certificate issuer:       /CN=03A6A69649FF3B8207574889C062EB9EB55CB389
Certificate serial:       76892DCBDB811DDCA886B76C308D9DE2FC1D1AFF
Authority key identifier: 03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa
Signing time:             Tue 05 Mar 2024 17:50:56 +0000
ROA not before:           Tue 05 Mar 2024 17:45:56 +0000
ROA not after:            Tue 04 Mar 2025 17:50:56 +0000
asID:                     60458
IP address blocks:        170.150.88.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:89:2d:cb:db:81:1d:dc:a8:86:b7:6c:30:8d:9d:e2:fc:1d:1a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03A6A69649FF3B8207574889C062EB9EB55CB389
        Validity
            Not Before: Mar  5 17:45:56 2024 GMT
            Not After : Mar  4 17:50:56 2025 GMT
        Subject: CN=8E14D54CBFCDCD49D614B55D4511B3A0C265808E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:9e:de:fc:c0:f7:f0:27:19:6b:c9:c1:35:
                    cd:d2:a0:c8:59:07:e5:d7:23:27:be:0c:2d:c9:c8:
                    4c:2a:dc:d8:e6:d9:b6:14:ab:5a:34:45:9d:f2:08:
                    b6:14:84:1d:5f:21:62:0c:32:e0:5c:0d:c2:ec:fa:
                    07:be:60:13:b1:1a:fc:92:e1:f1:1b:0d:2c:cb:6e:
                    9f:45:32:f5:78:50:82:99:d3:8e:c9:56:e2:f8:71:
                    4c:85:ae:da:6f:8e:fb:93:2f:87:82:a5:db:1c:e9:
                    35:10:44:c8:8b:7e:e9:44:6f:21:cd:f9:f1:e7:47:
                    c0:42:cc:cd:a5:de:7b:19:b6:c2:2f:c0:e8:e6:65:
                    c7:c1:17:c4:4d:de:71:a1:63:6f:70:3d:c1:6e:e2:
                    f1:cb:80:cc:a7:c6:32:dc:c6:1c:b2:b3:af:1c:34:
                    7d:d1:04:f5:7a:2d:58:7b:b1:0c:e2:10:7b:99:12:
                    5c:7c:d5:2c:a5:fc:32:94:cb:8f:fa:37:16:cd:ce:
                    0f:dc:3a:c0:ba:6b:1b:08:f2:5c:e0:5b:27:0a:52:
                    14:d5:83:e0:7c:ef:d6:24:bb:31:67:4a:24:3d:fc:
                    02:37:58:4f:89:6e:d0:19:18:1d:6e:d5:1d:61:56:
                    6f:f5:34:60:28:d2:30:ff:95:ac:a3:4e:f3:9a:eb:
                    7f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:14:D5:4C:BF:CD:CD:49:D6:14:B5:5D:45:11:B3:A0:C2:65:80:8E
            X509v3 Authority Key Identifier:
                keyid:03:A6:A6:96:49:FF:3B:82:07:57:48:89:C0:62:EB:9E:B5:5C:B3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/03A6A69649FF3B8207574889C062EB9EB55CB389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/03A6A69649FF3B8207574889C062EB9EB55CB389.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E7781D1B7DCD36BA55EBDAFBF509D645DD7F4339B193E862A1571C4A1146DBC0/0/3137302e3135302e38382e302f32322d3232203d3e203630343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:63:8e:3f:1d:9e:05:fc:bf:f3:1b:c7:d8:ee:62:ea:77:a6:
         ea:41:0e:b3:5e:a4:a2:06:13:d0:e5:26:38:3b:b4:bf:33:84:
         59:9e:a3:2d:8c:61:85:0f:b4:c4:df:fc:ee:85:b4:7d:54:0e:
         a0:d5:2a:0f:09:e3:95:d0:c4:ca:5f:5b:20:3d:8e:f8:18:1c:
         0a:b6:8f:6b:a9:e4:59:a4:68:a0:6e:89:10:bb:bd:aa:75:b0:
         0a:3a:f2:bc:0b:7d:17:f3:53:af:03:45:87:bc:58:21:3b:7f:
         96:11:6b:97:e6:85:07:8c:bc:03:52:c0:f9:9a:bf:89:5a:e5:
         da:b8:38:5f:58:11:91:65:fe:37:01:3e:8e:03:3a:2b:12:61:
         83:0f:8b:50:50:a9:f0:63:6e:b6:fb:57:55:00:0e:5a:a1:10:
         cf:1c:76:4c:06:18:50:58:6d:8c:ab:bd:eb:cc:76:2f:63:e9:
         c7:dd:14:4d:ad:36:65:28:2c:a7:02:f1:16:65:56:e5:b1:2a:
         a8:ea:50:75:0a:c3:f0:51:dd:bb:c8:4e:6d:a5:59:4e:ab:75:
         c8:f8:30:8f:5a:bf:e2:2f:48:ce:0b:52:12:c7:07:6e:44:98:
         80:8f:0d:fd:9d:53:02:75:e9:5d:77:5d:d8:ff:59:2f:d7:0e:
         08:f9:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org