Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa
File:                     3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa (raw, json)
Hash identifier:          mNVtm0/04oeI+4r/u/tKHSTiADC+TKPoo6LpukG2AjE=
Subject key identifier:   E9:D3:1B:73:FF:C0:48:B1:B6:BB:AC:4A:C8:B3:EE:ED:FD:BD:7C:6B
Certificate issuer:       /CN=BAB763D78A27788C4136E1E1F000F960EF242B72
Certificate serial:       5D6F2536D982B93CC9020AE607D44B12F3B063DD
Authority key identifier: BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa
Signing time:             Tue 05 Mar 2024 18:08:38 +0000
ROA not before:           Tue 05 Mar 2024 18:03:38 +0000
ROA not after:            Tue 04 Mar 2025 18:08:38 +0000
asID:                     262242
IP address blocks:        170.246.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:6f:25:36:d9:82:b9:3c:c9:02:0a:e6:07:d4:4b:12:f3:b0:63:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAB763D78A27788C4136E1E1F000F960EF242B72
        Validity
            Not Before: Mar  5 18:03:38 2024 GMT
            Not After : Mar  4 18:08:38 2025 GMT
        Subject: CN=E9D31B73FFC048B1B6BBAC4AC8B3EEEDFDBD7C6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a5:9b:a0:55:ee:51:3f:fb:6a:92:8a:30:cd:
                    a7:44:92:4b:35:67:b2:83:c0:68:d5:ac:38:7a:27:
                    9b:cc:05:6e:e8:01:df:d3:b4:b7:bc:cb:29:25:ec:
                    b4:f2:ec:19:9b:d8:fb:0f:aa:b7:1a:87:c9:e2:f4:
                    8f:78:76:8b:1a:82:0f:70:3d:ad:5d:13:d7:79:55:
                    ee:76:c1:db:ee:54:03:5d:9d:9d:49:03:b5:cd:3e:
                    58:d0:c2:0e:f6:e6:00:72:a9:db:ab:96:ed:e5:d9:
                    8b:11:d4:c0:f8:b5:09:82:08:dd:0e:15:04:7d:85:
                    c8:8d:f6:98:3f:d8:e6:ef:68:a0:01:e4:f2:84:e2:
                    62:f3:e4:ba:e5:b6:9b:3a:93:a5:44:09:af:21:d0:
                    e1:f2:37:72:f4:f8:45:92:c1:eb:f6:b4:79:a4:f8:
                    71:ca:ab:f0:35:22:b9:c7:3e:02:85:13:df:e9:51:
                    95:1a:a3:a1:02:f1:88:2c:4e:3b:35:94:58:ad:2e:
                    0d:6b:6d:2b:7e:31:eb:a4:80:04:4f:15:f5:c1:28:
                    18:c4:42:af:ed:0a:b6:43:45:ef:c6:50:d2:90:9c:
                    0a:97:fc:33:a6:20:bb:eb:8b:c5:fc:42:4d:a8:25:
                    f0:c0:c2:83:26:1e:c0:b5:22:75:df:fd:f3:0b:da:
                    d3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D3:1B:73:FF:C0:48:B1:B6:BB:AC:4A:C8:B3:EE:ED:FD:BD:7C:6B
            X509v3 Authority Key Identifier:
                keyid:BA:B7:63:D7:8A:27:78:8C:41:36:E1:E1:F0:00:F9:60:EF:24:2B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/BAB763D78A27788C4136E1E1F000F960EF242B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BAB763D78A27788C4136E1E1F000F960EF242B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EA35D463C57BF025EE23F25DC3EB3E16FE139BF5A61C573F1AD011E8BE68CA1B/0/3137302e3234362e3130302e302f32322d3232203d3e20323632323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:e3:54:4c:7c:47:f8:87:69:17:11:a8:38:18:4c:01:c3:fd:
         f2:37:bc:73:f8:65:61:8b:22:98:20:a1:6b:cc:74:e9:f4:1f:
         df:18:1f:e7:02:64:a7:9f:b7:e4:6e:ec:fe:08:87:d2:e8:4c:
         2a:f4:18:6d:1e:05:7e:22:5e:6e:4f:fe:6e:b5:ae:1d:de:60:
         56:a2:0e:19:ca:78:4d:4a:5c:c7:54:91:f0:8d:8e:8c:66:4d:
         3e:0f:c7:eb:04:4d:56:8c:dd:82:df:16:02:fb:58:e4:2e:1a:
         82:4b:dd:57:d5:fc:ca:2c:dc:cf:3f:c3:11:00:c6:4b:14:2c:
         c7:b3:6b:e1:03:6b:1c:c0:ac:16:3b:1f:ef:63:f5:ec:65:e4:
         00:e5:5e:6a:98:c7:cf:e2:50:4d:ef:af:66:5a:01:13:68:4b:
         d1:9e:22:b8:cf:68:4a:31:d7:9e:30:36:0e:bf:fb:d0:75:8a:
         a8:16:81:e3:ad:bb:81:be:44:47:f5:e3:2c:f3:e7:56:8f:a9:
         f4:98:c9:5d:7a:2a:b7:5a:94:52:77:79:aa:0c:c1:4b:fc:9e:
         e5:99:a1:ac:ec:12:55:fd:16:a5:04:70:24:84:d2:39:d3:74:
         93:22:6a:ac:ae:d9:73:70:99:d7:43:e3:23:8a:6d:3e:bd:cc:
         f7:0f:7e:84
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUXW8lNtmCuTzJAgrmB9RLEvOwY90wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkFCNzYzRDc4QTI3Nzg4QzQxMzZFMUUxRjAwMEY5NjBF
RjI0MkI3MjAeFw0yNDAzMDUxODAzMzhaFw0yNTAzMDQxODA4MzhaMDMxMTAvBgNV
BAMTKEU5RDMxQjczRkZDMDQ4QjFCNkJCQUM0QUM4QjNFRUVERkRCRDdDNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3pZugVe5RP/tqkoowzadEkks1
Z7KDwGjVrDh6J5vMBW7oAd/TtLe8yykl7LTy7Bmb2PsPqrcah8ni9I94dosagg9w
Pa1dE9d5Ve52wdvuVANdnZ1JA7XNPljQwg725gByqdurlu3l2YsR1MD4tQmCCN0O
FQR9hciN9pg/2ObvaKAB5PKE4mLz5Lrltps6k6VECa8h0OHyN3L0+EWSwev2tHmk
+HHKq/A1IrnHPgKFE9/pUZUao6EC8YgsTjs1lFitLg1rbSt+MeukgARPFfXBKBjE
Qq/tCrZDRe/GUNKQnAqX/DOmILvri8X8Qk2oJfDAwoMmHsC1InXf/fML2tOJAgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU6dMbc//ASLG2u6xKyLPu7f29fGswHwYDVR0j
BBgwFoAUurdj14oneIxBNuHh8AD5YO8kK3IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQTM1RDQ2M0M1N0JGMDI1RUUyM0YyNURDM0VCM0UxNkZF
MTM5QkY1QTYxQzU3M0YxQUQwMTFFOEJFNjhDQTFCLzAvQkFCNzYzRDc4QTI3Nzg4
QzQxMzZFMUUxRjAwMEY5NjBFRjI0MkI3Mi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CQUI3NjNENzhBMjc3ODhDNDEz
NkUxRTFGMDAwRjk2MEVGMjQyQjcyLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUEzNUQ0NjNDNTdCRjAyNUVFMjNGMjVEQzNFQjNFMTZGRTEzOUJGNUE2
MUM1NzNGMUFEMDExRThCRTY4Q0ExQi8wLzMxMzczMDJlMzIzNDM2MmUzMTMwMzAy
ZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2MzIzMjM0MzIucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKq
9mQwDQYJKoZIhvcNAQELBQADggEBACjjVEx8R/iHaRcRqDgYTAHD/fI3vHP4ZWGL
IpggoWvMdOn0H98YH+cCZKeft+Ru7P4Ih9LoTCr0GG0eBX4iXm5P/m61rh3eYFai
DhnKeE1KXMdUkfCNjoxmTT4Px+sETVaM3YLfFgL7WOQuGoJL3VfV/Mos3M8/wxEA
xksULMeza+EDaxzArBY7H+9j9exl5ADlXmqYx8/iUE3vr2ZaARNoS9GeIrjPaEox
154wNg6/+9B1iqgWgeOtu4G+REf14yzz51aPqfSYyV16KrdalFJ3eaoMwUv8nuWZ
oazsElX9FqUEcCSE0jnTdJMiaqyu2XNwmddD4yOKbT69zPcPfoQ=
-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:11 2024 by rpki-client on console-fra.rpki-client.org