Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa
File:                     3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa (raw, json)
Hash identifier:          NEcOf03tl78qb0v8zmgEHS45V7BW+AVb2TllB2GzjgU=
Subject key identifier:   65:66:02:E8:9B:5F:25:4B:A7:4C:2A:F9:91:E9:72:16:EF:4B:29:54
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       4F5E339B087BA6CF8286057EA5C5903284FAE3FE
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa
Signing time:             Tue 05 Mar 2024 18:02:25 +0000
ROA not before:           Tue 05 Mar 2024 17:57:25 +0000
ROA not after:            Tue 04 Mar 2025 18:02:25 +0000
asID:                     263812
IP address blocks:        170.80.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:5e:33:9b:08:7b:a6:cf:82:86:05:7e:a5:c5:90:32:84:fa:e3:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:25 2024 GMT
            Not After : Mar  4 18:02:25 2025 GMT
        Subject: CN=656602E89B5F254BA74C2AF991E97216EF4B2954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:de:c9:85:50:1f:d6:a6:0e:9c:1e:e8:e8:9e:
                    01:23:21:bd:ab:e9:c5:75:1e:54:88:21:b0:9b:6e:
                    34:0a:a8:ba:07:29:f0:db:ce:b1:23:ae:17:43:5e:
                    cd:cb:9d:c9:ff:31:26:59:05:8e:20:93:03:5c:51:
                    15:b6:c8:9e:83:e6:56:31:eb:e2:36:5b:da:6e:b5:
                    8b:f8:b0:85:c2:c7:12:65:d7:ee:db:f1:35:6c:9d:
                    5f:d1:87:54:3b:d7:62:cd:c0:3a:07:42:c4:6b:b2:
                    69:06:92:ff:8c:61:1d:68:fc:04:19:36:13:f5:1d:
                    6d:a7:46:12:9a:bd:02:a3:48:8e:a2:df:d5:a5:7d:
                    18:fb:2e:a3:5c:da:a8:1d:05:0c:31:35:fd:c5:e0:
                    d6:20:53:c5:e2:d8:8a:46:42:90:d3:06:78:1a:21:
                    64:99:d1:d4:12:ea:8b:a0:af:fd:27:3a:8a:ac:5f:
                    a1:09:0c:3c:9f:fc:cc:19:52:9f:6c:8d:72:e0:88:
                    32:9d:fc:04:6a:56:59:c6:eb:65:a8:23:dd:7b:27:
                    4c:5b:3e:36:43:35:80:7c:7b:ff:1d:66:5d:73:40:
                    c9:75:79:d2:0a:77:6a:55:43:c6:12:c9:30:46:2c:
                    25:ca:73:91:72:ab:8a:42:8a:16:8a:b1:cd:4b:db:
                    29:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:02:E8:9B:5F:25:4B:A7:4C:2A:F9:91:E9:72:16:EF:4B:29:54
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20323633383132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:be:a4:ee:ee:5d:19:6f:c1:06:32:4d:74:20:f6:4a:e4:9b:
         95:2a:d8:13:d9:1f:8c:19:45:12:ae:84:d7:9e:c0:fd:48:ea:
         5d:9a:23:63:43:ea:0b:13:8f:78:df:5d:2c:7b:ea:27:67:33:
         4e:bf:4f:e2:48:98:3b:a8:fc:82:18:a2:ab:6b:0e:64:db:f6:
         d3:cd:38:d7:82:31:1f:77:d2:63:d3:ec:f0:7c:0d:7a:85:a1:
         1a:25:d4:a3:61:d9:2a:e2:3f:ad:b9:79:59:04:c1:20:6f:ee:
         ab:1a:d8:a5:e4:41:e6:b5:48:49:02:79:bc:9d:53:75:ab:6e:
         4d:38:2f:fc:67:01:6a:b9:26:9c:36:d0:c5:3a:a2:4c:7b:f4:
         d4:5c:fc:8e:2f:e5:d1:c3:ff:ab:cc:e2:62:eb:70:a5:cf:92:
         cb:38:9c:08:a4:71:8b:43:26:96:6a:de:9b:5c:a6:8d:9f:ca:
         c3:11:12:8c:3f:5c:e8:b4:14:3e:49:d6:bf:b1:f7:62:ce:24:
         4b:e9:29:62:17:af:e3:16:0e:29:9f:84:c2:9b:ba:ea:0b:24:
         45:5b:b4:bd:b4:1a:6d:78:dd:05:cf:99:9b:d4:d8:5f:1e:a3:
         f5:57:52:7a:be:de:63:87:5d:1a:eb:8d:f3:85:b6:fb:99:9a:
         65:68:2b:a1
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUT14zmwh7ps+ChgV+pcWQMoT64/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREIwOTdCMUQ5NUJCNTFDOUY1MTNGQzUzNDI5RjMwRUEy
MDdDMTU0OTAeFw0yNDAzMDUxNzU3MjVaFw0yNTAzMDQxODAyMjVaMDMxMTAvBgNV
BAMTKDY1NjYwMkU4OUI1RjI1NEJBNzRDMkFGOTkxRTk3MjE2RUY0QjI5NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq3smFUB/Wpg6cHujongEjIb2r
6cV1HlSIIbCbbjQKqLoHKfDbzrEjrhdDXs3Lncn/MSZZBY4gkwNcURW2yJ6D5lYx
6+I2W9putYv4sIXCxxJl1+7b8TVsnV/Rh1Q712LNwDoHQsRrsmkGkv+MYR1o/AQZ
NhP1HW2nRhKavQKjSI6i39WlfRj7LqNc2qgdBQwxNf3F4NYgU8Xi2IpGQpDTBnga
IWSZ0dQS6ougr/0nOoqsX6EJDDyf/MwZUp9sjXLgiDKd/ARqVlnG62WoI917J0xb
PjZDNYB8e/8dZl1zQMl1edIKd2pVQ8YSyTBGLCXKc5Fyq4pCihaKsc1L2ykhAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUZWYC6JtfJUunTCr5kelyFu9LKVQwHwYDVR0j
BBgwFoAU2wl7HZW7Ucn1E/xTQp8w6iB8FUkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FQjFFOTM3NTYwMUYxMjE4MTA4OTRGMDQ2QjNEM0NFQ0VB
NEVDODE2Q0Q1MzAwOTBBMEU5NzE3QjA5M0VCRjQ3LzAvREIwOTdCMUQ5NUJCNTFD
OUY1MTNGQzUzNDI5RjMwRUEyMDdDMTU0OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQjA5N0IxRDk1QkI1MUM5RjUx
M0ZDNTM0MjlGMzBFQTIwN0MxNTQ5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRUIxRTkzNzU2MDFGMTIxODEwODk0RjA0NkIzRDNDRUNFQTRFQzgxNkNE
NTMwMDkwQTBFOTcxN0IwOTNFQkY0Ny8wLzMxMzczMDJlMzgzMDJlMzEzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzgzMTMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlBs
MA0GCSqGSIb3DQEBCwUAA4IBAQBsvqTu7l0Zb8EGMk10IPZK5JuVKtgT2R+MGUUS
roTXnsD9SOpdmiNjQ+oLE494310se+onZzNOv0/iSJg7qPyCGKKraw5k2/bTzTjX
gjEfd9Jj0+zwfA16haEaJdSjYdkq4j+tuXlZBMEgb+6rGtil5EHmtUhJAnm8nVN1
q25NOC/8ZwFquSacNtDFOqJMe/TUXPyOL+XRw/+rzOJi63Clz5LLOJwIpHGLQyaW
at6bXKaNn8rDERKMP1zotBQ+Sda/sfdiziRL6SliF6/jFg4pn4TCm7rqCyRFW7S9
tBpteN0Fz5mb1NhfHqP1V1J6vt5jh10a643zhbb7mZplaCuh
-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org