Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa
File:                     3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa (raw, json)
Hash identifier:          BjWf/VdtPldfK+pEfvse9Kd+XnFs6CGxD3AyO8LNzwo=
Subject key identifier:   CB:67:1D:2C:D5:59:15:49:0B:DE:71:2E:04:FE:B4:E5:55:33:60:45
Certificate issuer:       /CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
Certificate serial:       63370177F30E395934546561EA95DBA097F7E854
Authority key identifier: 5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa
Signing time:             Tue 05 Mar 2024 18:04:49 +0000
ROA not before:           Tue 05 Mar 2024 17:59:49 +0000
ROA not after:            Tue 04 Mar 2025 18:04:49 +0000
asID:                     264828
IP address blocks:        170.80.248.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:37:01:77:f3:0e:39:59:34:54:65:61:ea:95:db:a0:97:f7:e8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C052530EF2C6FD41906B3995027B8B0165F9CFB
        Validity
            Not Before: Mar  5 17:59:49 2024 GMT
            Not After : Mar  4 18:04:49 2025 GMT
        Subject: CN=CB671D2CD55915490BDE712E04FEB4E555336045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:71:69:bb:73:b3:78:ec:91:47:fe:5f:c0:94:
                    4a:a9:9a:ad:b6:61:bc:ab:5e:06:3f:31:b8:62:49:
                    a7:6a:35:5e:17:73:97:8f:7f:7c:a9:d2:57:fc:69:
                    47:23:62:50:76:82:36:6d:7b:48:af:fc:e8:06:15:
                    17:95:77:f1:b4:7e:18:31:5c:65:dc:44:15:ca:b6:
                    db:ef:f8:b2:d8:48:6b:b7:c4:0a:45:b9:9a:8e:9e:
                    07:45:e3:ec:c8:a2:0c:8e:83:9a:0e:f9:25:29:f5:
                    0b:6f:87:86:c3:e0:64:58:bf:6f:96:c5:f4:1f:80:
                    61:64:d2:59:8c:cd:40:68:3d:d0:0a:df:e4:cd:cb:
                    53:22:76:0f:0f:87:69:aa:ed:df:4f:8a:a4:72:56:
                    9b:54:e8:02:c6:a0:84:a3:c5:38:33:a5:05:d0:d3:
                    5b:4f:5d:9f:ea:e1:41:9f:23:b5:51:3f:4f:15:28:
                    e2:d6:89:8d:27:c0:86:33:ca:5e:b2:6b:50:0f:a6:
                    a2:ce:92:76:b7:ff:27:93:01:a4:94:c9:7c:05:1e:
                    2d:20:b7:a9:cf:b6:9d:b7:31:dd:4b:79:d9:30:69:
                    51:f0:52:cc:ba:92:97:69:81:bc:e7:b3:70:c5:a6:
                    31:3f:b3:87:a3:07:af:88:a5:6e:d5:7a:17:12:37:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:67:1D:2C:D5:59:15:49:0B:DE:71:2E:04:FE:B4:E5:55:33:60:45
            X509v3 Authority Key Identifier:
                keyid:5C:05:25:30:EF:2C:6F:D4:19:06:B3:99:50:27:B8:B0:16:5F:9C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C052530EF2C6FD41906B3995027B8B0165F9CFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EEB5C10DFDC6AC68E986D99298E941729CBBA05A32BE8578092500B0D3C6E2B6/0/3137302e38302e3234382e302f32322d3234203d3e20323634383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:dd:b4:17:57:9a:89:1e:da:e4:1a:84:8d:52:be:a9:a5:e1:
         01:62:d4:ae:f6:29:96:8f:94:c2:af:be:93:0c:f5:98:65:81:
         86:36:41:18:d5:35:08:0e:a9:96:9e:f2:23:02:8f:04:b1:25:
         af:c0:a9:01:9c:c5:34:ec:5d:2c:f6:65:40:c1:63:31:e3:7d:
         95:94:63:ee:c3:cb:df:dc:99:5b:15:6b:3b:2f:18:64:48:e6:
         ee:3f:0a:3a:f2:b6:5a:ab:7b:e9:b5:32:40:b4:ce:b0:96:c5:
         70:4a:d6:3a:20:1f:f8:ec:56:01:e9:41:23:0f:5b:45:17:bc:
         a7:54:ad:26:9c:6f:97:5b:39:32:a0:8a:fa:33:a8:ea:a9:f7:
         e2:bb:69:dd:3c:3c:06:d7:ae:4a:fc:3f:e6:1a:fc:56:62:b5:
         6f:8e:4a:a9:b2:0a:b1:7d:0e:24:2d:0c:35:9a:db:78:64:95:
         80:c4:a5:57:18:7c:06:02:53:4d:3a:1c:97:35:1a:98:5b:80:
         d6:3c:0d:d6:ee:ac:41:1f:30:91:4f:a0:d4:aa:8e:ce:d1:3c:
         64:77:97:2b:ee:f2:38:9b:2e:75:bf:11:eb:f6:6f:05:22:0e:
         9b:51:fa:fd:07:33:f5:d9:2c:5b:b5:00:da:83:78:4b:fc:53:
         95:eb:11:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:28 2024 by rpki-client on console-ams.rpki-client.org