Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3137302e3233392e33322e302f32322d3234203d3e20323633373737.roa
File:                     3137302e3233392e33322e302f32322d3234203d3e20323633373737.roa (raw, json)
Hash identifier:          0PNQh4fnwZ9ok1OZljtdPpM9c9xag+K8FqNhENZW5Io=
Subject key identifier:   E4:75:25:D6:9A:77:68:94:10:60:90:49:3E:8F:4D:E7:1E:F8:D5:D2
Certificate issuer:       /CN=765D05128298873F41D1D65632AB25BDBE113398
Certificate serial:       79C72207B2B39CD6C6CAC34DB0DD4539F2D0695C
Authority key identifier: 76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3137302e3233392e33322e302f32322d3234203d3e20323633373737.roa
Signing time:             Tue 05 Mar 2024 17:52:04 +0000
ROA not before:           Tue 05 Mar 2024 17:47:04 +0000
ROA not after:            Tue 04 Mar 2025 17:52:04 +0000
asID:                     263777
IP address blocks:        170.239.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:22:07:b2:b3:9c:d6:c6:ca:c3:4d:b0:dd:45:39:f2:d0:69:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765D05128298873F41D1D65632AB25BDBE113398
        Validity
            Not Before: Mar  5 17:47:04 2024 GMT
            Not After : Mar  4 17:52:04 2025 GMT
        Subject: CN=E47525D69A776894106090493E8F4DE71EF8D5D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:58:84:f2:72:11:c8:e8:73:72:91:20:44:32:
                    9c:8d:c9:4e:ca:db:5a:d3:4d:09:48:93:e1:59:b3:
                    61:01:a5:d7:f5:90:a7:75:8e:a6:e9:f4:66:46:2d:
                    53:af:d7:4f:4a:59:fe:5c:21:1f:04:65:82:fd:a5:
                    00:55:ba:96:3a:60:b8:27:a9:91:3d:6a:a5:b1:8e:
                    9a:69:2d:9a:27:cf:54:6a:0f:54:ca:f9:48:f8:3d:
                    c7:75:5b:23:18:e0:17:38:dc:aa:c6:00:81:a3:33:
                    a5:4a:1f:95:f9:ee:be:0a:45:de:f1:e9:ad:3e:d1:
                    3e:40:0c:e4:29:74:e4:9b:67:e1:53:fc:02:cb:e1:
                    be:7a:85:31:68:69:59:26:73:f7:24:34:5c:f6:5e:
                    d8:18:fd:fe:b0:2e:cf:d4:e1:68:b9:6f:fd:f3:2f:
                    0b:d3:8e:5a:62:d7:58:8b:fe:85:b3:da:79:c8:b7:
                    27:58:15:d6:65:2b:48:f0:51:d8:86:d1:32:cf:ca:
                    3f:60:b0:a2:af:29:78:d2:19:f4:57:1d:c5:3a:29:
                    2b:3f:89:c9:9b:e9:55:53:b8:90:b0:5c:5a:57:4b:
                    bd:45:25:a1:86:a7:8f:88:2b:9a:d6:ef:28:a5:57:
                    14:fe:8e:58:41:15:d1:7e:49:b8:ad:bf:84:e1:7f:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:75:25:D6:9A:77:68:94:10:60:90:49:3E:8F:4D:E7:1E:F8:D5:D2
            X509v3 Authority Key Identifier:
                keyid:76:5D:05:12:82:98:87:3F:41:D1:D6:56:32:AB:25:BD:BE:11:33:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/765D05128298873F41D1D65632AB25BDBE113398.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/765D05128298873F41D1D65632AB25BDBE113398.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F33622924E5F8D4BD0F1A61FAF7716DAD8DBE66FE9AEBDA179D95AED56B2B697/0/3137302e3233392e33322e302f32322d3234203d3e20323633373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:0c:4e:20:a6:e9:d4:b9:48:06:30:0f:36:89:26:74:15:22:
         66:c1:a1:c0:ed:8b:1d:49:a6:c8:0c:95:29:d0:9f:2c:60:c6:
         85:75:b0:07:69:64:c2:83:0a:a7:c0:3d:0e:8e:d6:e0:e4:07:
         cb:40:0a:9d:bd:fb:56:32:c2:ce:96:4f:8f:54:07:64:62:f8:
         e4:f3:17:88:ed:da:1c:6f:74:3e:70:b0:4b:0a:e7:d9:6e:e5:
         29:6e:d2:95:0b:9f:7b:00:e0:53:9f:90:ff:f5:7f:5e:19:51:
         0b:3c:b3:6b:da:4e:56:df:71:01:e5:46:c7:f3:e5:d6:1e:37:
         0a:2c:ae:d2:ae:57:19:5d:16:70:5c:a4:97:ef:c0:8c:a5:d0:
         4e:9a:e3:f8:0a:1c:f0:9b:6a:22:ee:c4:e5:bf:f4:54:4d:77:
         98:23:8c:8d:88:83:d5:38:56:46:5c:be:dd:44:f7:39:59:6b:
         61:42:4d:24:48:ab:12:e2:44:78:87:15:de:da:18:56:b3:91:
         00:f5:3e:96:8a:48:c9:7e:08:9e:dc:e5:16:c7:8e:28:5e:fa:
         6b:24:21:3e:2a:76:f4:06:ac:1c:65:0e:93:c5:5f:0a:d7:ff:
         6d:01:a2:62:31:e9:2d:43:f3:20:73:25:66:5b:8c:0a:4b:e6:
         24:64:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org