Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
File:                     3137302e38342e3231322e302f32322d3234203d3e203237373932.roa (raw, json)
Hash identifier:          ptciEU0ZmYw8E6U6CimqZfqqxuyaH3N3GLo/nVOtrhU=
Subject key identifier:   BB:05:30:EB:88:6F:06:1B:E1:E5:20:ED:1A:30:71:11:BB:26:A7:18
Certificate issuer:       /CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
Certificate serial:       635A37112A28A1C02E3C26B4291321804E27FFA6
Authority key identifier: AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa
Signing time:             Tue 05 Mar 2024 17:56:43 +0000
ROA not before:           Tue 05 Mar 2024 17:51:43 +0000
ROA not after:            Tue 04 Mar 2025 17:56:43 +0000
asID:                     27792
IP address blocks:        170.84.212.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:5a:37:11:2a:28:a1:c0:2e:3c:26:b4:29:13:21:80:4e:27:ff:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6
        Validity
            Not Before: Mar  5 17:51:43 2024 GMT
            Not After : Mar  4 17:56:43 2025 GMT
        Subject: CN=BB0530EB886F061BE1E520ED1A307111BB26A718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e2:65:f2:75:cb:26:b2:0a:aa:ee:fb:57:fa:
                    2c:4c:28:bc:c4:a1:93:57:35:d5:ea:1a:91:8a:b8:
                    9a:21:fa:83:72:ca:63:ad:05:4c:a7:34:3d:95:d0:
                    e7:4f:2f:ba:45:db:6b:5c:9b:fa:57:9d:16:b3:e7:
                    ff:97:15:69:65:d5:50:09:49:43:9d:5c:4b:59:8b:
                    ac:9a:4f:e5:35:4f:4d:0b:fe:eb:ee:b6:12:ea:f1:
                    24:bf:58:11:7c:13:23:26:bc:ba:45:56:1b:29:71:
                    ac:1c:08:54:f0:48:93:20:3c:b4:a0:e1:60:ea:2b:
                    67:3f:4c:d3:e4:a2:32:b5:5a:e7:c9:00:d3:68:58:
                    e5:38:d1:5d:db:fe:9f:96:b8:13:de:1a:65:1f:0a:
                    d1:01:e3:80:0f:cc:01:50:e9:d3:00:01:e8:18:b2:
                    e4:37:8f:8a:41:4e:81:ec:47:b5:0a:41:da:74:24:
                    e1:e6:26:46:0f:d3:01:32:63:ea:27:b6:b9:b4:92:
                    a9:66:52:8d:b3:1b:d5:f8:bb:87:44:e7:f3:dc:9f:
                    fb:fa:8f:98:1d:1f:d6:e7:0b:2f:36:4d:05:a7:d3:
                    cc:9b:6f:59:9e:86:46:bf:4f:4a:e5:17:8b:65:3a:
                    b9:44:b4:df:e8:57:f8:27:fe:2f:59:82:fb:ea:55:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:05:30:EB:88:6F:06:1B:E1:E5:20:ED:1A:30:71:11:BB:26:A7:18
            X509v3 Authority Key Identifier:
                keyid:AF:3F:9A:6B:D1:49:BB:2C:B7:62:7F:3B:2E:5B:74:29:C5:5B:7B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF3F9A6BD149BB2CB7627F3B2E5B7429C55B7BF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5E52B7B2E39B1BEFD92F6DA5E0C5E6414396BD8C1335E234062C29F76A38F3A/0/3137302e38342e3231322e302f32322d3234203d3e203237373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cd:4f:aa:9d:45:80:17:7d:01:99:a3:de:48:f0:74:11:d4:2e:
         9d:12:1f:2f:8e:27:68:86:8f:37:8e:00:4c:87:53:b2:8f:36:
         cc:2a:2f:6d:0d:d6:5b:81:8f:fe:0e:2f:56:53:47:47:12:2c:
         a8:9d:6a:65:17:24:58:b8:ff:fb:fc:45:d1:97:8c:1b:56:66:
         89:c2:3f:ab:9d:08:db:cf:53:d8:dc:5e:13:34:5f:de:21:07:
         d2:ab:ce:bd:66:13:db:8b:a5:70:ef:43:54:6d:27:2b:6b:ad:
         d0:1a:d5:1d:f2:0d:b7:be:d3:ce:cc:7b:c1:e1:ef:d1:50:00:
         d4:0b:df:f8:5a:ba:1a:9c:0f:82:de:6e:d2:81:e9:43:70:38:
         a8:6c:71:c5:50:94:ec:79:aa:a1:b4:ab:e5:ac:27:1f:75:f8:
         32:29:87:bc:55:f1:f9:7d:41:82:48:ba:b1:03:10:24:6a:2c:
         ce:b1:aa:92:28:0d:4f:ca:14:07:2c:c7:4a:00:b8:f9:bf:8e:
         b6:60:52:06:f6:c0:9a:99:5f:75:28:18:19:81:10:26:5a:ef:
         0e:1f:3e:37:07:7c:a4:0e:91:31:3c:b3:96:fb:9a:1e:f6:93:
         67:08:fe:ad:d6:90:54:bb:23:94:6e:ec:fd:39:da:96:1a:e0:
         c4:f6:0a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org