Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
File:                     3137302e3233332e37322e302f32322d3232203d3e203333333932.roa (raw, json)
Hash identifier:          Mx6CrnqKitF0EiLMF4J0LGaqqYgkvnEaBhGgGLOa5dg=
Subject key identifier:   BA:BC:7A:02:88:0E:D9:C8:E8:0C:37:1B:E3:2C:FC:A5:AE:9E:BD:5F
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       2B2F032630B7A3590A238AE54ACF828299507C89
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa
Signing time:             Fri 03 May 2024 14:05:00 +0000
ROA not before:           Fri 03 May 2024 14:00:00 +0000
ROA not after:            Fri 02 May 2025 14:05:00 +0000
asID:                     33392
IP address blocks:        170.233.72.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:2f:03:26:30:b7:a3:59:0a:23:8a:e5:4a:cf:82:82:99:50:7c:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: May  3 14:00:00 2024 GMT
            Not After : May  2 14:05:00 2025 GMT
        Subject: CN=BABC7A02880ED9C8E80C371BE32CFCA5AE9EBD5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f6:7c:95:2d:0e:37:f4:e8:e1:13:0a:32:95:
                    14:de:10:a4:e2:1b:60:61:f9:90:29:bf:55:7f:1e:
                    27:36:e1:b9:4e:c4:ca:3a:a6:87:96:53:85:fa:4d:
                    6e:55:72:d8:fe:45:df:2d:18:fb:1a:00:6b:22:23:
                    90:51:ba:87:49:26:c0:a7:05:f9:13:06:bc:04:4e:
                    35:39:90:3a:45:22:e1:3b:e4:87:dd:0f:da:e1:33:
                    d5:49:9a:a2:4f:08:1e:c5:d9:54:23:d8:c8:9d:26:
                    ff:1a:56:ad:c3:42:3f:98:9d:9e:ee:dc:5f:05:d2:
                    f6:c8:1d:7f:94:0c:4f:6c:b8:f4:fd:d8:ab:3c:0d:
                    8b:7b:59:f0:30:ba:b1:68:f0:7c:b0:6f:f9:8c:28:
                    98:95:9a:1c:da:c9:2c:4d:84:3c:82:e4:82:8d:72:
                    76:1c:7a:8d:6c:c0:f9:42:2c:2f:5e:8e:1a:fb:56:
                    b4:d8:ba:51:1b:b4:44:f9:67:23:1e:59:f3:16:94:
                    f4:22:1b:a9:a7:a2:e0:e2:78:e0:7d:00:d5:4a:ff:
                    bf:e6:0e:8f:2e:76:cb:c4:f6:28:ec:b6:5f:7d:0d:
                    0d:af:a0:4f:19:4b:9a:e5:b0:e2:df:6e:45:cc:61:
                    d0:3e:8f:ca:46:ce:c1:93:36:ea:70:96:50:d5:e2:
                    13:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BC:7A:02:88:0E:D9:C8:E8:0C:37:1B:E3:2C:FC:A5:AE:9E:BD:5F
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37322e302f32322d3232203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:0c:5f:24:64:f9:72:c0:cd:89:da:97:5d:b0:c7:7e:ce:
         92:8d:f3:52:ea:37:35:ef:e4:cc:e3:6e:7d:fa:d6:31:1f:27:
         eb:e4:b7:a8:74:c0:e6:d1:30:c5:37:79:2f:5d:b3:fb:04:57:
         c2:3e:91:54:43:ec:72:22:3f:e2:2d:43:3f:ad:13:1a:7a:ee:
         c7:1a:ce:5c:b7:24:50:1e:4a:da:4e:f9:87:f7:ff:4a:fb:2b:
         4e:ba:40:30:a1:8d:f0:2f:3c:88:3a:3b:7e:2c:aa:47:ce:4b:
         09:f4:4a:05:62:19:46:d9:cb:4b:04:e2:d5:e5:f1:15:0c:73:
         09:be:a8:aa:2c:2f:82:18:23:d6:36:47:66:f4:a1:e4:f6:5f:
         c0:34:2e:95:02:27:50:65:fd:53:05:a0:e7:b9:b9:e5:f4:89:
         b1:23:ea:01:27:2d:13:49:7c:5b:60:59:da:22:c6:29:2a:c4:
         d6:8d:2d:90:5b:48:36:6e:81:db:20:04:ed:b7:15:e8:4a:e7:
         f9:1a:66:05:44:bf:3f:f0:d5:d6:ab:62:d6:ec:66:e6:35:fe:
         1f:8e:a2:5d:68:7d:12:ad:b3:99:86:0d:ac:fb:81:5b:3e:ed:
         50:ce:6a:ff:f1:58:bc:e4:ea:e3:64:f7:b2:15:4e:5d:80:a6:
         ec:98:5c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org