Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
File:                     3137302e38322e302e302f32322d3232203d3e20323633383239.roa (raw, json)
Hash identifier:          z8O0UJ2Jm87r37XYfpAJVxEmfELlMzcAnMdf2ajAsOQ=
Subject key identifier:   6B:C3:86:CE:A3:B4:1C:F5:E1:2E:BB:82:C4:34:FE:B7:CB:39:84:B0
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       0B2AADBA9658DBDB44EA686B73424D5EE11D4AF7
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa
Signing time:             Tue 05 Mar 2024 18:21:01 +0000
ROA not before:           Tue 05 Mar 2024 18:16:01 +0000
ROA not after:            Tue 04 Mar 2025 18:21:01 +0000
asID:                     263829
IP address blocks:        170.82.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2a:ad:ba:96:58:db:db:44:ea:68:6b:73:42:4d:5e:e1:1d:4a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Mar  5 18:16:01 2024 GMT
            Not After : Mar  4 18:21:01 2025 GMT
        Subject: CN=6BC386CEA3B41CF5E12EBB82C434FEB7CB3984B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c5:a7:61:1c:04:4b:01:80:44:c1:f1:bf:d7:
                    60:68:8a:97:6e:f0:a8:ac:ef:ee:55:bf:55:57:8e:
                    34:77:bf:5e:03:70:f1:da:78:c0:59:cf:7b:47:e4:
                    d7:4a:e9:f2:da:85:91:1d:4e:e6:e1:38:d0:51:7e:
                    aa:3c:78:32:d4:26:4f:5f:86:61:90:55:55:d8:3a:
                    43:02:69:e6:77:37:ff:be:55:63:39:1e:52:a3:44:
                    75:b4:df:97:75:29:e7:70:5d:d1:66:d3:09:5e:c7:
                    69:ec:ca:2d:4b:13:53:74:ff:f4:aa:20:45:a5:98:
                    59:ea:bc:7e:f7:94:0d:ee:9a:c9:f6:76:b4:a6:93:
                    ce:d7:91:15:68:f6:88:09:fd:b3:fe:40:f3:37:67:
                    23:c6:27:46:e5:39:3c:55:82:30:87:b7:8c:4c:ad:
                    8b:83:ad:ea:89:16:40:4d:94:bb:3b:65:13:f1:26:
                    82:ba:72:0c:e4:59:4e:16:a9:17:cc:ce:aa:91:21:
                    2d:95:f9:13:19:a8:dc:24:0b:9d:89:5e:c5:bc:27:
                    88:1e:98:a5:03:d6:73:50:48:1a:3c:42:e1:af:1e:
                    77:fc:2c:19:1a:7c:4b:9d:87:45:89:58:05:8b:63:
                    ac:91:92:0d:5e:70:ac:08:fc:e7:d1:4b:15:54:dd:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C3:86:CE:A3:B4:1C:F5:E1:2E:BB:82:C4:34:FE:B7:CB:39:84:B0
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/3137302e38322e302e302f32322d3232203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:63:fb:5b:35:56:cf:20:ac:c8:33:29:22:18:49:df:a5:26:
         09:48:67:73:7e:15:1c:36:73:fd:48:8b:f6:89:ae:05:6a:73:
         3c:60:e4:03:60:fd:94:15:d8:58:83:8d:50:4f:4f:7e:2e:a4:
         51:68:2b:cf:7e:9f:8d:91:58:43:b5:0f:4c:f2:c7:a5:5d:10:
         ec:2f:99:a0:b7:8e:c1:45:4b:2c:15:02:8d:76:d7:c9:48:cd:
         17:b9:54:32:bd:84:da:0d:11:74:23:11:a6:3c:23:21:88:00:
         bf:cd:d0:be:ae:b5:14:6b:ab:18:da:45:3b:0f:8f:fd:21:63:
         26:91:26:12:67:34:7d:48:73:e1:a2:1e:11:ae:83:bb:d6:02:
         6b:80:05:e6:34:39:10:6e:59:17:b6:cf:0b:88:6f:bd:a6:7e:
         34:0e:91:6c:97:79:e4:99:9d:58:1e:50:25:d8:05:cd:1b:ae:
         73:99:17:be:bb:1f:c2:c5:b2:b4:5c:aa:45:80:c9:10:6d:8b:
         71:39:ac:04:10:9c:81:2c:68:1f:15:09:35:93:0b:c8:ad:70:
         d3:1e:50:ee:a8:65:47:63:5e:93:05:1e:bd:26:46:8c:31:f6:
         8c:3e:ac:88:81:a3:ba:ef:9b:78:ea:92:2c:61:89:e5:ef:5a:
         cb:4e:55:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 14:51:22 2024 by rpki-client on console-fra.rpki-client.org