Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3232203d3e20323633373635.roa
File:                     3137302e38342e3133322e302f32322d3232203d3e20323633373635.roa (raw, json)
Hash identifier:          JoQ82T2dAQwtoFDRcQg104a2XyghPShNj84AoaXNsrE=
Subject key identifier:   59:A8:FC:66:DD:B4:2F:87:44:76:B5:A9:0F:DD:09:5A:5B:91:EF:A6
Certificate issuer:       /CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
Certificate serial:       2AA5A70E706D0397895DFA12130E33E22FCC5FE5
Authority key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3232203d3e20323633373635.roa
Signing time:             Tue 17 Sep 2024 17:00:00 +0000
ROA not before:           Tue 17 Sep 2024 16:55:00 +0000
ROA not after:            Tue 16 Sep 2025 17:00:00 +0000
asID:                     263765
IP address blocks:        170.84.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Oct 2024 06:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:a5:a7:0e:70:6d:03:97:89:5d:fa:12:13:0e:33:e2:2f:cc:5f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
        Validity
            Not Before: Sep 17 16:55:00 2024 GMT
            Not After : Sep 16 17:00:00 2025 GMT
        Subject: CN=59A8FC66DDB42F874476B5A90FDD095A5B91EFA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a3:3c:62:41:5c:24:6c:bb:7d:a4:e4:d1:d8:
                    9b:28:81:3c:61:b4:a5:bb:c4:45:04:c8:6e:3c:39:
                    3f:e6:4a:77:96:02:28:a7:1c:03:80:3b:0e:fb:99:
                    73:13:5c:8a:37:5c:0e:eb:ac:f2:b9:7f:d7:84:3c:
                    6d:0b:02:f6:7d:79:f8:1c:fd:24:ea:93:0b:bd:d3:
                    cd:6d:a7:63:9d:17:51:41:79:af:15:84:c8:8c:56:
                    fe:34:ed:c9:02:f5:cc:94:f2:25:a2:7b:5a:67:96:
                    3d:55:98:0f:95:3c:03:c8:c9:a6:aa:79:a6:f2:d5:
                    b1:11:5b:a5:ea:3e:fd:df:9e:e9:18:42:e1:f1:ff:
                    39:0e:c7:95:c0:18:f4:e5:2a:cf:13:7b:e2:37:07:
                    d7:3a:b5:08:4f:df:ad:8a:81:9e:e3:0e:c9:b5:d6:
                    8f:78:1d:91:64:10:92:31:59:eb:41:b5:65:c4:51:
                    ff:79:f6:5f:07:d8:57:12:b3:78:95:7b:e6:99:ae:
                    fc:de:f8:5e:41:5c:8e:e2:7f:e8:e8:b8:8b:e3:30:
                    cf:8f:e8:b4:bf:a7:95:a5:15:9b:90:41:69:20:35:
                    72:22:bf:a8:cb:6d:80:97:af:4f:45:60:da:34:f4:
                    e3:ec:9c:c1:33:f5:06:f0:ee:c5:6d:e6:57:87:6f:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:FC:66:DD:B4:2F:87:44:76:B5:A9:0F:DD:09:5A:5B:91:EF:A6
            X509v3 Authority Key Identifier:
                keyid:B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3232203d3e20323633373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:9e:f8:7c:eb:18:eb:d9:72:86:72:f0:2b:6a:34:25:a2:
         24:fb:22:dc:69:8e:e9:ba:c7:b9:f5:9a:8f:46:fc:57:5e:fa:
         bb:d5:60:3f:de:65:91:8d:7b:57:cd:69:c3:e1:60:f9:8e:68:
         9d:55:04:04:c2:fb:37:d8:52:c4:ce:ea:de:91:56:d6:13:01:
         7b:0e:03:7e:c9:b5:8a:e5:03:f0:19:f6:0e:92:30:c3:fa:2f:
         23:76:de:82:5f:10:8b:8f:f7:77:73:9a:79:68:d1:87:2d:17:
         e5:8a:60:d7:ef:06:12:ca:8f:06:38:82:a6:5f:55:70:38:e0:
         90:87:d8:76:18:9e:11:b6:2a:be:3f:f7:ca:ac:ba:a3:9c:0a:
         a4:d1:f6:e5:db:8f:43:c2:9d:1d:08:d5:d3:00:d9:d9:e5:35:
         45:09:62:63:5d:77:c5:64:d8:b9:82:44:03:9b:27:2d:08:a2:
         73:91:12:e2:c8:95:6c:c1:5d:3a:61:4c:e2:ee:76:72:05:8f:
         91:8a:ed:a6:0c:9a:42:79:6e:00:07:9a:2e:0e:40:61:04:e3:
         1d:a1:a7:dd:59:df:10:6e:9a:18:9c:16:b0:85:da:48:5d:bd:
         d1:3a:8e:34:12:0d:c0:66:48:a1:a5:9f:00:98:17:eb:b0:49:
         eb:c8:06:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 06:47:28 2024 by rpki-client on console-fra.rpki-client.org