Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3234203d3e20323633373635.roa
File:                     3137302e38342e3133322e302f32322d3234203d3e20323633373635.roa (raw, json)
Hash identifier:          yDaAkUWp8EHrI5tWGM1zkQDnusAiC9zGIVNIl1cYkuc=
Subject key identifier:   39:5F:02:E1:4D:9D:36:36:60:F5:8D:64:94:05:D1:4E:40:CE:51:B5
Certificate issuer:       /CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
Certificate serial:       2E4A7DE925BB89EF195770484D29CA726394FB84
Authority key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3234203d3e20323633373635.roa
Signing time:             Tue 17 Sep 2024 17:20:00 +0000
ROA not before:           Tue 17 Sep 2024 17:15:00 +0000
ROA not after:            Tue 16 Sep 2025 17:20:00 +0000
asID:                     263765
IP address blocks:        170.84.132.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 28 Oct 2024 06:49:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:4a:7d:e9:25:bb:89:ef:19:57:70:48:4d:29:ca:72:63:94:fb:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A
        Validity
            Not Before: Sep 17 17:15:00 2024 GMT
            Not After : Sep 16 17:20:00 2025 GMT
        Subject: CN=395F02E14D9D363660F58D649405D14E40CE51B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4f:14:93:2c:94:fb:ab:4d:73:d7:84:17:c0:
                    a2:c4:3f:6a:47:ee:db:46:d4:d8:f5:3a:c5:e3:50:
                    52:e9:a2:af:8f:7b:b6:b4:4f:7d:1d:de:d0:74:ce:
                    46:4b:dd:91:d8:28:14:5c:37:ff:b9:27:91:6b:e9:
                    e3:a4:2c:d3:27:aa:36:e8:40:c1:19:60:25:1c:1d:
                    4d:aa:c0:77:79:eb:5f:38:ba:84:43:0c:cd:d5:b7:
                    50:48:0a:16:d6:bb:cd:ac:7c:b4:79:93:e6:6c:ca:
                    89:94:fb:93:8e:38:25:5c:ad:dc:f5:18:0c:e3:0d:
                    6e:7f:d6:f5:71:2d:7d:eb:e0:21:c9:ff:2f:90:24:
                    44:62:e8:37:68:27:2c:06:e5:4f:c6:04:c8:5a:73:
                    1f:f4:b8:37:cb:1d:3c:29:66:f5:a4:48:07:ad:80:
                    3a:bc:9f:32:a2:36:76:90:81:04:34:ec:40:ff:26:
                    2b:00:3b:f4:6d:e2:41:df:08:44:24:6f:80:4a:a4:
                    8a:ef:b7:8e:4a:d3:96:97:ac:15:5e:84:bf:31:48:
                    77:cf:0d:d2:6c:d1:04:75:19:4e:bd:13:80:7e:ae:
                    8a:f1:de:54:a1:e8:4a:bb:e6:e7:f8:59:52:fa:a7:
                    89:e2:38:fd:e5:cc:38:64:bb:ac:ae:b6:c0:0e:c9:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5F:02:E1:4D:9D:36:36:60:F5:8D:64:94:05:D1:4E:40:CE:51:B5
            X509v3 Authority Key Identifier:
                keyid:B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/3137302e38342e3133322e302f32322d3234203d3e20323633373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:46:48:9d:78:09:d3:37:5b:75:c8:6a:db:98:4d:f5:39:da:
         49:12:0c:58:08:c8:b2:83:13:e4:19:f3:56:ca:6b:75:03:6f:
         22:e4:e3:b3:0d:dc:58:54:c7:86:8b:6a:99:fe:d3:5d:64:f6:
         95:cd:41:e4:85:a0:03:b4:3d:a2:78:32:9e:7d:d8:b6:1d:5e:
         b1:37:13:8c:8b:ea:bd:09:8d:86:0e:8c:af:94:68:7f:cb:0c:
         a7:a8:1c:04:a3:e3:f4:ce:75:40:8b:d1:55:80:5e:d8:2c:08:
         22:c2:b1:8a:83:09:4e:98:3d:29:dd:b2:ac:20:90:0f:ab:14:
         6c:53:0d:f1:3c:b1:29:08:bb:db:b9:b3:fe:c0:1d:9a:33:f1:
         20:fc:24:6b:60:a1:de:5f:ba:35:e0:0e:31:3b:be:02:69:b2:
         ae:a2:62:46:1f:70:37:7e:1f:21:53:2f:24:6d:17:cc:97:be:
         0a:89:8e:f6:f6:f1:b8:7c:f3:61:1c:a2:0f:b7:23:ac:67:a5:
         af:90:d8:15:79:cf:39:7f:6d:a1:fa:41:eb:11:7c:80:41:ea:
         5f:67:ee:96:5d:ff:dc:7b:67:cd:cf:16:64:b7:aa:2a:70:c4:
         14:59:3f:76:39:b6:c7:d8:16:fe:d9:f1:68:c0:42:2f:87:ae:
         cb:53:85:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:09:51 2024 by rpki-client on console-ams.rpki-client.org