Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231392e302f32342d3234203d3e20323634373730.roa
File:                     3137302e3235342e3231392e302f32342d3234203d3e20323634373730.roa (raw, json)
Hash identifier:          zJicU23Tw6rA94zW2FG9rXQkGuG322LiTB01HAigrrI=
Subject key identifier:   E6:A0:1B:F9:36:4B:C9:7D:11:CA:71:23:FF:97:C4:6C:FB:F7:35:C2
Certificate issuer:       /CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
Certificate serial:       3E45B147BF0D1EE42EE1BD186470FDF072F09229
Authority key identifier: F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231392e302f32342d3234203d3e20323634373730.roa
Signing time:             Tue 05 Mar 2024 17:57:35 +0000
ROA not before:           Tue 05 Mar 2024 17:52:35 +0000
ROA not after:            Tue 04 Mar 2025 17:57:35 +0000
asID:                     264770
IP address blocks:        170.254.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:b1:47:bf:0d:1e:e4:2e:e1:bd:18:64:70:fd:f0:72:f0:92:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7AC0CE553F93FC5CE942F12360E6A144723F82D
        Validity
            Not Before: Mar  5 17:52:35 2024 GMT
            Not After : Mar  4 17:57:35 2025 GMT
        Subject: CN=E6A01BF9364BC97D11CA7123FF97C46CFBF735C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:b6:9d:75:42:18:fa:85:2b:7d:c4:d3:fb:
                    5d:5d:1c:eb:33:ae:0c:d3:e3:31:17:43:77:4b:58:
                    ec:78:5e:01:89:04:a3:06:40:8c:e5:3f:0a:e2:21:
                    8d:47:3c:ee:a8:8d:55:8f:ec:81:fa:46:e7:0b:bb:
                    77:fe:f5:c6:2b:c4:79:c2:70:08:77:1d:f0:d4:cf:
                    47:0a:f1:f5:3c:13:cb:6c:15:13:4a:c9:8b:6d:eb:
                    60:8a:8f:5b:76:d4:6a:6c:84:4b:1d:98:3d:3a:65:
                    98:ca:16:d2:08:de:2b:c4:06:32:30:c6:50:7e:73:
                    27:b9:dd:1c:ed:60:82:e3:27:11:58:ee:40:27:36:
                    af:68:99:60:63:28:0b:b0:59:e2:d2:b7:c2:68:31:
                    81:2a:e9:9f:e5:96:08:fd:9f:50:0d:83:89:ab:b0:
                    e8:f1:77:7c:e4:96:f0:6e:99:24:c3:e1:a1:30:2c:
                    88:c9:a9:ec:11:31:fe:14:8b:ce:80:4c:2e:2c:e0:
                    b2:02:b5:cc:48:a1:81:86:8f:be:ab:be:cc:c1:5d:
                    f8:95:9f:78:54:85:57:58:19:ba:5b:bd:94:13:fd:
                    15:d0:36:90:1b:5a:06:6c:17:7b:7d:21:15:81:bc:
                    dd:c5:34:4f:45:7e:3a:e7:a9:d7:15:5b:3b:ce:d5:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A0:1B:F9:36:4B:C9:7D:11:CA:71:23:FF:97:C4:6C:FB:F7:35:C2
            X509v3 Authority Key Identifier:
                keyid:F7:AC:0C:E5:53:F9:3F:C5:CE:94:2F:12:36:0E:6A:14:47:23:F8:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F7AC0CE553F93FC5CE942F12360E6A144723F82D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4370C5419038DFAFE42339E6D2362DBF9F48F5A1A225DFD8EDC70969C1C230/0/3137302e3235342e3231392e302f32342d3234203d3e20323634373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:ec:43:d0:b6:51:b4:ea:af:2c:71:3f:2b:e9:4e:4e:21:
         10:80:2b:2e:81:71:03:ae:4a:b1:02:93:07:4a:d7:0d:bf:97:
         1f:cc:f7:63:72:11:05:ed:01:64:83:09:9d:82:d3:ca:be:16:
         e5:01:32:7c:4b:55:6c:5b:b5:27:9d:43:82:5e:74:1f:6a:df:
         dc:9c:b7:19:11:c2:fe:30:73:1a:6c:d2:e9:42:18:11:d0:15:
         4a:eb:b5:d2:2f:3b:2a:5f:47:1a:18:c0:bf:88:07:df:4d:f9:
         fa:e0:49:f1:3f:c3:53:64:60:a1:17:f9:b3:83:07:ac:e8:0c:
         ff:77:51:90:ef:a3:2d:cd:c4:07:3e:96:e5:7b:84:20:2f:59:
         d9:d7:33:3b:45:8e:1d:1f:90:23:49:6b:c1:6e:bf:22:fa:f5:
         3f:01:e1:65:51:1b:4f:5e:31:38:63:41:83:14:02:dc:05:d3:
         b7:6a:1c:5b:03:fb:27:14:28:24:70:a0:18:bc:97:f8:6c:12:
         20:0c:5b:a5:3b:83:f1:9e:91:e1:e0:bf:46:d9:bb:4e:82:37:
         0e:0c:12:db:97:eb:de:29:d3:70:b9:53:68:74:01:70:72:59:
         d3:23:e7:12:1f:05:23:bd:eb:e6:4e:18:b4:f4:b2:a3:75:68:
         92:33:92:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:47 2024 by rpki-client on console-ams.rpki-client.org