Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/3137302e3233392e3135342e302f32332d3233203d3e20323637383431.roa
File:                     3137302e3233392e3135342e302f32332d3233203d3e20323637383431.roa (raw, json)
Hash identifier:          v2YSwkD56KDU9RyUCKLKj3R0YkbMfcub3MK981nQzPo=
Subject key identifier:   D3:F8:0E:5F:EB:9F:7F:E8:FF:4D:CF:12:22:9B:1D:DA:9C:0F:85:36
Certificate issuer:       /CN=B83212ED5241F8A76D1955EDB09C991FF777815E
Certificate serial:       74957AC7A7A89A599EA75E8678787CA6167E3C09
Authority key identifier: B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/3137302e3233392e3135342e302f32332d3233203d3e20323637383431.roa
Signing time:             Tue 05 Mar 2024 18:21:42 +0000
ROA not before:           Tue 05 Mar 2024 18:16:42 +0000
ROA not after:            Tue 04 Mar 2025 18:21:42 +0000
asID:                     267841
IP address blocks:        170.239.154.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:95:7a:c7:a7:a8:9a:59:9e:a7:5e:86:78:78:7c:a6:16:7e:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B83212ED5241F8A76D1955EDB09C991FF777815E
        Validity
            Not Before: Mar  5 18:16:42 2024 GMT
            Not After : Mar  4 18:21:42 2025 GMT
        Subject: CN=D3F80E5FEB9F7FE8FF4DCF12229B1DDA9C0F8536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:79:93:31:e4:09:0d:88:86:f0:6e:11:6f:
                    68:71:36:ba:90:fe:29:90:b7:c9:d0:ec:7d:88:22:
                    27:0b:b4:37:d0:d0:2d:4b:bc:0c:e0:ed:e9:82:ca:
                    0a:2f:75:17:16:aa:44:0c:d3:05:f0:e2:ca:c3:a9:
                    03:ca:93:41:fb:8d:26:53:90:17:b6:2d:04:47:11:
                    93:01:a4:71:46:a7:76:e9:25:e5:70:ef:f5:8c:c0:
                    35:41:da:2c:b8:e3:86:90:3b:93:f0:ac:03:fe:98:
                    b7:4d:07:e5:96:26:f0:e5:0a:b3:b1:c0:1f:9c:43:
                    12:39:c5:a4:dc:d1:9a:f2:1d:6c:70:e5:bc:08:b5:
                    6d:79:3d:55:56:57:2f:12:38:f8:ba:4e:24:b0:8b:
                    5f:5f:91:ed:0d:1e:46:4f:9f:52:4d:84:ae:a2:0a:
                    c3:a2:42:df:b3:be:be:f2:34:11:c8:3e:72:9a:b8:
                    d9:a5:0c:9d:e8:ec:97:5d:f4:cb:95:18:cd:b4:c5:
                    80:e9:f6:34:08:41:5d:0e:07:26:5e:2a:45:e6:cb:
                    64:f5:c7:b7:cc:12:ba:45:5e:82:73:be:69:7a:36:
                    82:66:c1:92:61:0f:19:e0:b2:99:67:3c:c2:e3:99:
                    52:62:41:10:b3:92:61:4b:0e:a6:6e:4a:fd:a1:6b:
                    8e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:F8:0E:5F:EB:9F:7F:E8:FF:4D:CF:12:22:9B:1D:DA:9C:0F:85:36
            X509v3 Authority Key Identifier:
                keyid:B8:32:12:ED:52:41:F8:A7:6D:19:55:ED:B0:9C:99:1F:F7:77:81:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/B83212ED5241F8A76D1955EDB09C991FF777815E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B83212ED5241F8A76D1955EDB09C991FF777815E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0ED570F71042EEB79C050EFB767669D1C4C6A31B4E36AD73FA77AF2F6577E7CA/0/3137302e3233392e3135342e302f32332d3233203d3e20323637383431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:8a:fc:a7:f7:37:36:e9:36:df:16:81:03:7a:cf:18:5b:98:
         3f:98:f0:1a:74:7d:49:dc:e1:5e:a7:63:1e:5b:d1:18:33:e4:
         fd:ee:88:d7:c1:eb:2f:aa:56:f4:8b:c7:9a:6e:77:70:86:4c:
         5e:40:92:f7:b3:42:40:b0:ed:84:29:64:be:bd:67:6f:fe:93:
         e6:80:78:5b:9f:44:30:9a:73:36:4c:ce:c7:16:0d:ec:7b:91:
         81:cc:a6:d4:13:d4:71:0c:ec:43:65:f2:b2:b7:37:61:d2:6b:
         65:bc:e0:95:e4:88:31:04:73:53:1d:b4:b4:4b:ab:75:31:d5:
         86:37:c6:ef:52:d3:f1:fc:79:71:83:34:8d:8b:88:40:87:2b:
         da:35:51:00:b7:9a:48:2a:44:02:14:2b:47:80:05:f0:34:b3:
         af:50:93:d9:15:bc:c5:81:a4:7a:db:c7:87:0f:83:84:5b:6b:
         4c:6a:43:6b:b2:f4:af:20:7a:59:fd:e3:2b:f4:02:07:da:c3:
         48:3e:bf:32:6b:2b:ef:8b:29:98:29:68:f7:51:8c:6f:0f:47:
         6d:11:11:08:c4:61:c2:36:fd:85:f2:f3:27:c7:7b:5e:06:02:
         0c:44:c8:bb:36:8b:16:b7:8e:a5:4f:7f:ad:ba:b8:60:54:36:
         50:84:12:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 17:44:07 2024 by rpki-client on console-ams.rpki-client.org