Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
File:                     3137302e38312e3139382e302f32342d3234203d3e2036343631.roa (raw, json)
Hash identifier:          7P2eFko3nHFg8Vl1VoqF8VOgo6CjPcPdc1IHyE6N4RQ=
Subject key identifier:   92:42:F9:2D:F5:DC:4B:4D:B1:79:42:5D:9A:D0:72:02:62:B7:44:9F
Certificate issuer:       /CN=632D71062751773B5FA51AC0AB69127826F756A2
Certificate serial:       6CEBEE0AF265DF3EA69CD9A295C9F10638A0E188
Authority key identifier: 63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa
Signing time:             Tue 05 Mar 2024 17:45:12 +0000
ROA not before:           Tue 05 Mar 2024 17:40:12 +0000
ROA not after:            Tue 04 Mar 2025 17:45:12 +0000
asID:                     6461
IP address blocks:        170.81.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:eb:ee:0a:f2:65:df:3e:a6:9c:d9:a2:95:c9:f1:06:38:a0:e1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=632D71062751773B5FA51AC0AB69127826F756A2
        Validity
            Not Before: Mar  5 17:40:12 2024 GMT
            Not After : Mar  4 17:45:12 2025 GMT
        Subject: CN=9242F92DF5DC4B4DB179425D9AD0720262B7449F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ab:63:c8:2c:73:2d:3d:95:33:f5:82:7f:c4:
                    76:90:03:72:3e:b9:01:96:38:3a:4e:88:9e:30:e6:
                    9a:df:8f:d6:37:df:0d:60:dd:d3:57:05:f2:81:2c:
                    ee:28:c6:1d:12:d0:37:57:b6:c0:0b:2e:77:cd:26:
                    2d:ca:bf:23:aa:92:61:48:5b:a9:5d:f7:ae:3d:b2:
                    95:e0:7d:bb:51:35:44:65:ed:30:5f:03:0f:9d:3d:
                    38:94:3e:22:94:37:a1:6a:98:a5:82:5e:42:6b:b1:
                    2f:cb:5e:c7:a5:b9:6b:e9:37:77:a8:6b:14:99:c5:
                    52:e4:51:ed:b5:c4:94:7c:c6:db:2a:1a:e1:e2:55:
                    c9:3e:b7:19:34:ed:05:78:bb:12:f8:4f:42:b3:1c:
                    d8:42:7f:bc:83:b1:4d:39:28:3a:7e:0d:c9:21:e3:
                    de:4f:64:17:a1:b1:bb:78:4c:d9:b4:81:f0:8f:e8:
                    b6:fe:a6:2c:76:1f:18:1e:fc:68:63:98:43:2a:c6:
                    af:08:b5:f7:16:38:ba:80:db:b6:c8:dd:61:6a:dc:
                    54:6c:be:95:4b:0a:e2:0b:c9:18:5b:69:48:9d:d4:
                    33:79:0a:1a:84:8e:d4:10:4d:0e:ac:3a:28:46:fd:
                    6f:d2:43:d7:b0:cf:14:4d:a0:37:26:6c:80:06:73:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:42:F9:2D:F5:DC:4B:4D:B1:79:42:5D:9A:D0:72:02:62:B7:44:9F
            X509v3 Authority Key Identifier:
                keyid:63:2D:71:06:27:51:77:3B:5F:A5:1A:C0:AB:69:12:78:26:F7:56:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/632D71062751773B5FA51AC0AB69127826F756A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/632D71062751773B5FA51AC0AB69127826F756A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/103AE1AC330EAC8A63D02330742753AC6FE7F0280423D4A41AAD47830E99D099/0/3137302e38312e3139382e302f32342d3234203d3e2036343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ca:89:06:fb:a3:fc:0c:34:37:43:3b:1c:c5:c0:68:54:50:
         4e:18:2f:6b:e5:c7:28:e8:d1:9f:5e:94:53:8b:7d:dc:86:4c:
         2e:25:67:86:97:11:6b:e4:e4:ca:54:4c:10:97:6a:54:49:c4:
         36:58:74:c5:e4:dd:74:b5:4f:f9:44:07:01:af:2d:a3:b2:b1:
         00:b9:19:a2:2c:f7:43:14:3b:4c:c6:04:46:86:4f:5d:8b:c1:
         2b:58:86:94:9b:79:99:ce:4f:13:c5:5d:e7:54:2e:02:d2:0c:
         0b:7e:e1:05:15:b8:d2:a0:0a:5d:8f:45:cd:b2:ae:05:cb:1c:
         72:e7:76:ec:b2:a5:ff:ea:d2:5d:86:57:d4:95:92:5f:5a:3d:
         3d:00:be:eb:fe:ad:42:16:ac:5f:d6:c8:a6:da:c8:cd:67:4e:
         01:f4:86:9b:d9:57:d9:0d:c5:06:cb:87:7f:d6:a3:94:e1:9b:
         4f:02:a6:50:15:98:d9:04:ad:ad:2f:97:d1:8d:cf:a5:61:98:
         63:4f:35:3c:b5:aa:f8:3e:f5:f2:14:ec:ac:11:52:9b:c4:f9:
         cf:ae:3f:9c:87:06:d7:16:04:4d:88:25:69:eb:0a:f6:14:c1:
         63:1c:a8:43:08:38:de:3b:26:ef:88:9b:55:d8:b5:a6:8d:ad:
         67:75:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:04 2024 by rpki-client on console-ams.rpki-client.org