Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa
File:                     3137302e38342e3230382e302f32322d3234203d3e203136363239.roa (raw, json)
Hash identifier:          juyK8ZQo9beMx1Gn46WMlzwwYYiIJbNOQtDO5l1c32E=
Subject key identifier:   16:DD:7D:26:43:DF:8A:FE:61:9E:FB:2A:5A:F7:38:F2:FA:A1:9D:01
Certificate issuer:       /CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
Certificate serial:       4691A8DA6290965C243BAB441DAC946E013B516A
Authority key identifier: 7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa
Signing time:             Mon 27 May 2024 15:40:00 +0000
ROA not before:           Mon 27 May 2024 15:35:00 +0000
ROA not after:            Mon 26 May 2025 15:40:00 +0000
asID:                     16629
IP address blocks:        170.84.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:91:a8:da:62:90:96:5c:24:3b:ab:44:1d:ac:94:6e:01:3b:51:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F35EC316BDD1B834288C2E6F3481B3A2392506A
        Validity
            Not Before: May 27 15:35:00 2024 GMT
            Not After : May 26 15:40:00 2025 GMT
        Subject: CN=16DD7D2643DF8AFE619EFB2A5AF738F2FAA19D01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:90:e6:91:d6:f1:99:c5:94:45:96:d8:ea:0d:
                    b8:a5:ae:2c:ae:bc:84:9c:4b:b5:81:6d:bc:59:90:
                    6f:f4:e7:45:ea:e3:c7:d9:b9:d2:f9:f7:81:bf:65:
                    b7:92:f2:73:24:5c:01:c5:4c:a1:59:56:a3:f1:09:
                    80:d7:f6:3a:0d:3f:eb:09:a8:7c:62:94:db:5f:d3:
                    1c:12:91:7a:65:0b:2b:a6:d9:6f:f9:19:72:74:a6:
                    51:46:c3:07:bf:3e:93:42:28:d4:00:70:80:59:e6:
                    8d:c0:b0:c0:40:d6:e8:8a:3c:72:67:41:90:8a:fa:
                    d9:00:96:bc:03:be:bf:a8:b8:cc:1c:fc:6d:70:3e:
                    17:62:97:b5:24:e4:28:31:6d:de:cc:f9:a6:8f:b7:
                    26:f5:22:b2:68:63:e9:12:30:d6:0a:47:c3:a6:45:
                    d5:fc:17:5d:87:e8:d0:f1:85:76:29:b7:ed:f1:85:
                    0b:23:1f:ff:75:dd:66:1b:25:24:c3:41:58:8e:8c:
                    c1:44:33:de:29:18:4b:41:62:70:06:7e:57:e0:12:
                    36:c4:39:b5:f7:e8:04:dd:6a:4f:55:d1:99:27:7e:
                    45:b0:ab:42:78:81:75:47:86:ee:f2:27:b8:41:81:
                    6e:8c:5e:99:8c:87:b6:ad:bc:bd:bb:6b:da:cf:f3:
                    90:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:DD:7D:26:43:DF:8A:FE:61:9E:FB:2A:5A:F7:38:F2:FA:A1:9D:01
            X509v3 Authority Key Identifier:
                keyid:7F:35:EC:31:6B:DD:1B:83:42:88:C2:E6:F3:48:1B:3A:23:92:50:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F35EC316BDD1B834288C2E6F3481B3A2392506A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13F91A3F3B2AFAB34132426852D564564D0065840841B775D82728FE6B41E60D/0/3137302e38342e3230382e302f32322d3234203d3e203136363239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:d6:82:27:de:78:42:2d:7e:42:7d:62:f2:0c:c7:0d:82:1c:
         cf:6a:9d:d5:75:5d:ac:f0:fa:fb:a6:d7:4b:d5:26:63:3f:dc:
         03:5c:14:7d:1c:4b:f3:8f:d7:00:31:ba:2a:9d:3c:ca:24:00:
         d5:db:fa:27:6f:0f:0e:37:4d:fa:03:19:ca:3e:b6:b2:f9:82:
         02:fa:98:7d:8b:49:53:24:fe:be:da:59:64:d5:ad:a4:f6:58:
         53:ae:0b:98:50:b0:7c:d2:28:68:88:4d:da:f4:8b:b4:bc:db:
         fa:a8:ac:01:41:8b:f0:95:0b:d6:ab:ee:e2:f3:ec:fd:2f:6a:
         42:b1:3d:1e:4f:81:1f:77:0d:1a:88:b5:cf:7c:55:fa:9a:7c:
         6f:06:8f:1a:ca:0c:9a:e6:3d:35:6c:90:78:da:71:fe:96:18:
         a9:f2:57:2b:1d:62:18:f4:5c:c3:38:5e:9f:a1:9e:8c:3f:f7:
         63:49:63:fa:af:04:03:c5:68:03:88:08:84:a5:6a:7d:97:56:
         a1:af:e1:67:81:ab:37:06:8d:cb:f0:b6:af:84:77:ea:67:5a:
         a9:56:9e:6e:a9:eb:47:d9:28:b0:74:02:d1:16:a0:5a:0e:bc:
         7a:37:68:96:ea:47:5e:76:b4:8f:cd:ed:bf:f0:8e:0d:81:94:
         af:2a:c0:fd
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIURpGo2mKQllwkO6tEHayUbgE7UWowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0YzNUVDMzE2QkREMUI4MzQyODhDMkU2RjM0ODFCM0Ey
MzkyNTA2QTAeFw0yNDA1MjcxNTM1MDBaFw0yNTA1MjYxNTQwMDBaMDMxMTAvBgNV
BAMTKDE2REQ3RDI2NDNERjhBRkU2MTlFRkIyQTVBRjczOEYyRkFBMTlEMDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDkOaR1vGZxZRFltjqDbilriyu
vIScS7WBbbxZkG/050Xq48fZudL594G/ZbeS8nMkXAHFTKFZVqPxCYDX9joNP+sJ
qHxilNtf0xwSkXplCyum2W/5GXJ0plFGwwe/PpNCKNQAcIBZ5o3AsMBA1uiKPHJn
QZCK+tkAlrwDvr+ouMwc/G1wPhdil7Uk5Cgxbd7M+aaPtyb1IrJoY+kSMNYKR8Om
RdX8F12H6NDxhXYpt+3xhQsjH/913WYbJSTDQViOjMFEM94pGEtBYnAGflfgEjbE
ObX36ATdak9V0ZknfkWwq0J4gXVHhu7yJ7hBgW6MXpmMh7atvL27a9rP85D9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUFt19JkPfiv5hnvsqWvc48vqhnQEwHwYDVR0j
BBgwFoAUfzXsMWvdG4NCiMLm80gbOiOSUGowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xM0Y5MUEzRjNCMkFGQUIzNDEzMjQyNjg1MkQ1NjQ1NjRE
MDA2NTg0MDg0MUI3NzVEODI3MjhGRTZCNDFFNjBELzAvN0YzNUVDMzE2QkREMUI4
MzQyODhDMkU2RjM0ODFCM0EyMzkyNTA2QS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RjM1RUMzMTZCREQxQjgzNDI4
OEMyRTZGMzQ4MUIzQTIzOTI1MDZBLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTNGOTFBM0YzQjJBRkFCMzQxMzI0MjY4NTJENTY0NTY0RDAwNjU4NDA4
NDFCNzc1RDgyNzI4RkU2QjQxRTYwRC8wLzMxMzczMDJlMzgzNDJlMzIzMDM4MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNjM2MzIzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpU0DAN
BgkqhkiG9w0BAQsFAAOCAQEA0NaCJ954Qi1+Qn1i8gzHDYIcz2qd1XVdrPD6+6bX
S9UmYz/cA1wUfRxL84/XADG6Kp08yiQA1dv6J28PDjdN+gMZyj62svmCAvqYfYtJ
UyT+vtpZZNWtpPZYU64LmFCwfNIoaIhN2vSLtLzb+qisAUGL8JUL1qvu4vPs/S9q
QrE9Hk+BH3cNGoi1z3xV+pp8bwaPGsoMmuY9NWyQeNpx/pYYqfJXKx1iGPRcwzhe
n6GejD/3Y0lj+q8EA8VoA4gIhKVqfZdWoa/hZ4GrNwaNy/C2r4R36mdaqVaebqnr
R9kosHQC0RagWg68ejdolupHXna0j83tv/CODYGUryrA/Q==
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org