Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa
File:                     3137302e3233392e35312e302f32342d3234203d3e203532323731.roa (raw, json)
Hash identifier:          42M+ehxTuOnTY4tm9zWtvs+6CGHJ5ZFHzYamwaBcnPE=
Subject key identifier:   7A:64:63:AC:F3:48:B0:4E:1A:53:2D:28:D4:BA:9A:26:A9:C9:FD:26
Certificate issuer:       /CN=85939B22368B791C18889C114876582A293716F4
Certificate serial:       10ADED6FC5FBCCF41CF66C80D97AE2975C951F03
Authority key identifier: 85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa
Signing time:             Tue 05 Mar 2024 17:44:55 +0000
ROA not before:           Tue 05 Mar 2024 17:39:55 +0000
ROA not after:            Tue 04 Mar 2025 17:44:55 +0000
asID:                     52271
IP address blocks:        170.239.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ad:ed:6f:c5:fb:cc:f4:1c:f6:6c:80:d9:7a:e2:97:5c:95:1f:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85939B22368B791C18889C114876582A293716F4
        Validity
            Not Before: Mar  5 17:39:55 2024 GMT
            Not After : Mar  4 17:44:55 2025 GMT
        Subject: CN=7A6463ACF348B04E1A532D28D4BA9A26A9C9FD26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:c5:10:89:b7:a5:a4:7e:50:bb:3c:30:57:
                    03:2a:f8:41:18:b4:31:ec:fa:00:14:26:ba:34:70:
                    02:4f:78:58:db:55:24:0f:c6:a2:ff:05:8b:74:87:
                    3e:07:f6:e7:d2:24:a7:65:75:07:65:98:a7:0f:1d:
                    51:89:1a:39:a1:9a:ad:28:24:ac:b0:0b:ff:ed:c1:
                    fa:19:d4:e0:54:74:4c:47:5f:b1:28:76:f3:69:05:
                    d6:5f:cd:f0:9f:10:f4:b0:8e:6a:56:81:4f:19:c9:
                    29:e1:6a:c4:95:99:c8:5d:90:5f:c6:dc:6b:3d:49:
                    6f:11:23:7d:75:9d:a8:8d:12:97:46:26:66:04:2f:
                    a4:a8:1f:c1:ec:8c:9e:75:3f:a1:b5:3c:b7:16:c6:
                    f6:d1:25:2c:9b:8d:26:93:4d:ed:c5:ea:03:bc:6e:
                    c9:ac:b1:a0:cf:29:7d:ea:c3:ac:50:8f:7b:03:0d:
                    8f:48:f5:dc:01:2b:62:74:e0:93:10:1b:2f:24:b8:
                    2f:ad:06:bf:8b:f9:70:50:1b:b9:8b:af:2d:74:01:
                    e7:a1:5e:e2:c8:67:36:42:cc:8e:5d:ab:70:6f:76:
                    63:83:71:d2:3f:27:a9:01:b3:21:16:10:77:f7:9e:
                    68:7d:91:e0:ab:8c:58:50:cc:c3:89:dd:ca:65:c0:
                    42:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:64:63:AC:F3:48:B0:4E:1A:53:2D:28:D4:BA:9A:26:A9:C9:FD:26
            X509v3 Authority Key Identifier:
                keyid:85:93:9B:22:36:8B:79:1C:18:88:9C:11:48:76:58:2A:29:37:16:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/85939B22368B791C18889C114876582A293716F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85939B22368B791C18889C114876582A293716F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18D4DA64A9C5B219B7EBE10B846FF3946A77F74204484ED5E85E606700639363/0/3137302e3233392e35312e302f32342d3234203d3e203532323731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:a3:fc:79:a2:64:ce:c4:b4:fc:d0:be:3c:93:ce:e4:ac:a5:
         f3:53:70:d2:8e:9c:ee:83:d1:85:18:84:c0:a7:6b:07:f8:9a:
         47:4a:9d:b3:73:21:0c:11:fe:65:4e:64:a0:6d:3b:77:41:a5:
         8f:be:01:c1:b7:76:eb:51:ec:96:fb:fc:d8:40:16:b8:65:0c:
         de:e4:c7:c1:4d:8e:e2:0b:cc:60:2b:ff:c4:43:2c:40:d8:4e:
         e6:1c:70:73:af:bc:92:b8:97:80:d0:28:6f:55:09:1b:56:3f:
         83:9a:1b:cc:ff:d1:7d:66:ab:9f:2a:29:89:17:60:ee:c5:d5:
         20:98:15:2c:05:17:57:ea:e4:a7:c9:37:34:83:cb:9d:0b:33:
         d3:b7:ce:44:f7:43:42:38:de:c9:e5:42:bc:53:de:c1:b8:75:
         85:b8:c8:ae:f2:70:15:06:2b:aa:8c:e0:a3:ce:f6:3f:fb:eb:
         19:59:43:ca:14:51:e2:b2:2b:93:44:d2:06:45:0d:a1:f7:bd:
         f7:99:4d:71:32:20:b0:c2:cc:48:94:43:b3:1c:b1:b3:49:40:
         ca:e9:f7:94:e7:f7:5b:cf:30:1a:c7:97:22:8c:3c:28:8f:c8:
         13:8c:32:28:64:34:51:44:0a:5d:c1:d7:fe:46:b9:6b:aa:ef:
         e0:96:cf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:35 2024 by rpki-client on console-ams.rpki-client.org