Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa
File:                     3137302e37392e38392e302f32342d3234203d3e20323637383537.roa (raw, json)
Hash identifier:          sQwjNkUItymXl9tS6PNzo5f79YnrjSSwTVtSSZlFCgU=
Subject key identifier:   1D:A9:95:E8:FF:A0:70:2D:B1:7F:E0:6E:DC:2F:CF:84:51:50:49:79
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       57AC31894E51951B6CE098DDDDA3E9450313A060
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa
Signing time:             Tue 05 Mar 2024 17:53:23 +0000
ROA not before:           Tue 05 Mar 2024 17:48:23 +0000
ROA not after:            Tue 04 Mar 2025 17:53:23 +0000
asID:                     267857
IP address blocks:        170.79.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:31:89:4e:51:95:1b:6c:e0:98:dd:dd:a3:e9:45:03:13:a0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Mar  5 17:48:23 2024 GMT
            Not After : Mar  4 17:53:23 2025 GMT
        Subject: CN=1DA995E8FFA0702DB17FE06EDC2FCF8451504979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:90:99:71:34:b6:51:29:37:5f:e2:25:dc:
                    7b:4e:1c:12:35:4b:14:a1:04:e4:9b:5f:52:64:a8:
                    90:bc:53:22:66:fe:6d:09:1b:d0:4a:19:35:a0:28:
                    6f:7b:0f:e2:7d:1b:d4:ac:d7:ef:90:c0:e4:e3:29:
                    1a:4a:14:9c:43:6d:2f:52:17:73:78:0e:38:ff:66:
                    0f:e4:0f:05:1b:b8:10:2a:f0:06:8c:c4:04:c0:ca:
                    e6:6e:76:00:8b:9c:ed:c2:a2:7c:d8:99:34:8b:56:
                    88:b9:26:de:03:83:3a:2a:ad:ca:55:c2:ce:e8:65:
                    c2:44:a3:78:2d:97:dc:d6:53:61:cf:8f:3a:fb:58:
                    ba:be:5e:f4:40:ff:08:10:33:39:83:18:26:9f:03:
                    f0:da:f2:5d:1b:0c:11:33:f5:b7:52:fd:6a:56:7c:
                    a7:c6:be:a6:2d:4c:f8:3a:ca:12:cd:a3:00:79:ce:
                    98:32:e6:43:dc:78:56:3c:78:ec:f1:7a:15:ab:1c:
                    3d:7c:33:19:0c:43:64:7a:c1:57:bd:6b:2d:4e:c4:
                    42:80:01:8b:6a:02:62:0b:cd:78:38:ba:90:b6:72:
                    fd:19:54:3e:90:b5:1a:33:50:69:c7:90:a6:a9:a0:
                    aa:68:9e:fe:1c:b9:02:b0:4b:d7:6d:b3:9b:d3:ff:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:A9:95:E8:FF:A0:70:2D:B1:7F:E0:6E:DC:2F:CF:84:51:50:49:79
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e38392e302f32342d3234203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1f:ed:d0:f8:5a:af:3b:28:ab:63:db:48:96:54:fc:60:50:
         07:df:eb:91:ea:c4:d0:85:45:c8:3c:b1:c2:a6:48:08:45:fa:
         5d:b3:2f:d6:87:80:42:5e:ce:e1:19:e1:b5:ac:c4:fc:a4:1e:
         8c:94:9f:ae:6b:ae:97:bc:3b:c4:78:02:4e:74:67:a5:b5:bf:
         f5:df:74:b3:fc:f6:80:b6:a0:49:71:5c:b7:15:00:ea:3a:4f:
         14:e3:af:ec:92:1f:d9:2a:71:8e:4d:65:a8:4a:b7:7b:fa:2f:
         cc:c9:d9:d1:1d:16:77:24:23:36:83:58:09:f1:0e:72:78:4f:
         c5:bd:ad:f0:b3:2e:b9:4a:8e:75:89:c0:49:8a:29:9f:93:bd:
         75:aa:48:79:e0:68:f2:3f:08:b5:c5:61:52:d7:a6:68:44:d5:
         27:a9:c3:a2:ea:7b:cb:b5:e8:2a:bd:97:c0:83:0f:da:d6:e0:
         34:f4:35:61:2b:fe:2b:8d:79:fb:3f:ac:2d:d0:07:ce:46:e0:
         1d:02:79:ef:0a:b6:7b:8e:d1:ba:5c:52:04:c6:0d:32:73:0c:
         34:3f:e3:d1:70:9d:c3:53:54:33:09:2c:9f:8e:cc:3f:d0:74:
         fc:cf:6d:f6:ab:27:cf:42:f1:ee:b7:5d:24:30:0b:b9:d9:81:
         1e:0d:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org