Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa
File:                     3137302e37392e39302e302f32332d3233203d3e20323637383537.roa (raw, json)
Hash identifier:          BcAHr6bY+26okzPRkefda2fa9I4bE3A6LznX57JwCjA=
Subject key identifier:   56:5C:95:C4:29:20:84:2E:FB:F2:87:08:9F:29:31:06:DD:51:87:EE
Certificate issuer:       /CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
Certificate serial:       7F027CFE0DAD887AED2D7AF2D9C884546E2FCAB7
Authority key identifier: 0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa
Signing time:             Thu 25 Jul 2024 17:35:00 +0000
ROA not before:           Thu 25 Jul 2024 17:30:00 +0000
ROA not after:            Thu 24 Jul 2025 17:35:00 +0000
asID:                     267857
IP address blocks:        170.79.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:02:7c:fe:0d:ad:88:7a:ed:2d:7a:f2:d9:c8:84:54:6e:2f:ca:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76
        Validity
            Not Before: Jul 25 17:30:00 2024 GMT
            Not After : Jul 24 17:35:00 2025 GMT
        Subject: CN=565C95C42920842EFBF287089F293106DD5187EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5d:b1:32:f4:8b:e9:ef:85:e4:7c:5e:54:95:
                    12:60:10:95:e2:26:92:3b:a0:17:e6:8d:27:a3:ca:
                    0f:e6:26:14:e8:12:a2:29:20:f7:7d:f6:0b:1b:8e:
                    3b:93:42:ba:a6:ee:1d:45:be:7b:03:6a:c4:13:14:
                    f4:26:5a:49:22:fd:ea:9e:58:95:c7:c2:6c:7c:c5:
                    de:4e:fb:fc:b7:59:32:53:fb:db:3b:88:d1:91:fd:
                    cf:b1:15:72:34:98:aa:38:db:e4:b4:07:63:c4:cf:
                    4b:dd:17:02:31:05:58:4b:68:4c:97:e4:a3:43:12:
                    71:73:e8:b9:0d:88:d6:34:ae:4b:0b:b1:5b:eb:23:
                    5a:81:63:4b:d2:32:c8:f4:9e:0c:49:18:71:6c:dc:
                    d9:35:98:32:3a:6e:57:9a:bc:91:25:12:a6:84:70:
                    8e:69:3e:7c:f2:c9:aa:bd:30:f1:53:5c:6c:43:5f:
                    7a:1c:15:89:b3:d7:38:66:00:8a:6a:6d:f8:dd:1f:
                    60:db:34:75:fa:6e:41:2e:a0:cf:84:a5:4c:03:6d:
                    6d:8c:88:c4:14:ee:fe:4c:5d:f2:4c:df:2d:4b:d6:
                    62:d6:33:f6:2d:f7:0a:36:a8:4e:3e:bc:2f:83:dd:
                    c3:d2:e6:c3:e0:96:84:21:a5:03:c3:97:ca:4e:fe:
                    d6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5C:95:C4:29:20:84:2E:FB:F2:87:08:9F:29:31:06:DD:51:87:EE
            X509v3 Authority Key Identifier:
                keyid:0C:C5:AA:4B:ED:EA:9A:83:BD:E8:82:2A:77:47:21:10:B7:A5:7C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0CC5AA4BEDEA9A83BDE8822A77472110B7A57C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28389B5E3B18B7DAF52D03353DDED295A80969643D92DD9D82DAEFE9D0B73975/0/3137302e37392e39302e302f32332d3233203d3e20323637383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:1a:9e:ad:9e:c7:6d:15:0d:e9:19:20:b1:ec:6b:05:39:6d:
         07:e2:d7:e7:97:0c:e5:14:75:90:1e:81:f6:fb:2b:d2:3f:0b:
         7b:08:c6:fd:07:46:d5:40:46:cf:65:e3:8a:8b:04:f1:84:ba:
         a9:15:11:42:73:55:7d:7a:b8:23:62:80:26:44:fc:40:cf:44:
         3d:6e:06:2c:c0:6f:58:69:4f:70:9c:87:13:cf:5a:1e:39:49:
         7f:b3:47:29:43:53:b7:3b:ad:7e:17:90:83:f8:12:2e:b0:1b:
         23:08:e9:81:14:3e:b1:ef:8f:a9:f5:98:9a:d7:07:fa:20:fd:
         9b:f0:2b:44:f7:01:a2:e0:5a:dc:17:97:0a:c7:e0:c5:8d:34:
         f4:1e:1a:9c:a6:a9:84:3e:a6:e9:0b:b5:0b:9b:57:04:d8:39:
         66:b0:02:09:83:82:2e:8d:2f:9b:1b:76:74:ed:83:41:be:4c:
         3a:19:c3:8e:b4:62:3a:b3:fe:83:48:c5:c2:6f:19:84:7c:22:
         71:93:43:c6:1a:a8:8b:96:f2:8d:fd:d2:6a:1a:9d:0e:fd:36:
         d4:90:d1:11:3e:a4:b4:fa:8f:4b:26:4f:4c:c6:ba:2b:2a:50:
         ed:b2:25:20:fa:ee:8b:b7:88:aa:53:44:e9:92:d9:22:65:d0:
         27:70:f3:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:35 2024 by rpki-client on console-fra.rpki-client.org