Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3137302e38332e35382e302f32342d3234203d3e20323635363531.roa
File:                     3137302e38332e35382e302f32342d3234203d3e20323635363531.roa (raw, json)
Hash identifier:          nbSjecZZgA9SdrrQxvJOIywr4g428UA5a2vdcow1eLg=
Subject key identifier:   E9:F5:30:41:5C:48:6C:EB:35:D7:97:B9:7C:3B:9D:55:6C:31:A3:F1
Certificate issuer:       /CN=3078FCD65C80F975A17BFA4071FD505B1BA67413
Certificate serial:       5EB63E7E3C59D9291402002E228F72D83C69EC5C
Authority key identifier: 30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3137302e38332e35382e302f32342d3234203d3e20323635363531.roa
Signing time:             Tue 05 Mar 2024 18:08:48 +0000
ROA not before:           Tue 05 Mar 2024 18:03:48 +0000
ROA not after:            Tue 04 Mar 2025 18:08:48 +0000
asID:                     265651
IP address blocks:        170.83.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b6:3e:7e:3c:59:d9:29:14:02:00:2e:22:8f:72:d8:3c:69:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3078FCD65C80F975A17BFA4071FD505B1BA67413
        Validity
            Not Before: Mar  5 18:03:48 2024 GMT
            Not After : Mar  4 18:08:48 2025 GMT
        Subject: CN=E9F530415C486CEB35D797B97C3B9D556C31A3F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:e9:7f:c8:07:94:da:29:af:4f:9b:2e:cf:
                    39:53:08:d1:0b:ea:38:c9:2b:95:8e:1c:18:1d:ff:
                    b0:83:53:c2:46:fa:35:3a:4f:8b:e9:8f:84:11:cb:
                    8c:12:19:8e:34:81:ea:78:3b:ac:29:7a:9e:76:f1:
                    bf:3c:9a:1d:5a:eb:f1:ac:fe:8d:a3:43:7e:54:09:
                    55:fc:28:7c:9d:20:b5:02:d8:c8:30:2b:23:51:3f:
                    2d:27:fb:6f:74:05:58:07:34:c8:ec:6b:2a:f0:69:
                    26:ea:52:57:6e:2e:30:b1:51:d2:eb:cd:f3:e3:be:
                    c5:80:e2:68:59:9d:13:ec:be:35:11:e4:b0:f2:55:
                    05:5e:84:8f:6f:eb:af:0b:c0:2f:7f:ea:39:cb:32:
                    68:33:fb:df:67:35:af:97:53:bc:83:ee:8d:77:c2:
                    86:61:d4:6d:4b:e3:a5:24:5e:db:64:9a:a2:e3:15:
                    f0:a0:2f:34:86:c5:d9:7c:0d:3c:31:19:3a:89:1b:
                    70:26:aa:e1:7e:87:6e:9b:ce:c8:c4:bb:6f:fd:3b:
                    40:3d:12:5c:79:4c:1b:bf:67:1a:2f:b0:49:63:15:
                    58:4d:25:ac:2a:a4:70:f5:f3:4f:f0:da:e3:2f:6c:
                    fc:de:62:1b:1a:df:47:f5:cf:66:64:9b:56:83:55:
                    f2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F5:30:41:5C:48:6C:EB:35:D7:97:B9:7C:3B:9D:55:6C:31:A3:F1
            X509v3 Authority Key Identifier:
                keyid:30:78:FC:D6:5C:80:F9:75:A1:7B:FA:40:71:FD:50:5B:1B:A6:74:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3078FCD65C80F975A17BFA4071FD505B1BA67413.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2DB41F34EA498FD6820490B881306454488DA5C63C579482CE3DA7F99379D726/0/3137302e38332e35382e302f32342d3234203d3e20323635363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:8b:47:d8:84:27:bb:b6:37:67:95:83:df:9f:76:7a:54:13:
         e9:a4:20:1d:06:78:7a:31:66:1d:dc:bd:4f:6a:9d:67:0c:0c:
         7a:a0:dd:b1:67:9e:10:f8:40:20:e8:98:61:f5:14:db:f6:36:
         7f:a5:a4:bc:0e:04:06:82:0a:92:f3:20:cb:27:e7:9b:32:f2:
         9b:6f:56:5d:1b:3f:8d:30:80:57:0f:37:8a:6e:bc:20:36:fb:
         19:df:f4:e1:a4:78:84:27:73:9b:18:fc:ed:08:09:f7:a4:a8:
         be:a1:93:f4:70:cf:49:04:a0:99:fe:c7:f2:6b:0d:0b:34:f2:
         91:2c:08:a3:02:8d:4d:81:f2:7f:1a:ed:33:42:68:0c:78:1e:
         26:1b:f4:23:57:08:ed:a4:9c:07:76:46:82:05:5a:8f:76:65:
         d5:b7:81:48:32:43:53:d5:7d:46:cb:1c:52:1e:72:ec:28:4f:
         55:28:14:46:06:7c:f8:44:8b:f7:c2:db:35:36:c7:a8:f6:c2:
         34:eb:80:68:ee:a0:72:4b:6b:7d:12:2d:8c:4f:dd:b8:4a:0b:
         33:f1:3c:ed:93:68:74:fa:cb:77:4d:20:35:b4:c4:d4:6c:f3:
         6e:08:ab:28:73:36:9b:4c:37:8f:ed:6e:e3:8e:37:b4:6a:fd:
         5c:ec:5a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org