Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa
File:                     3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa (raw, json)
Hash identifier:          WP8BB7Z/kdQ/3DgdXgYlywPLqHUH/I1YsdKY9Gh6btw=
Subject key identifier:   24:47:39:94:C8:EE:52:F3:9A:8C:D4:3B:78:A7:69:A4:66:96:4D:C3
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       67486E283840C3D2C0791D14436531C050683278
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa
Signing time:             Mon 16 Dec 2024 11:45:00 +0000
ROA not before:           Mon 16 Dec 2024 11:40:00 +0000
ROA not after:            Mon 15 Dec 2025 11:45:00 +0000
asID:                     264798
IP address blocks:        170.238.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 09 Feb 2025 19:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:48:6e:28:38:40:c3:d2:c0:79:1d:14:43:65:31:c0:50:68:32:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:40:00 2024 GMT
            Not After : Dec 15 11:45:00 2025 GMT
        Subject: CN=24473994C8EE52F39A8CD43B78A769A466964DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e1:14:e9:2e:c1:e0:2f:fc:27:a9:67:1a:27:
                    95:1c:0b:6f:57:16:cc:2b:5f:b5:70:a3:cd:d7:9a:
                    20:7a:87:f0:71:2e:af:7a:fd:68:44:bc:6b:77:57:
                    55:2e:d2:31:02:0a:b2:f0:ab:a8:71:5c:1c:7d:20:
                    dd:94:cd:60:d2:d0:b4:b0:0c:f4:08:10:69:5f:b7:
                    e6:0f:af:04:6c:2d:d4:e4:94:4c:50:c4:4d:00:bf:
                    2f:a3:6d:51:aa:6a:3f:03:67:7b:92:4d:da:21:f1:
                    12:d2:71:4e:0a:24:d3:6b:d0:30:d1:6a:a5:df:83:
                    a7:2a:b6:b4:67:ae:94:d8:b5:56:08:c3:c9:37:cb:
                    92:cf:8e:b2:90:07:58:5f:61:60:2c:58:a1:3f:a6:
                    b1:53:95:24:34:a9:ad:07:d4:23:68:8b:9a:4e:9a:
                    23:66:87:c2:dc:6b:df:fa:5c:7e:dc:bb:2c:ec:66:
                    99:c9:ee:8b:5a:3c:e7:59:51:46:92:c4:27:9d:2f:
                    5e:54:11:8f:2b:e0:3b:44:03:c7:c6:b9:ec:09:04:
                    4d:6d:2e:67:d9:5d:52:da:82:96:9c:a6:96:d8:19:
                    60:e6:1f:47:d3:14:f5:14:cd:1b:b7:3c:13:93:f2:
                    dc:b0:44:9d:0b:06:65:a8:9e:76:2e:3a:a9:7a:28:
                    ea:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:47:39:94:C8:EE:52:F3:9A:8C:D4:3B:78:A7:69:A4:66:96:4D:C3
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/3137302e3233382e36362e302f32342d3234203d3e20323634373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:9e:86:40:e1:2a:1d:95:19:73:e1:20:19:b9:6e:d2:d9:19:
         cb:64:df:94:a9:e8:78:7d:43:14:1d:b2:3c:42:62:28:e2:ec:
         c8:e2:e7:22:b1:7d:01:ee:ec:58:ce:d3:9d:7a:37:71:d1:cb:
         28:02:34:4c:1b:09:92:85:2a:31:5f:f6:f5:dc:bd:8a:7e:7f:
         30:f6:58:ac:2f:24:a4:d4:c7:af:60:17:16:f3:58:bc:e1:9d:
         f9:7d:b1:5c:bf:9e:24:87:8a:7b:22:e8:87:89:86:9d:12:3b:
         71:66:a7:3c:6e:ce:9d:55:b0:31:29:ad:ed:0d:38:e4:8f:c7:
         8a:63:6a:3d:74:41:9e:d2:4c:16:a3:f4:2e:49:0d:1c:2b:fd:
         9e:2b:25:8b:25:16:f2:50:64:18:65:f4:9e:5d:d2:44:e9:8b:
         53:30:8f:80:5c:50:dc:3b:aa:bb:ee:d2:91:ce:63:13:f0:42:
         17:7c:e7:98:5f:01:03:b5:84:f7:a8:14:5c:94:76:05:28:75:
         1c:03:43:c0:a1:40:46:8d:b7:e6:69:ad:f9:d5:23:17:98:42:
         7c:1d:18:08:3d:8a:c0:b6:fd:46:51:df:f1:87:55:94:10:f3:
         cc:04:a1:18:67:8e:ff:0e:16:90:a1:16:ad:a3:0b:39:05:86:
         59:85:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:44:04 2025 by rpki-client