Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
File:                     3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa (raw, json)
Hash identifier:          ZhBCRC/HCc+O0wpBpAvf9T1z8+902u8HR/7qRNA57Qo=
Subject key identifier:   27:F4:6B:85:76:ED:42:FA:39:39:40:53:31:78:0B:39:25:E7:85:42
Certificate issuer:       /CN=E8415F203EB930F191C0398A880C11B310EE5884
Certificate serial:       0CD1C6C73DADA1897236A31148AC746329CC1D15
Authority key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa
Signing time:             Tue 05 Mar 2024 17:52:40 +0000
ROA not before:           Tue 05 Mar 2024 17:47:40 +0000
ROA not after:            Tue 04 Mar 2025 17:52:40 +0000
asID:                     271814
IP address blocks:        170.246.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d1:c6:c7:3d:ad:a1:89:72:36:a3:11:48:ac:74:63:29:cc:1d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8415F203EB930F191C0398A880C11B310EE5884
        Validity
            Not Before: Mar  5 17:47:40 2024 GMT
            Not After : Mar  4 17:52:40 2025 GMT
        Subject: CN=27F46B8576ED42FA3939405331780B3925E78542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:7f:23:50:52:6c:45:4e:2a:9d:46:37:f5:
                    a0:3f:c1:59:06:bf:c5:4a:83:6b:62:56:92:ab:d3:
                    9a:e6:a9:08:f2:a7:e2:0f:dc:9b:f7:fb:7a:a8:39:
                    06:c2:6f:3b:79:24:d8:e9:6f:5f:12:fc:62:61:ae:
                    01:55:d4:7d:94:04:90:59:9e:e0:a6:90:70:96:c4:
                    08:28:a6:59:20:be:c2:da:2c:57:44:41:e5:8e:b3:
                    f5:49:96:85:86:c9:a8:d6:1e:22:b4:6b:71:c2:f4:
                    63:b1:13:99:f5:37:19:6a:70:0b:bb:60:d2:2d:cd:
                    bc:23:b7:6a:9c:10:a4:96:20:b0:8d:0f:96:54:30:
                    cf:1e:86:9d:d9:c9:b0:4f:df:4b:c2:15:61:72:ee:
                    db:8f:bd:dc:79:5d:42:ae:b3:b3:26:e4:0d:77:43:
                    c5:96:06:fc:61:3c:8f:b6:47:19:83:36:c3:c0:b5:
                    e9:ad:db:5f:b9:70:ea:1b:2f:f7:57:bf:c4:e9:ff:
                    07:de:c6:e1:71:3b:bc:3e:d3:5f:9e:a9:74:15:5f:
                    19:66:a4:1b:d8:50:8f:f3:b7:e4:6c:c1:e4:9d:70:
                    a4:bc:7c:7b:12:86:30:b2:4b:e3:f6:05:64:4e:b3:
                    55:cf:20:7c:e7:65:d5:ef:f3:49:ca:4e:b2:b9:cc:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F4:6B:85:76:ED:42:FA:39:39:40:53:31:78:0B:39:25:E7:85:42
            X509v3 Authority Key Identifier:
                keyid:E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/3137302e3234362e35382e302f32342d3234203d3e20323731383134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:43:8a:a6:39:d4:8f:4b:cf:d5:85:22:21:62:15:c9:2d:c2:
         a7:69:d9:d0:7b:cf:40:ad:01:96:c8:ad:12:d6:b8:ea:cc:99:
         52:e8:75:8d:ab:56:d4:5e:64:3a:2f:5b:3b:c0:ca:27:8d:01:
         5a:96:9c:3e:02:32:fb:c4:e4:dc:2c:8a:4e:27:6a:45:f1:39:
         df:86:ac:7c:d4:22:e5:c5:c2:21:b6:1f:e0:0c:cc:f8:85:31:
         41:8e:54:f7:5f:26:f7:53:35:35:96:59:aa:49:2f:5e:fd:96:
         a8:cb:61:4c:ae:e7:6a:08:a0:f6:a8:84:b4:6a:1c:ba:55:c4:
         5f:79:3e:52:6c:c5:aa:d2:75:4f:86:bc:9c:51:e2:03:34:03:
         be:0b:25:58:e3:6b:07:61:a7:5f:80:35:4e:79:0a:fe:1c:dd:
         94:ff:6d:5e:fb:9c:86:d7:b7:3d:c8:78:34:df:c1:55:a7:0e:
         d5:63:f6:7e:c9:aa:30:e4:00:12:6a:38:43:6e:c5:65:f9:d8:
         9c:f2:e7:bc:6c:a8:04:8f:cc:71:41:af:e5:4c:6f:a5:cb:bc:
         31:37:b9:0c:42:b8:b7:eb:b2:8b:c5:6a:40:be:f3:b9:a1:ec:
         6a:45:65:e4:0f:85:8d:2a:c3:ee:43:36:91:be:f5:2b:8d:77:
         a0:82:09:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org