Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa
File:                     3137302e302e38342e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          W4KHKE+lN9z1RH/l65A2Yc4fa1ap3e/ACDNL/HznTYU=
Subject key identifier:   61:D9:22:CA:D4:3A:56:DB:C0:85:1A:69:C6:B4:1D:9A:B3:BB:F8:4A
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       58036AA2FCB94ABA16CD5C8989B33052076FB661
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa
Signing time:             Tue 05 Mar 2024 18:07:52 +0000
ROA not before:           Tue 05 Mar 2024 18:02:52 +0000
ROA not after:            Tue 04 Mar 2025 18:07:52 +0000
asID:                     264702
IP address blocks:        170.0.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:03:6a:a2:fc:b9:4a:ba:16:cd:5c:89:89:b3:30:52:07:6f:b6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Mar  5 18:02:52 2024 GMT
            Not After : Mar  4 18:07:52 2025 GMT
        Subject: CN=61D922CAD43A56DBC0851A69C6B41D9AB3BBF84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c2:cc:90:84:7c:74:37:1f:f9:82:6c:d6:ed:
                    35:07:44:8c:d5:af:ca:3b:7f:73:67:50:7c:c8:5a:
                    30:0d:38:26:ed:56:ae:b6:6f:fb:16:9c:1d:b4:83:
                    f3:67:98:f3:73:e3:c4:12:13:ca:61:a7:e4:e5:af:
                    7f:36:8d:d9:ff:b2:06:b3:42:73:7c:55:a6:f5:f6:
                    7e:b3:0e:1a:a8:2b:a7:43:9f:88:67:ae:cd:ea:09:
                    b2:09:98:5b:a6:c6:ac:74:0e:bb:f2:93:64:93:b5:
                    b5:95:1f:8d:d3:ff:19:66:91:73:e8:92:00:7f:86:
                    fd:e8:fc:df:9e:ed:b0:0d:78:dc:27:64:b5:eb:1f:
                    21:d8:6a:13:2d:5c:f5:ba:cb:e3:f6:37:4e:91:b6:
                    43:d0:77:6e:94:f2:4c:f5:44:37:86:4a:1c:ea:dc:
                    7e:82:10:36:96:b9:0f:b8:08:42:e1:03:86:6b:ef:
                    87:b9:e7:b5:e1:81:c1:18:7f:91:4a:f5:4f:a2:9e:
                    79:1b:10:29:85:1a:22:19:1f:07:ca:a9:48:2a:75:
                    e6:30:7c:81:a3:e5:74:90:58:c0:87:86:b3:27:f6:
                    fd:e0:62:ea:bb:52:19:b6:26:de:1e:54:5c:3e:51:
                    63:ad:bf:cc:98:9f:69:29:b4:10:0a:9e:86:72:e7:
                    79:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D9:22:CA:D4:3A:56:DB:C0:85:1A:69:C6:B4:1D:9A:B3:BB:F8:4A
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38342e302f32342d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:e8:3b:59:aa:f9:0b:27:82:47:3b:21:7b:d8:f7:69:df:48:
         af:0f:d0:2a:c4:95:97:47:7e:10:d1:67:97:5e:bc:81:ce:01:
         32:1c:9f:ad:5a:19:83:e4:48:9f:f6:39:aa:c3:f7:1c:0c:2e:
         5d:eb:05:94:d5:21:53:f5:93:0d:0a:71:55:32:b5:3b:e3:0b:
         14:8c:ae:a9:28:b4:65:23:93:60:e8:df:19:bd:90:bf:2f:89:
         3f:bb:60:f3:7b:51:32:49:f4:4e:21:d1:19:11:8e:39:02:fe:
         44:41:9d:bc:f7:e9:ac:44:21:9c:52:72:b8:c1:cf:75:40:2b:
         7c:52:e6:63:65:fb:95:1c:14:27:95:0b:eb:d0:36:fd:cd:53:
         55:81:44:76:e5:de:6a:f5:3c:08:34:f2:f4:26:41:e2:50:f6:
         61:32:45:0d:fc:bd:9e:66:96:a4:19:eb:06:1a:cd:6a:82:52:
         c9:5b:e2:21:52:52:30:cf:ec:40:f2:0f:6d:7d:11:8f:ed:cd:
         26:5f:41:8f:85:41:8b:e6:e7:1a:56:61:83:3a:f1:ea:c4:bd:
         dd:37:bf:6b:4b:5b:7c:62:5f:53:4d:1a:d3:e3:2a:4d:07:21:
         c8:2d:c1:b6:95:43:9f:c8:ba:ef:81:13:17:ee:09:24:49:35:
         76:11:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org