Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa
File:                     3137302e302e38352e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          WwJlypS0bh0nqhnWmjm065l9wSC+amsNXSy6AHp6Zss=
Subject key identifier:   06:63:EE:82:E1:5E:36:D5:EF:FC:B6:5F:10:BB:74:1A:C4:E9:E8:43
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       62CF49F84ADE51DCDDDCFA66462E0E200B75583C
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     264702
IP address blocks:        170.0.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:cf:49:f8:4a:de:51:dc:dd:dc:fa:66:46:2e:0e:20:0b:75:58:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=0663EE82E15E36D5EFFCB65F10BB741AC4E9E843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1f:ec:2a:eb:a1:ac:c4:cc:73:fd:1e:85:87:
                    1b:ee:73:b7:6b:73:75:87:99:a7:c4:c7:e2:b9:d4:
                    18:81:fe:45:11:cb:39:a9:d3:fd:23:cf:bf:45:54:
                    a8:89:ee:67:6a:ac:13:b4:31:7c:5f:e8:1f:8f:a2:
                    7e:e5:47:d9:8a:e5:06:aa:1e:7b:7f:13:ca:39:54:
                    ca:12:89:30:25:6e:66:c8:b0:b9:b4:95:e3:e8:6b:
                    8a:cf:cf:fe:e0:af:cd:f6:37:e4:da:6e:de:7b:72:
                    2d:6c:d5:b2:2b:2d:55:cd:f4:be:6a:18:7e:3e:86:
                    f8:fb:ed:be:36:ed:44:e0:f7:7e:a5:71:b9:64:5f:
                    23:7d:17:7a:4c:29:15:22:77:77:5f:98:52:c4:5f:
                    ce:b6:82:a4:5a:2f:00:ab:ab:6d:af:e5:ad:fc:54:
                    e1:26:ee:c7:e2:97:49:49:11:7d:3e:8a:0e:b1:57:
                    e5:50:f5:1a:af:81:7f:0e:11:d1:28:99:15:9b:4b:
                    90:ec:2f:ec:fd:ba:f7:16:ee:ad:97:5b:58:c0:ba:
                    d6:c2:0e:38:61:31:3e:e9:c1:28:5b:c4:90:1a:1e:
                    48:2e:79:56:77:64:2a:99:54:5f:62:b6:c9:af:ea:
                    55:83:e9:8e:4b:f1:96:2e:ed:6e:59:91:69:00:d6:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:63:EE:82:E1:5E:36:D5:EF:FC:B6:5F:10:BB:74:1A:C4:E9:E8:43
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38352e302f32342d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:20:7d:99:84:f6:8c:f9:78:8e:ef:06:dd:ba:32:3e:d4:36:
         73:0e:11:de:8a:95:e7:41:34:14:cb:60:d3:be:52:c1:f8:ff:
         02:8d:a6:4c:0b:4a:59:61:ba:81:d1:0a:fe:bd:de:76:a1:9c:
         29:20:4c:c0:73:10:74:9a:25:73:34:8f:5d:fa:05:a2:fe:13:
         2b:7b:f3:01:42:fd:d1:dd:05:b3:ef:57:53:9b:31:e6:a5:5d:
         fd:aa:19:82:d7:62:2a:8f:5d:29:0a:e6:d0:1f:dd:a0:04:14:
         39:d5:b5:7b:8d:c3:82:a5:70:d9:1a:82:fa:00:12:32:d7:03:
         b5:9a:b2:a5:32:f2:05:96:4d:a5:2e:4e:cc:86:f3:6a:fe:fd:
         d5:78:86:66:77:f6:9c:c2:00:dc:34:05:2d:07:41:eb:fe:7e:
         3d:b2:53:95:59:aa:87:3e:15:9a:0b:93:19:20:51:34:33:08:
         38:c0:73:c0:cb:68:12:51:3d:df:37:97:e2:d5:b9:04:41:66:
         1a:9e:3e:20:11:48:4f:28:de:10:e9:8b:28:b7:bb:bc:42:74:
         90:6b:42:b4:c7:7a:11:ea:71:89:6b:92:2a:c4:68:09:b9:15:
         7d:b5:02:a4:fd:b2:ef:a0:03:32:f0:18:a9:78:3c:40:30:d7:
         eb:f2:11:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org