Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38362e302f32342d3234203d3e20323634373032.roa
File:                     3137302e302e38362e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          KmCerqQHJf2EoBIM0cCPWfxdXqnxYC3F1Iy8HSuiuMY=
Subject key identifier:   8F:57:26:70:6A:01:B8:FD:9B:42:87:08:02:A7:00:CA:43:22:4C:7C
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       1AE74FAD7A0036FC98BBA8BA56E595C07B891F1A
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38362e302f32342d3234203d3e20323634373032.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     264702
IP address blocks:        170.0.86.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e7:4f:ad:7a:00:36:fc:98:bb:a8:ba:56:e5:95:c0:7b:89:1f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=8F5726706A01B8FD9B42870802A700CA43224C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:90:f7:bd:14:f5:c7:ab:da:dc:54:1a:31:
                    c6:f9:ae:e1:8c:01:1c:d2:99:a6:de:85:87:11:83:
                    cb:e3:f9:22:94:2e:34:27:35:cd:8f:9f:44:9e:23:
                    d7:67:84:e0:62:0d:59:1a:b6:45:1f:47:83:8e:a0:
                    00:fb:78:70:33:ca:32:74:fd:e6:4e:62:fa:45:1d:
                    87:0c:30:b2:be:bb:53:cf:1b:71:14:77:ed:05:da:
                    97:9f:ff:64:e5:1c:d1:5e:30:26:12:26:2d:63:b3:
                    b4:3f:f6:98:b1:7d:47:24:8e:ec:d8:93:31:48:dc:
                    b6:dd:89:55:cc:26:c0:90:ab:4a:30:1e:9a:8c:f2:
                    11:b0:2e:32:82:13:2c:03:33:ec:e4:d5:07:c8:2a:
                    b2:43:fb:a3:39:61:6b:d3:2f:ba:3d:6d:a6:28:ab:
                    b0:60:10:85:4c:58:1d:55:5a:bd:12:07:e3:0f:b8:
                    0c:db:cc:b6:6a:d9:47:67:33:2c:36:99:17:00:1e:
                    7a:e9:48:0a:7d:75:4c:48:b2:9e:da:b2:e4:e5:dc:
                    3d:d9:24:db:51:65:df:af:68:3d:6b:1a:d7:18:f5:
                    c7:bc:6c:fd:b9:95:4d:b4:d8:ef:cb:36:74:4f:d8:
                    74:47:9b:01:00:41:1a:f7:50:0e:ed:78:1f:86:d6:
                    80:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:57:26:70:6A:01:B8:FD:9B:42:87:08:02:A7:00:CA:43:22:4C:7C
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38362e302f32342d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:7f:a2:e3:df:2f:94:c0:ce:f0:9f:f5:5e:81:03:0d:45:
         01:9a:2b:37:13:66:cd:c6:7c:e6:8a:c2:7d:44:b6:7a:f0:eb:
         36:50:80:0d:e2:6e:5a:6d:1b:86:c7:5a:08:c9:64:ae:62:a5:
         68:27:2d:ad:99:e3:ad:51:c4:f5:52:49:c5:11:93:dd:67:6a:
         c7:df:6d:bb:dc:a6:92:bc:d7:05:bc:e8:23:20:03:02:a9:17:
         74:e4:55:d6:04:4d:91:f8:8a:53:53:bf:33:d5:e5:98:93:1c:
         69:ff:0f:b9:eb:14:7a:2b:28:09:49:d9:80:b1:00:a0:b8:a2:
         f5:6b:9b:ee:68:44:ed:d3:8d:8a:5f:08:d0:0b:80:75:fc:5a:
         05:08:46:6b:3f:8e:b7:0a:5b:bc:db:db:89:c4:e8:62:98:13:
         22:7a:c8:5f:d1:d8:fa:a6:5e:87:ce:9b:8c:0a:84:ab:6e:59:
         9a:40:ac:20:78:a8:23:a7:33:3b:c4:40:0d:12:9a:4d:56:a1:
         37:17:72:74:c5:b7:95:f6:bf:c2:4a:cf:3f:97:e1:e6:7b:09:
         24:32:62:9b:7d:2d:1e:fd:ca:f5:86:5a:2f:e3:0d:b9:29:3b:
         5f:d9:28:4c:17:3a:44:96:28:62:8d:6d:e2:ee:2a:31:52:9b:
         ba:ed:df:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org