Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38372e302f32342d3234203d3e20323634373032.roa
File:                     3137302e302e38372e302f32342d3234203d3e20323634373032.roa (raw, json)
Hash identifier:          OXa5w3ytnMuPsLVgNzRY6Xbelt2jMI7DWJUOidZKxtk=
Subject key identifier:   C1:7F:A0:82:35:5E:F3:BD:0C:75:6C:DE:9A:A3:98:B1:29:35:76:2A
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       513B36E6FB9D61EE5BAE678A05D18E12C7A6D8F2
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38372e302f32342d3234203d3e20323634373032.roa
Signing time:             Tue 05 Mar 2024 18:07:51 +0000
ROA not before:           Tue 05 Mar 2024 18:02:51 +0000
ROA not after:            Tue 04 Mar 2025 18:07:51 +0000
asID:                     264702
IP address blocks:        170.0.87.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:3b:36:e6:fb:9d:61:ee:5b:ae:67:8a:05:d1:8e:12:c7:a6:d8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Mar  5 18:02:51 2024 GMT
            Not After : Mar  4 18:07:51 2025 GMT
        Subject: CN=C17FA082355EF3BD0C756CDE9AA398B12935762A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2a:b5:c7:3e:88:fd:ec:d4:df:0a:89:d3:15:
                    46:70:9b:3b:02:b5:85:03:52:c2:81:d7:4b:a5:7a:
                    e4:12:eb:9e:ce:78:48:74:f9:fc:2f:8e:fa:8e:74:
                    3a:3a:2a:e0:bb:96:71:e1:52:bb:31:df:fb:7a:4d:
                    4d:24:fa:f7:64:f1:11:e1:ea:57:6b:7d:44:66:a0:
                    67:57:0b:e8:51:7b:9f:f0:3e:7e:88:02:0a:7d:c0:
                    77:81:a1:0d:77:df:fa:11:cc:c0:6d:f1:c8:ff:a9:
                    54:86:b8:db:5c:0c:d4:cb:55:44:b3:6d:12:24:9e:
                    b4:05:50:f9:83:18:fa:d1:58:23:4a:71:fe:75:e3:
                    c7:fe:50:c9:ee:11:0c:c2:52:71:17:35:cc:45:19:
                    af:ba:b1:d1:50:8e:bc:ae:55:29:a1:86:ce:c1:da:
                    c7:d9:25:88:d6:14:94:b3:e9:8a:4c:d5:74:48:6b:
                    28:61:8f:6d:e4:f4:6a:22:86:8c:cf:35:ec:cf:44:
                    98:94:d2:db:f0:e7:1f:95:4f:e1:56:93:d3:9d:8e:
                    1b:b7:63:6f:06:33:24:b9:c8:33:9b:e0:6f:48:dc:
                    d2:f5:a5:ac:e1:9f:86:9b:0d:7b:e7:bd:06:57:ad:
                    71:62:6d:6d:55:46:d9:ee:09:3b:f5:83:19:1b:60:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:7F:A0:82:35:5E:F3:BD:0C:75:6C:DE:9A:A3:98:B1:29:35:76:2A
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/3137302e302e38372e302f32342d3234203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:cc:8a:71:4c:fe:01:ed:45:48:bb:81:18:f7:8e:6a:9b:99:
         65:e2:cb:5b:3e:5f:77:b7:ce:f0:37:4c:2c:d8:bd:eb:cc:5a:
         d3:60:51:6a:db:90:40:b5:27:df:cd:a6:8a:cf:2c:bc:3d:29:
         89:e7:ed:a8:92:b5:4f:89:b4:41:25:51:9e:58:1b:7f:b4:d2:
         37:f0:fa:6e:10:5e:cc:1e:cf:a7:fe:3e:63:ea:89:5c:d4:fa:
         09:37:a4:dd:97:27:ff:e4:e1:bc:4c:95:42:b1:5a:38:eb:aa:
         3a:9a:27:a4:00:83:c4:da:e6:f6:c6:43:b4:4e:a6:a4:ae:e9:
         3d:75:f9:aa:38:2e:c0:8b:c4:1d:9e:08:13:26:1c:64:92:73:
         6d:36:96:17:94:d6:1e:2f:a1:b0:60:7c:87:ee:98:31:fb:a5:
         c5:9f:5c:16:e1:f3:83:b6:69:5b:00:dc:7b:77:09:07:dd:de:
         ee:d9:3d:79:8a:f0:f4:ed:b8:fe:d0:20:4b:03:b4:c0:bb:5f:
         64:cd:85:83:a8:77:09:41:fa:24:d1:1c:dc:6c:85:98:6d:61:
         8f:8b:29:b3:fb:33:58:79:40:62:ac:72:7b:ec:8d:70:ca:50:
         9b:90:ef:0e:7a:42:59:b1:13:46:6d:1e:41:0a:ee:b8:58:db:
         3b:fa:87:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 11:08:59 2024 by rpki-client on console-ams.rpki-client.org