Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138322e302f32342d3234203d3e20323634383030.roa
File:                     3137302e37392e3138322e302f32342d3234203d3e20323634383030.roa (raw, json)
Hash identifier:          Ksbw4UMgjzUygvC3s8pbaWeu4ZmwRXvwbw9+3TfCAk4=
Subject key identifier:   6B:EC:BF:3F:EA:15:1B:38:95:03:E7:40:95:DC:5F:3F:22:91:D1:17
Certificate issuer:       /CN=73105CE27FB18C38E17C61063229FF66A2F65190
Certificate serial:       3EE1E6003E68D09AD5E535FE0ED09B759DB2740F
Authority key identifier: 73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138322e302f32342d3234203d3e20323634383030.roa
Signing time:             Tue 05 Mar 2024 17:54:58 +0000
ROA not before:           Tue 05 Mar 2024 17:49:58 +0000
ROA not after:            Tue 04 Mar 2025 17:54:58 +0000
asID:                     264800
IP address blocks:        170.79.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e1:e6:00:3e:68:d0:9a:d5:e5:35:fe:0e:d0:9b:75:9d:b2:74:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73105CE27FB18C38E17C61063229FF66A2F65190
        Validity
            Not Before: Mar  5 17:49:58 2024 GMT
            Not After : Mar  4 17:54:58 2025 GMT
        Subject: CN=6BECBF3FEA151B389503E74095DC5F3F2291D117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:0e:69:ee:a2:50:d9:ba:0e:fb:da:0e:b4:
                    54:69:8e:1f:5b:b1:a0:78:3a:0c:9f:13:6f:50:ad:
                    8a:9b:32:ce:47:74:9c:b6:8f:6e:f2:3f:d8:e4:94:
                    a2:af:5b:58:96:e0:e1:ad:47:10:48:f9:0e:c0:0b:
                    52:0e:9c:43:91:e4:2b:98:63:47:de:8f:8a:34:ce:
                    52:5a:d1:d4:9f:5a:16:ce:6a:af:41:49:61:5f:2f:
                    a8:6b:49:a4:00:44:82:e4:d0:68:65:2b:51:3a:10:
                    6e:f1:b7:89:19:0f:36:8b:3e:d2:99:47:5a:00:83:
                    13:06:e9:60:d5:d1:a7:4a:2e:54:e6:74:9e:ef:fd:
                    86:f2:f3:6f:ed:e8:86:f3:e3:e7:38:a4:25:f3:7a:
                    cf:56:38:6c:80:a0:a3:08:e1:66:9a:90:b3:8a:1c:
                    d1:67:46:30:b4:c8:0e:8a:46:ed:2e:a5:4b:3e:96:
                    81:42:72:ae:5b:33:77:75:c1:65:40:16:0a:93:be:
                    02:d2:44:18:5c:1b:e9:f6:90:17:fb:63:81:4b:c7:
                    40:dc:83:d9:f1:e9:a6:24:89:50:e7:7d:84:e6:02:
                    b2:27:12:ab:42:4f:10:28:9c:3c:0a:10:dc:85:70:
                    53:6e:d1:82:83:9b:d8:f3:aa:f9:c3:47:de:66:c9:
                    c3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:BF:3F:EA:15:1B:38:95:03:E7:40:95:DC:5F:3F:22:91:D1:17
            X509v3 Authority Key Identifier:
                keyid:73:10:5C:E2:7F:B1:8C:38:E1:7C:61:06:32:29:FF:66:A2:F6:51:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/73105CE27FB18C38E17C61063229FF66A2F65190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/73105CE27FB18C38E17C61063229FF66A2F65190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3928A6C996FC6CDB586D5FFC8FFAE56A990B556E4126FA4AF3AE1A278FC0D2A5/0/3137302e37392e3138322e302f32342d3234203d3e20323634383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:65:3e:5c:f6:10:3b:b5:80:c4:34:83:14:d2:a6:29:40:aa:
         15:a7:de:55:a7:9a:26:d5:3d:7f:54:d0:33:46:b0:f6:cb:9a:
         88:3b:46:bd:b7:b7:0c:ec:41:3e:e1:f4:4b:5e:f9:ec:68:8f:
         a4:cd:ca:a1:93:b8:ad:f0:6d:01:09:a9:80:66:22:e3:12:09:
         5a:6d:6c:1a:2f:c7:41:0e:6b:42:25:d7:aa:75:c2:be:05:5f:
         e0:3c:58:9f:a1:52:e2:1f:e3:37:8c:07:98:b2:b2:0d:3f:99:
         de:d2:81:99:f3:e5:3c:f2:27:97:6f:79:ad:34:44:a3:61:01:
         5e:86:d0:d9:05:95:f8:98:c7:39:86:7c:fa:ae:c7:5e:8f:97:
         7e:67:1f:6e:51:65:31:d0:7d:10:fa:ef:90:f4:ac:25:51:b0:
         44:89:18:cf:b5:23:d5:76:b1:81:44:e7:b4:42:88:58:a6:dd:
         ad:c7:1e:b0:f2:0f:a6:f5:1d:3a:e0:ef:e0:b7:23:40:99:a3:
         0a:49:f8:84:e5:ea:ad:ef:2a:f2:95:b9:92:a9:f4:a5:22:8c:
         7a:af:d8:1b:e8:af:d1:53:ce:66:0d:9f:4d:7c:5c:ef:df:d2:
         87:2f:a7:8b:6d:db:c1:d4:92:d5:4a:5a:dd:78:99:f4:51:8d:
         31:ca:56:11
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUPuHmAD5o0JrV5TX+DtCbdZ2ydA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzMxMDVDRTI3RkIxOEMzOEUxN0M2MTA2MzIyOUZGNjZB
MkY2NTE5MDAeFw0yNDAzMDUxNzQ5NThaFw0yNTAzMDQxNzU0NThaMDMxMTAvBgNV
BAMTKDZCRUNCRjNGRUExNTFCMzg5NTAzRTc0MDk1REM1RjNGMjI5MUQxMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrg5p7qJQ2boO+9oOtFRpjh9b
saB4OgyfE29QrYqbMs5HdJy2j27yP9jklKKvW1iW4OGtRxBI+Q7AC1IOnEOR5CuY
Y0fej4o0zlJa0dSfWhbOaq9BSWFfL6hrSaQARILk0GhlK1E6EG7xt4kZDzaLPtKZ
R1oAgxMG6WDV0adKLlTmdJ7v/Yby82/t6Ibz4+c4pCXzes9WOGyAoKMI4WaakLOK
HNFnRjC0yA6KRu0upUs+loFCcq5bM3d1wWVAFgqTvgLSRBhcG+n2kBf7Y4FLx0Dc
g9nx6aYkiVDnfYTmArInEqtCTxAonDwKENyFcFNu0YKDm9jzqvnDR95mycN3AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUa+y/P+oVGziVA+dAldxfPyKR0RcwHwYDVR0j
BBgwFoAUcxBc4n+xjDjhfGEGMin/ZqL2UZAwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8zOTI4QTZDOTk2RkM2Q0RCNTg2RDVGRkM4RkZBRTU2QTk5
MEI1NTZFNDEyNkZBNEFGM0FFMUEyNzhGQzBEMkE1LzAvNzMxMDVDRTI3RkIxOEMz
OEUxN0M2MTA2MzIyOUZGNjZBMkY2NTE5MC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83MzEwNUNFMjdGQjE4QzM4RTE3
QzYxMDYzMjI5RkY2NkEyRjY1MTkwLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMzkyOEE2Qzk5NkZDNkNEQjU4NkQ1RkZDOEZGQUU1NkE5OTBCNTU2RTQx
MjZGQTRBRjNBRTFBMjc4RkMwRDJBNS8wLzMxMzczMDJlMzczOTJlMzEzODMyMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMDMwLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqk+2
MA0GCSqGSIb3DQEBCwUAA4IBAQCUZT5c9hA7tYDENIMU0qYpQKoVp95Vp5om1T1/
VNAzRrD2y5qIO0a9t7cM7EE+4fRLXvnsaI+kzcqhk7it8G0BCamAZiLjEglabWwa
L8dBDmtCJdeqdcK+BV/gPFifoVLiH+M3jAeYsrINP5ne0oGZ8+U88ieXb3mtNESj
YQFehtDZBZX4mMc5hnz6rsdej5d+Zx9uUWUx0H0Q+u+Q9KwlUbBEiRjPtSPVdrGB
ROe0QohYpt2txx6w8g+m9R064O/gtyNAmaMKSfiE5eqt7yrylbmSqfSlIox6r9gb
6K/RU85mDZ9NfFzv39KHL6eLbdvB1JLVSlrdeJn0UY0xylYR
-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:05 2024 by rpki-client on console-ams.rpki-client.org