Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa
File:                     3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa (raw, json)
Hash identifier:          t7yl7qpbdbA1M50dqMhxjVl89TFpBeYWaX/XP/Gfxxg=
Subject key identifier:   FF:D5:64:60:D0:23:14:C7:FA:57:1B:EB:74:24:63:99:9A:B3:E7:05
Certificate issuer:       /CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
Certificate serial:       347CF8B46418292251C49080F690C198A19498C5
Authority key identifier: 1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa
Signing time:             Tue 05 Mar 2024 18:09:54 +0000
ROA not before:           Tue 05 Mar 2024 18:04:54 +0000
ROA not after:            Tue 04 Mar 2025 18:09:54 +0000
asID:                     264827
IP address blocks:        170.247.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7c:f8:b4:64:18:29:22:51:c4:90:80:f6:90:c1:98:a1:94:98:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA
        Validity
            Not Before: Mar  5 18:04:54 2024 GMT
            Not After : Mar  4 18:09:54 2025 GMT
        Subject: CN=FFD56460D02314C7FA571BEB742463999AB3E705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:e2:16:92:14:eb:b7:0a:da:87:61:a6:bb:
                    00:18:f6:7a:b1:83:bb:62:30:85:52:93:82:bd:f6:
                    fd:09:c9:29:dd:85:08:28:a2:6c:69:c5:ca:88:3f:
                    df:4a:46:9b:78:1d:4c:0e:f9:37:18:a9:ff:de:af:
                    c8:59:02:6f:f4:64:04:f1:b0:be:28:f6:a6:00:69:
                    15:ab:b2:02:76:03:c4:96:8b:52:92:d6:b9:91:da:
                    06:3c:23:da:29:cb:2a:0b:66:a8:6c:79:ec:d6:d5:
                    27:d9:17:4a:e1:12:b2:d7:f3:fc:0a:c5:36:9f:30:
                    10:4e:28:6a:ac:05:de:42:f9:41:58:f0:b7:3e:24:
                    a9:05:b9:39:b5:e6:4a:0a:44:4b:39:35:7f:c8:f9:
                    f0:5f:a6:49:27:af:91:1c:64:21:f8:a4:5a:e0:26:
                    ae:eb:a3:ec:cd:7f:b7:b9:04:99:7e:54:c8:55:55:
                    04:25:10:33:a8:38:f9:ad:9a:e4:ce:0f:d5:86:6e:
                    e3:77:dd:7d:c2:f0:df:24:da:4c:e2:3a:f6:4e:a0:
                    3e:33:06:a6:07:c3:f3:bf:21:a7:53:d4:7b:63:49:
                    49:9e:fd:76:e4:6a:49:07:6a:06:42:24:a1:15:f0:
                    35:78:d0:89:ae:03:5f:c9:01:f1:00:bd:cc:f5:5f:
                    e4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D5:64:60:D0:23:14:C7:FA:57:1B:EB:74:24:63:99:9A:B3:E7:05
            X509v3 Authority Key Identifier:
                keyid:1B:F2:77:94:00:E0:A8:57:89:A6:D6:0B:10:CC:1B:8D:EC:0E:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1BF2779400E0A85789A6D60B10CC1B8DEC0E7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/410933603B2F3DC78166B98B0AF7F3C47AE988CED561C3F2A0AA6430652553B5/0/3137302e3234372e3230362e302f32342d3234203d3e20323634383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:e3:6b:c5:c4:2e:05:49:e0:e5:58:04:41:a5:bd:f8:b6:ae:
         22:d8:a6:88:16:91:54:e1:34:50:94:ae:db:b3:fd:70:98:4a:
         96:65:bc:7e:52:03:ce:65:1c:93:7f:e3:98:97:cc:fc:c0:f9:
         44:a6:48:ad:40:8a:b4:16:4c:b8:fe:b2:94:84:30:72:27:ec:
         56:1b:43:e8:c0:3e:90:42:49:aa:34:6d:e4:4b:56:ea:1a:c8:
         ad:62:f6:3d:dc:1d:06:8b:e8:06:3c:19:a4:92:be:6c:13:64:
         f0:5b:3d:5b:e5:69:a4:b9:f2:5a:80:63:63:8f:6b:24:69:8d:
         f0:9d:ed:da:99:1c:ca:db:2d:8c:5a:9d:8e:e2:be:1f:29:b9:
         71:51:6b:72:84:c1:85:34:fd:63:de:05:38:93:69:fd:f8:f1:
         37:68:d0:d9:2d:bc:f8:52:7b:cc:f4:5c:26:e9:de:0f:c4:4c:
         1c:94:01:ef:c7:ae:f9:da:d2:46:3a:97:dd:b4:54:9f:29:2f:
         6a:d0:b8:eb:08:b6:6e:90:49:2b:5b:0e:71:09:98:e1:6b:7d:
         72:65:7a:cd:01:11:85:69:1a:11:49:81:35:c6:32:c2:a4:ff:
         00:39:07:94:ae:5d:03:3e:cd:ad:c8:f6:71:74:ac:ad:90:b0:
         fc:b4:53:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org