Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa
File:                     3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa (raw, json)
Hash identifier:          vKDFV+p09r8uVTaevCzey+BWVeozkVMZkmAiITwGKoo=
Subject key identifier:   74:74:AF:CD:28:CE:DA:DE:F0:F0:A3:15:F9:CC:C5:85:07:D7:80:82
Certificate issuer:       /CN=259C857FBBE3D174F02EFBE0681691812000149A
Certificate serial:       3F232469C69C906CC6E9E29B4A27D0FFA1986249
Authority key identifier: 25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa
Signing time:             Tue 05 Mar 2024 18:10:55 +0000
ROA not before:           Tue 05 Mar 2024 18:05:55 +0000
ROA not after:            Tue 04 Mar 2025 18:10:55 +0000
asID:                     265659
IP address blocks:        170.247.97.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:23:24:69:c6:9c:90:6c:c6:e9:e2:9b:4a:27:d0:ff:a1:98:62:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259C857FBBE3D174F02EFBE0681691812000149A
        Validity
            Not Before: Mar  5 18:05:55 2024 GMT
            Not After : Mar  4 18:10:55 2025 GMT
        Subject: CN=7474AFCD28CEDADEF0F0A315F9CCC58507D78082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:96:bb:64:df:03:3d:f5:36:fd:55:8f:ad:
                    21:89:b3:b1:e7:8a:7c:e5:3c:f8:dc:75:a3:06:23:
                    81:97:c1:1b:e5:aa:60:10:06:2c:6e:9d:f7:86:da:
                    15:d2:d6:10:29:68:c8:77:eb:1e:68:49:6c:fe:f3:
                    5e:31:af:e5:e3:c5:77:02:6a:e1:fe:43:d2:42:bd:
                    ba:19:c0:42:74:31:35:dc:95:91:84:9f:4b:c1:03:
                    3a:37:5f:9d:b3:2d:9e:75:4b:c5:71:29:b9:22:65:
                    ab:7d:2d:f4:24:ba:0c:ff:c7:00:67:71:b9:45:32:
                    4f:09:bd:d5:7f:56:6b:7f:30:cb:99:de:30:8e:73:
                    81:90:db:4e:10:db:b8:e6:44:57:75:81:c1:b0:8c:
                    2f:7d:6e:9f:a1:ab:32:d8:e8:8a:1f:c3:57:d4:fe:
                    3a:03:dd:c0:80:ee:a6:78:85:d1:11:3a:b0:2d:1e:
                    82:3c:39:96:55:bf:6f:7e:e6:03:da:a6:bf:45:a1:
                    32:a5:29:f5:8d:86:b3:c2:ce:ec:cf:b5:7d:52:9c:
                    1d:4c:81:14:b0:b3:8b:b1:77:b4:b4:b4:a0:a3:a6:
                    dd:c4:d4:9f:06:05:25:63:60:d4:bf:ba:6c:64:7d:
                    e3:86:1f:bd:6f:df:08:78:a3:26:14:8d:5d:3b:59:
                    ab:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:AF:CD:28:CE:DA:DE:F0:F0:A3:15:F9:CC:C5:85:07:D7:80:82
            X509v3 Authority Key Identifier:
                keyid:25:9C:85:7F:BB:E3:D1:74:F0:2E:FB:E0:68:16:91:81:20:00:14:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/259C857FBBE3D174F02EFBE0681691812000149A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/259C857FBBE3D174F02EFBE0681691812000149A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41723B0679130F659FD2BC970D21FAE11B92497391E79D8A864EC930F7D8EB6F/0/3137302e3234372e39372e302f32342d3234203d3e20323635363539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ce:90:92:1e:9b:c8:5e:40:93:53:14:ec:f2:8c:81:69:70:
         ea:d4:fe:ce:2a:44:5e:e5:fb:2a:32:6c:83:37:8b:35:f2:2a:
         ce:b7:38:3d:d8:b6:53:61:e8:e5:c3:be:8f:41:b9:91:e3:38:
         0c:07:96:b7:41:b1:ea:3f:f6:34:e1:46:25:12:f3:64:60:36:
         44:58:c2:21:7c:0a:70:82:cb:f5:8b:4e:1c:2c:5e:d4:5e:a0:
         76:f1:c4:a6:9d:43:a3:76:66:d6:be:87:44:e7:b5:90:78:10:
         29:98:f4:04:8d:d4:48:63:3b:db:c8:f2:1d:09:f6:57:3a:32:
         03:74:09:86:c5:39:d8:b1:77:f8:2a:9d:dd:e9:c1:63:a2:cc:
         07:89:4a:8e:70:33:9f:b1:cf:27:c7:f9:b0:71:fe:02:fd:91:
         5d:5e:50:90:8d:48:1c:e8:2f:c6:18:ab:f8:69:cd:6a:30:79:
         3d:c7:3c:e9:55:00:bf:42:60:48:bc:bc:d3:11:50:71:11:16:
         6b:15:2f:16:22:49:61:cf:1a:da:46:90:5c:fe:3e:7a:1f:2a:
         b1:9b:2e:41:7a:38:e4:15:45:3a:df:e6:aa:e4:37:61:f4:50:
         97:7d:77:50:2e:90:ec:f7:d8:e8:91:06:3e:2e:52:ca:56:1d:
         b4:cf:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:04 2024 by rpki-client on console-fra.rpki-client.org