Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa
File:                     3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa (raw, json)
Hash identifier:          dD5mB8TTscWTtGDFvv9RwIlfE9ZVk++CCqdnWx5oAPs=
Subject key identifier:   C7:56:11:B2:6A:12:08:D5:F0:FB:FC:5F:86:62:F9:52:70:F4:28:2E
Certificate issuer:       /CN=1868F5026F00BB6EAA6EE135CAD2614421C56145
Certificate serial:       19596B9A6041E560898D8A1A141F519E863A37DB
Authority key identifier: 18:68:F5:02:6F:00:BB:6E:AA:6E:E1:35:CA:D2:61:44:21:C5:61:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa
Signing time:             Tue 05 Mar 2024 17:57:05 +0000
ROA not before:           Tue 05 Mar 2024 17:52:05 +0000
ROA not after:            Tue 04 Mar 2025 17:57:05 +0000
asID:                     264806
IP address blocks:        170.79.232.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.crl
                          rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:6b:9a:60:41:e5:60:89:8d:8a:1a:14:1f:51:9e:86:3a:37:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1868F5026F00BB6EAA6EE135CAD2614421C56145
        Validity
            Not Before: Mar  5 17:52:05 2024 GMT
            Not After : Mar  4 17:57:05 2025 GMT
        Subject: CN=C75611B26A1208D5F0FBFC5F8662F95270F4282E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:8b:bd:93:bc:0d:8f:b6:76:69:2a:3a:03:
                    82:cd:5d:fe:58:64:cf:82:5c:38:5c:de:d4:97:7e:
                    8a:de:7e:54:e4:17:91:04:7a:e4:ed:d5:b1:6f:4a:
                    15:53:de:41:91:15:8f:58:90:43:f2:d3:90:63:d1:
                    3b:3c:57:2f:19:6f:90:0e:f6:e0:b6:e8:b7:64:e4:
                    31:50:70:3e:f1:3d:eb:89:24:f6:70:dc:b8:42:ef:
                    a2:1e:dd:7d:12:2a:69:13:d5:1a:9b:82:e8:d1:a5:
                    88:04:a5:a8:ae:6a:42:53:83:31:bb:64:3c:b0:d1:
                    e1:36:91:ad:74:5c:ef:be:f1:17:12:6b:80:b5:57:
                    8d:bf:fc:f4:8c:64:dd:4c:31:0b:9f:76:04:8a:de:
                    f9:d8:ba:86:85:a0:54:b6:fa:76:3b:a4:c0:f3:da:
                    3d:0b:f3:3c:06:99:bb:d6:73:56:9b:46:bf:63:3c:
                    d5:63:ca:9c:d4:5c:30:49:b6:04:f5:4e:a8:ec:ec:
                    1a:4c:ed:07:d1:6b:2a:24:28:c7:4a:81:fc:06:72:
                    67:ea:50:e3:d3:85:2d:86:8d:53:6e:ae:df:ff:b5:
                    50:19:62:64:ae:26:95:77:95:ef:42:76:0a:34:15:
                    49:51:34:90:c7:50:52:ef:ca:8b:23:d6:2a:25:e7:
                    6d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:56:11:B2:6A:12:08:D5:F0:FB:FC:5F:86:62:F9:52:70:F4:28:2E
            X509v3 Authority Key Identifier:
                keyid:18:68:F5:02:6F:00:BB:6E:AA:6E:E1:35:CA:D2:61:44:21:C5:61:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1868F5026F00BB6EAA6EE135CAD2614421C56145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/42E4BDD1DCB849177F09B98E8C708AEE449C43F0B90D20CA36FF6428AC3EC88A/0/3137302e37392e3233322e302f32322d3234203d3e20323634383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:c7:58:63:47:bd:77:b3:90:12:78:99:ce:ef:d7:ba:88:59:
         3b:a5:11:d7:8f:ee:e7:f9:ca:51:f0:ab:84:34:7b:dd:14:e5:
         ac:aa:a9:3b:fc:25:0d:eb:3c:78:23:94:c1:9e:7b:8a:9a:7b:
         8d:72:59:27:61:b8:2f:58:d0:cc:63:2d:ab:d4:0a:ed:ca:50:
         3e:e2:21:12:a6:dd:6f:07:92:7c:25:5b:4d:0d:53:f9:fd:c4:
         2c:19:c6:74:de:ce:86:8e:df:ca:b5:1b:cf:6a:26:67:a9:a7:
         82:ca:60:a1:fd:dd:02:f3:ff:00:d1:29:32:7c:a4:00:61:b8:
         cc:31:77:12:fd:1d:30:bf:22:b3:0f:59:52:c5:4c:45:13:bd:
         19:ca:ff:0c:ff:66:81:23:88:de:b2:29:f9:b4:e4:a9:06:a4:
         5b:a3:c5:ae:c7:a1:a7:fe:a1:20:01:71:1e:b6:f2:a4:31:3f:
         98:94:41:eb:de:3a:a7:a1:1c:d8:f5:d7:d4:79:55:a2:92:fe:
         7a:38:db:0b:20:7f:d3:28:ca:b7:f5:5a:13:df:0b:95:74:b7:
         d0:c3:85:2e:f9:bd:fc:36:e7:68:93:e8:22:bc:4f:43:95:a3:
         15:cd:3d:72:cb:3b:a7:81:92:f3:4a:7c:c3:15:01:65:6e:ef:
         ba:4d:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 07:09:09 2024 by rpki-client on console-fra.rpki-client.org