Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
File:                     3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa (raw, json)
Hash identifier:          EQzjel5uLvAPqNa15gGU6xPLa5/kdbwGbSi+J6KINHA=
Subject key identifier:   15:42:B9:59:C7:AB:4C:9C:9D:47:15:19:41:CF:3B:96:C0:10:21:03
Certificate issuer:       /CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
Certificate serial:       04691CDE6C4E9695759EC6157199DAECFBAFEE13
Authority key identifier: 81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa
Signing time:             Tue 05 Mar 2024 17:51:24 +0000
ROA not before:           Tue 05 Mar 2024 17:46:24 +0000
ROA not after:            Tue 04 Mar 2025 17:51:24 +0000
asID:                     264843
IP address blocks:        170.82.247.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:69:1c:de:6c:4e:96:95:75:9e:c6:15:71:99:da:ec:fb:af:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816EC1F9E069407800183BB75F557CA6DBF5A3AA
        Validity
            Not Before: Mar  5 17:46:24 2024 GMT
            Not After : Mar  4 17:51:24 2025 GMT
        Subject: CN=1542B959C7AB4C9C9D47151941CF3B96C0102103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:ca:82:e2:a1:5d:9a:8a:12:9c:f3:89:07:
                    bc:c9:3e:4f:3f:d7:15:7b:43:65:bf:b5:b3:4c:d2:
                    37:6b:d0:c7:e2:48:9b:ee:c0:b6:69:b0:80:d7:0b:
                    ac:11:ae:a3:a3:43:1d:73:f2:25:60:09:58:39:d3:
                    4d:a5:30:6b:58:3f:a1:d2:58:b8:63:78:4c:6c:6a:
                    ea:44:0a:55:9b:90:07:08:5e:65:af:c7:59:96:8b:
                    d1:9b:6a:c3:29:21:79:f7:de:ca:b7:6c:a2:48:b3:
                    51:ea:7d:7b:cc:0b:3f:36:42:36:b8:b5:e7:10:86:
                    28:4b:bc:b2:06:98:13:6d:47:b5:91:59:e8:ff:e5:
                    dd:fb:f5:40:bf:d6:d4:98:ff:49:39:26:7a:29:9e:
                    33:de:ac:ee:0e:0c:a4:ae:84:39:67:8b:ac:8c:21:
                    b4:52:7a:33:02:03:80:e6:b3:2c:af:2f:2c:03:ad:
                    91:03:bd:42:6f:0d:30:03:8b:6b:f7:e3:42:95:ef:
                    3f:0a:57:5f:10:4a:d6:1b:64:38:29:d3:59:5b:69:
                    be:9c:40:1e:59:7d:6e:d9:62:be:23:f0:f0:49:d1:
                    2f:fc:03:d9:f8:7a:98:64:1a:de:12:07:f8:89:5c:
                    2e:d4:f7:4d:9f:88:bb:dd:23:48:22:4a:ca:7e:8c:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:42:B9:59:C7:AB:4C:9C:9D:47:15:19:41:CF:3B:96:C0:10:21:03
            X509v3 Authority Key Identifier:
                keyid:81:6E:C1:F9:E0:69:40:78:00:18:3B:B7:5F:55:7C:A6:DB:F5:A3:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/816EC1F9E069407800183BB75F557CA6DBF5A3AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/45DC43168E681ADAFAC9918BF75A08D95B8555C3A72DF498317CCEEF7753AD66/0/3137302e38322e3234372e302f32342d3234203d3e20323634383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:16:15:85:15:37:13:39:f6:ac:fa:57:df:0c:32:f5:f9:2c:
         ea:ff:5e:93:14:55:e6:96:a2:cf:e4:2c:df:5b:ce:e9:85:eb:
         e4:59:6b:c4:de:c1:0e:37:b1:b0:ef:25:24:3d:54:2b:10:ba:
         dd:10:cb:0f:6f:b3:95:29:00:cb:05:f2:d5:ea:e1:4a:ea:c7:
         36:d7:9b:e2:19:74:6c:27:20:61:34:88:fc:6b:a6:81:92:c2:
         5e:64:aa:99:91:9f:50:cc:54:30:54:64:5c:bc:06:e3:fd:2d:
         f3:11:07:68:33:a7:d4:68:08:95:94:8d:a4:43:a0:fb:20:92:
         c9:80:f4:f0:4f:f6:5f:41:13:1e:22:4e:30:15:5f:36:2a:35:
         f2:c8:f4:89:20:82:49:4e:51:cf:a1:dd:4c:fe:81:20:44:a8:
         b8:ca:62:51:de:52:7e:3a:29:ab:d9:8f:8c:ed:e9:f5:7f:47:
         9b:e6:d9:17:0c:25:94:1c:fa:dd:e9:21:9f:63:6a:05:e4:5a:
         49:48:57:db:fe:4f:6b:86:30:3a:e3:fa:26:d2:b7:ad:40:28:
         11:90:29:4b:de:46:93:9e:9c:6b:c2:61:44:5d:9f:d0:7f:5b:
         67:6a:d9:1e:bb:23:55:fa:8a:e2:ae:de:99:be:6f:c8:08:0a:
         26:86:cd:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:39 2024 by rpki-client on console-fra.rpki-client.org