Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa
File:                     3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa (raw, json)
Hash identifier:          y859O8GNNhO7PWhqAMoQCk6XWFKhAE2LTimVFOqRlV4=
Subject key identifier:   E6:B7:8E:08:F6:DE:84:BA:62:B2:B2:0C:C9:B2:8B:C4:D4:D5:62:5F
Certificate issuer:       /CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
Certificate serial:       390D2637F1B635BE1B4F6AB2425F97E2598EA6F7
Authority key identifier: 4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa
Signing time:             Tue 05 Mar 2024 18:21:23 +0000
ROA not before:           Tue 05 Mar 2024 18:16:23 +0000
ROA not after:            Tue 04 Mar 2025 18:21:23 +0000
asID:                     264837
IP address blocks:        170.81.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:0d:26:37:f1:b6:35:be:1b:4f:6a:b2:42:5f:97:e2:59:8e:a6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F1AF54C46F29B17E758E9F9463DCF9650C71A8F
        Validity
            Not Before: Mar  5 18:16:23 2024 GMT
            Not After : Mar  4 18:21:23 2025 GMT
        Subject: CN=E6B78E08F6DE84BA62B2B20CC9B28BC4D4D5625F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:0b:b1:5b:bb:c3:f4:03:d1:2d:72:88:6c:
                    18:8b:f4:fa:d4:4b:ef:58:1f:14:01:2a:75:03:94:
                    65:88:64:f0:45:21:4a:16:8a:f4:09:6d:93:00:f2:
                    50:56:ef:4a:3f:9c:ef:c4:47:fc:80:6f:96:35:3a:
                    e0:56:3e:8d:84:e6:3a:b3:a0:97:b8:9a:cf:83:40:
                    a1:71:a5:d7:64:9e:3b:c9:f0:ae:5a:e2:03:25:e5:
                    07:57:cf:53:a6:7d:2b:b0:33:b3:8f:56:ad:98:c5:
                    75:22:db:34:d6:40:88:cd:4f:44:82:37:1e:c7:75:
                    ce:02:9c:5c:44:d8:a0:73:b9:00:d1:22:ee:20:32:
                    ed:6c:0d:09:92:67:d7:2d:73:1f:ac:12:30:2f:ad:
                    2f:0a:7e:ba:f8:4a:28:47:17:cb:c2:ec:93:0d:af:
                    7e:20:db:5b:fd:52:53:a9:d1:d0:dd:48:c2:b8:41:
                    87:e6:dc:46:aa:80:dc:eb:9d:bf:64:64:ba:55:eb:
                    5c:05:2b:fc:3c:4c:e6:28:47:38:0a:f7:85:dc:8e:
                    a4:88:48:86:e7:d4:bd:09:d1:5e:ec:a7:b8:43:86:
                    8f:86:b3:2f:e2:dc:ef:49:f7:bf:e7:4d:56:a2:6a:
                    e9:5a:ef:e6:19:e6:02:ae:7d:f4:1b:03:f7:fc:92:
                    29:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B7:8E:08:F6:DE:84:BA:62:B2:B2:0C:C9:B2:8B:C4:D4:D5:62:5F
            X509v3 Authority Key Identifier:
                keyid:4F:1A:F5:4C:46:F2:9B:17:E7:58:E9:F9:46:3D:CF:96:50:C7:1A:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4F1AF54C46F29B17E758E9F9463DCF9650C71A8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F3638C8DF693002EB8C051A778FCFE2CE757B735E1CFA668B3F601E7CF617D7/0/3137302e38312e3134342e302f32322d3234203d3e20323634383337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         12:7c:7d:a9:01:c9:39:4c:a7:57:6a:af:16:20:24:be:ee:cc:
         7f:34:04:90:79:5e:1f:fd:94:24:21:0a:27:1a:26:d7:5f:26:
         7e:ef:d1:f7:ed:30:0e:b6:d2:11:22:12:12:c2:65:9d:0c:e1:
         86:74:81:7d:98:f5:72:f0:d4:30:9d:4c:08:86:08:9a:1c:95:
         ee:ca:87:4b:0a:3e:2a:5c:bf:d6:48:85:30:ef:0b:e9:65:0d:
         31:e5:37:07:d3:6f:68:71:87:8b:3c:51:23:01:c8:fb:1d:9b:
         38:15:70:39:97:16:66:db:2e:ad:24:e3:3e:1d:8b:b9:f0:95:
         43:67:c3:09:7f:97:0f:14:4d:c1:32:14:49:bd:44:26:fc:6d:
         db:c4:e8:5c:7b:b8:b8:0c:ca:1c:8a:c9:80:73:03:2f:b3:20:
         ec:88:1e:f7:94:7e:55:0f:a6:4b:81:64:97:66:2b:c3:fd:6a:
         e5:16:0e:0d:31:2d:4f:76:4d:8f:3d:3f:8d:9f:8d:3c:4c:3e:
         8c:13:04:0e:29:a6:f5:ad:1b:e5:60:e0:fb:d9:03:8b:55:1e:
         fd:3f:ca:cd:aa:fe:86:77:c5:51:fa:a4:69:4b:3b:31:1c:78:
         9e:d6:7c:4c:9a:9b:4e:f3:73:fc:b7:a6:64:10:f4:48:08:af:
         9d:05:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 18:42:45 2024 by rpki-client on console-fra.rpki-client.org