Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132342e302f32322d3234203d3e20323633373734.roa
File:                     3137302e38332e3132342e302f32322d3234203d3e20323633373734.roa (raw, json)
Hash identifier:          G9lIRCr/EWsxBWFLU9cwGfVbuntP1/3NoCL0vqEixWc=
Subject key identifier:   98:A4:27:CF:51:44:3B:BF:43:E8:BF:44:54:2D:2B:DB:F6:41:BC:43
Certificate issuer:       /CN=4B7687F569E5893215BAF86B72C4274237504316
Certificate serial:       6FB8C91A36E17A746F192BE996CA80647B04D737
Authority key identifier: 4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132342e302f32322d3234203d3e20323633373734.roa
Signing time:             Tue 05 Mar 2024 17:43:44 +0000
ROA not before:           Tue 05 Mar 2024 17:38:44 +0000
ROA not after:            Tue 04 Mar 2025 17:43:44 +0000
asID:                     263774
IP address blocks:        170.83.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl
                          rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:b8:c9:1a:36:e1:7a:74:6f:19:2b:e9:96:ca:80:64:7b:04:d7:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B7687F569E5893215BAF86B72C4274237504316
        Validity
            Not Before: Mar  5 17:38:44 2024 GMT
            Not After : Mar  4 17:43:44 2025 GMT
        Subject: CN=98A427CF51443BBF43E8BF44542D2BDBF641BC43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:5b:26:8a:30:e0:ae:05:d6:4c:93:f3:62:
                    13:bc:a9:69:93:02:d6:be:b9:c3:2f:fc:b8:74:c0:
                    87:e0:02:fe:b3:f6:c1:9e:e8:7a:8f:f3:0d:27:1a:
                    04:d9:6d:85:08:22:c9:7d:11:27:09:8a:57:83:9b:
                    ef:4a:06:93:50:14:db:1e:7a:b6:72:04:b7:68:87:
                    d1:42:97:5d:ff:3a:c2:be:ac:e0:bc:26:92:4d:d1:
                    c6:45:d6:5d:b5:68:8b:f1:e1:f1:ac:bd:c7:5c:be:
                    35:77:03:d5:da:2d:79:bc:ee:9d:b8:16:36:a3:52:
                    9a:84:c2:f9:b9:97:f6:55:89:75:ff:e9:70:49:c7:
                    d7:80:ad:29:44:7a:45:c0:74:a4:f5:8c:b7:0d:df:
                    50:28:a4:ba:3c:a5:85:64:40:0e:c6:3b:d9:78:34:
                    c3:a7:4a:2c:19:16:80:b2:d0:e3:b3:0b:92:d4:60:
                    f8:81:61:45:a8:d1:c1:dc:d1:48:ea:76:41:c8:4a:
                    5e:9a:63:62:b2:e9:ac:a5:02:e2:b3:5c:e8:7d:aa:
                    a0:43:ad:e9:2f:bf:23:5a:1f:c9:13:46:47:f3:46:
                    09:1e:09:da:dc:99:19:11:45:84:61:99:73:cc:5a:
                    f2:76:e9:ee:1b:a7:63:07:79:c0:e8:8e:80:63:fa:
                    d2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:27:CF:51:44:3B:BF:43:E8:BF:44:54:2D:2B:DB:F6:41:BC:43
            X509v3 Authority Key Identifier:
                keyid:4B:76:87:F5:69:E5:89:32:15:BA:F8:6B:72:C4:27:42:37:50:43:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/4B7687F569E5893215BAF86B72C4274237504316.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4B7687F569E5893215BAF86B72C4274237504316.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/527F9083A8D5CB3C6601D1A30419252600927049BEEAB605C45EC89B72BA9FDA/0/3137302e38332e3132342e302f32322d3234203d3e20323633373734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:57:ed:ff:2c:53:d8:db:b1:41:14:ba:6e:55:86:6a:fd:90:
         f6:f8:d1:cc:4f:38:63:8f:34:5e:21:ef:35:56:ef:22:70:68:
         fb:c8:34:5e:6a:c8:d3:e2:8e:ff:43:96:f0:19:70:7a:0c:e0:
         98:a6:d5:79:f8:14:b6:ea:b8:21:5f:98:01:4e:f7:d4:87:7d:
         3a:32:d4:9d:09:81:e6:d4:85:68:2d:52:e3:5a:0f:d3:65:d7:
         f1:1c:93:17:37:ee:66:07:0b:2d:5f:29:2c:60:8d:53:a8:a6:
         17:37:ce:f4:42:e1:89:d0:5b:72:51:46:30:6b:43:a4:11:f8:
         92:da:6b:57:7b:a9:a3:23:74:64:35:10:59:1f:b9:38:03:6a:
         86:1d:7f:ac:86:79:a1:1d:2b:c1:e5:c6:12:87:ee:e4:68:b0:
         be:4a:66:4d:b5:c3:b2:53:08:d2:e7:04:2b:71:d1:61:8a:af:
         58:d7:7e:80:7a:c8:9b:a3:73:00:11:bf:10:81:13:ab:51:83:
         6d:45:e9:33:e3:67:89:e3:da:10:47:3f:65:0a:b3:49:6c:5d:
         89:70:04:9c:e3:5b:0b:0c:08:34:19:91:5a:d9:f0:b5:04:1e:
         b2:aa:14:c2:ba:9e:25:6c:07:43:de:c2:20:ee:fb:a5:b2:71:
         01:e3:27:a5
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUb7jJGjbhenRvGSvplsqAZHsE1zcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI3Njg3RjU2OUU1ODkzMjE1QkFGODZCNzJDNDI3NDIz
NzUwNDMxNjAeFw0yNDAzMDUxNzM4NDRaFw0yNTAzMDQxNzQzNDRaMDMxMTAvBgNV
BAMTKDk4QTQyN0NGNTE0NDNCQkY0M0U4QkY0NDU0MkQyQkRCRjY0MUJDNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY91smijDgrgXWTJPzYhO8qWmT
Ata+ucMv/Lh0wIfgAv6z9sGe6HqP8w0nGgTZbYUIIsl9EScJileDm+9KBpNQFNse
erZyBLdoh9FCl13/OsK+rOC8JpJN0cZF1l21aIvx4fGsvcdcvjV3A9XaLXm87p24
FjajUpqEwvm5l/ZViXX/6XBJx9eArSlEekXAdKT1jLcN31AopLo8pYVkQA7GO9l4
NMOnSiwZFoCy0OOzC5LUYPiBYUWo0cHc0UjqdkHISl6aY2Ky6aylAuKzXOh9qqBD
rekvvyNaH8kTRkfzRgkeCdrcmRkRRYRhmXPMWvJ26e4bp2MHecDojoBj+tJpAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUmKQnz1FEO79D6L9EVC0r2/ZBvEMwHwYDVR0j
BBgwFoAUS3aH9WnliTIVuvhrcsQnQjdQQxYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81MjdGOTA4M0E4RDVDQjNDNjYwMUQxQTMwNDE5MjUyNjAw
OTI3MDQ5QkVFQUI2MDVDNDVFQzg5QjcyQkE5RkRBLzAvNEI3Njg3RjU2OUU1ODkz
MjE1QkFGODZCNzJDNDI3NDIzNzUwNDMxNi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC80Qjc2ODdGNTY5RTU4OTMyMTVC
QUY4NkI3MkM0Mjc0MjM3NTA0MzE2LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNTI3RjkwODNBOEQ1Q0IzQzY2MDFEMUEzMDQxOTI1MjYwMDkyNzA0OUJF
RUFCNjA1QzQ1RUM4OUI3MkJBOUZEQS8wLzMxMzczMDJlMzgzMzJlMzEzMjM0MmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMzMzczNzM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlN8
MA0GCSqGSIb3DQEBCwUAA4IBAQB+V+3/LFPY27FBFLpuVYZq/ZD2+NHMTzhjjzRe
Ie81Vu8icGj7yDReasjT4o7/Q5bwGXB6DOCYptV5+BS26rghX5gBTvfUh306MtSd
CYHm1IVoLVLjWg/TZdfxHJMXN+5mBwstXyksYI1TqKYXN870QuGJ0FtyUUYwa0Ok
EfiS2mtXe6mjI3RkNRBZH7k4A2qGHX+shnmhHSvB5cYSh+7kaLC+SmZNtcOyUwjS
5wQrcdFhiq9Y136Aesibo3MAEb8QgROrUYNtRekz42eJ49oQRz9lCrNJbF2JcASc
41sLDAg0GZFa2fC1BB6yqhTCup4lbAdD3sIg7vulsnEB4yel
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:21 2024 by rpki-client on console-fra.rpki-client.org