Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa
File:                     3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa (raw, json)
Hash identifier:          +D7+8NrAc3EwgQ6M6bHakcyDJQX+yUCKb8QWB0WNKbc=
Subject key identifier:   42:17:EB:93:32:86:5F:79:01:A7:97:3D:4B:1C:37:A9:7E:EB:B3:80
Certificate issuer:       /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial:       1C2D3F48CE97F175ED47900F736868C6DDA8B776
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa
Signing time:             Thu 22 Aug 2024 04:10:00 +0000
ROA not before:           Thu 22 Aug 2024 04:05:00 +0000
ROA not after:            Thu 21 Aug 2025 04:10:00 +0000
asID:                     264819
IP address blocks:        170.80.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2d:3f:48:ce:97:f1:75:ed:47:90:0f:73:68:68:c6:dd:a8:b7:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
        Validity
            Not Before: Aug 22 04:05:00 2024 GMT
            Not After : Aug 21 04:10:00 2025 GMT
        Subject: CN=4217EB9332865F7901A7973D4B1C37A97EEBB380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:91:d3:f2:14:8a:44:c6:af:f6:92:ec:22:db:
                    a9:63:24:95:c8:12:61:6f:36:b5:db:2c:70:12:8a:
                    ee:e1:33:5c:1b:6a:21:83:95:ab:28:5e:b1:92:e9:
                    c0:b5:37:3f:6d:06:3a:3d:0c:ad:44:94:38:6e:6e:
                    76:c9:de:49:56:bb:40:19:5b:e7:78:ee:7b:9e:07:
                    a9:a1:76:52:a3:68:df:85:e3:35:04:a1:9c:b3:c4:
                    57:5d:2b:65:bc:a2:9a:ee:bb:0e:53:80:17:5c:41:
                    5d:40:56:f7:18:d1:cf:b3:a9:dc:e3:7e:f7:0b:ac:
                    73:56:bf:9b:fd:49:70:3a:61:bb:c3:28:16:55:6e:
                    be:0c:9e:50:b6:68:f3:bd:06:8f:d6:ad:b8:90:03:
                    74:cf:c2:19:76:0c:b7:4c:4a:7f:b8:7f:55:c5:76:
                    b4:17:22:91:3c:19:6e:46:86:81:a5:2f:2b:de:77:
                    07:56:07:be:5a:2d:42:b8:43:3c:77:3c:b5:9f:ff:
                    4c:c7:f5:ca:87:a5:f9:5a:c2:8f:d7:04:f1:f7:0a:
                    d9:eb:f4:9b:a2:d2:fd:9a:c4:c3:28:65:a2:46:93:
                    d5:c3:ec:cb:46:bd:bd:be:33:ae:0c:2e:64:0f:08:
                    88:06:41:57:84:7e:de:59:5e:69:7b:66:d6:b9:26:
                    a8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:17:EB:93:32:86:5F:79:01:A7:97:3D:4B:1C:37:A9:7E:EB:B3:80
            X509v3 Authority Key Identifier:
                keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134302e302f32322d3234203d3e20323634383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:fb:09:64:0d:e3:f0:4a:86:cc:0c:51:16:c7:5c:50:ac:8d:
         ae:dc:3c:18:cc:a2:a7:66:e2:f3:7c:e5:ea:2b:7b:5d:96:18:
         d4:50:be:d7:62:6f:e8:f4:3d:21:af:6b:0f:09:37:c1:55:04:
         fc:79:c3:aa:c9:03:22:45:e8:7c:ec:57:c5:f0:1b:33:ad:61:
         fe:25:ab:17:6d:f7:67:14:74:30:f5:ad:4e:09:e3:a4:5e:7b:
         48:ff:39:62:6f:b9:23:bb:f4:9a:81:bb:83:81:b9:c2:01:6a:
         0a:d6:1b:b6:7f:20:84:03:a2:49:24:da:0f:94:34:b1:75:d6:
         37:aa:9c:53:21:33:cb:a6:ad:10:3c:59:e8:58:69:09:ee:87:
         ba:82:e7:a2:d8:ee:35:41:a6:61:4c:96:05:95:0d:e0:f2:32:
         2d:b3:ee:1f:12:7d:17:3a:c1:a3:a1:3c:10:e9:e1:0b:90:83:
         90:4d:e0:d1:94:b8:5a:b9:df:f0:12:63:f1:20:12:c4:d4:41:
         a1:a8:f0:b1:62:00:ba:1c:9b:d6:24:6a:69:62:f5:44:4b:4f:
         93:06:59:e4:bc:aa:1b:17:09:64:77:b4:73:45:7a:94:6c:58:
         5c:7a:6e:4c:5d:7b:f7:94:d8:dc:02:89:a8:ca:1a:a6:0b:a6:
         0b:d4:6c:9e
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHC0/SM6X8XXtR5APc2hoxt2ot3YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTdGRDdCNENEM0I5NzIyNUM5MTI0NEQyMDRDOTczQUJB
ODQ4RUYwQTAeFw0yNDA4MjIwNDA1MDBaFw0yNTA4MjEwNDEwMDBaMDMxMTAvBgNV
BAMTKDQyMTdFQjkzMzI4NjVGNzkwMUE3OTczRDRCMUMzN0E5N0VFQkIzODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkdPyFIpExq/2kuwi26ljJJXI
EmFvNrXbLHASiu7hM1wbaiGDlasoXrGS6cC1Nz9tBjo9DK1ElDhubnbJ3klWu0AZ
W+d47nueB6mhdlKjaN+F4zUEoZyzxFddK2W8opruuw5TgBdcQV1AVvcY0c+zqdzj
fvcLrHNWv5v9SXA6YbvDKBZVbr4MnlC2aPO9Bo/WrbiQA3TPwhl2DLdMSn+4f1XF
drQXIpE8GW5GhoGlLyvedwdWB75aLUK4Qzx3PLWf/0zH9cqHpflawo/XBPH3Ctnr
9Jui0v2axMMoZaJGk9XD7MtGvb2+M64MLmQPCIgGQVeEft5ZXml7Zta5Jqh/AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUQhfrkzKGX3kBp5c9Sxw3qX7rs4AwHwYDVR0j
BBgwFoAUF/17TNO5ciXJEkTSBMlzq6hI7wowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81QkMyN0U2N0NDNEJENzJEQkQ2OTVFOEI4RkQ0OEVFODM1
MjRCNjdDMDU4Mzc5NDU0RTg3RUE0NzM5RDM0MDVFLzAvMTdGRDdCNENEM0I5NzIy
NUM5MTI0NEQyMDRDOTczQUJBODQ4RUYwQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xN0ZEN0I0Q0QzQjk3MjI1Qzkx
MjQ0RDIwNEM5NzNBQkE4NDhFRjBBLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNUJDMjdFNjdDQzRCRDcyREJENjk1RThCOEZENDhFRTgzNTI0QjY3QzA1
ODM3OTQ1NEU4N0VBNDczOUQzNDA1RS8wLzMxMzczMDJlMzgzMDJlMzEzNDMwMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0MzgzMTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqlCM
MA0GCSqGSIb3DQEBCwUAA4IBAQBk+wlkDePwSobMDFEWx1xQrI2u3DwYzKKnZuLz
fOXqK3tdlhjUUL7XYm/o9D0hr2sPCTfBVQT8ecOqyQMiReh87FfF8BszrWH+JasX
bfdnFHQw9a1OCeOkXntI/zlib7kju/SagbuDgbnCAWoK1hu2fyCEA6JJJNoPlDSx
ddY3qpxTITPLpq0QPFnoWGkJ7oe6guei2O41QaZhTJYFlQ3g8jIts+4fEn0XOsGj
oTwQ6eELkIOQTeDRlLhaud/wEmPxIBLE1EGhqPCxYgC6HJvWJGppYvVES0+TBlnk
vKobFwlkd7RzRXqUbFhcem5MXXv3lNjcAomoyhqmC6YL1Gye
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org