Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134312e302f32342d3234203d3e20323634383139.roa
File:                     3137302e38302e3134312e302f32342d3234203d3e20323634383139.roa (raw, json)
Hash identifier:          fjcUTn4V4e8xc5FSt4GqPRh0baAxdCBcVlJkZI79EXU=
Subject key identifier:   6E:4F:A1:AD:C7:9E:AB:34:AB:AE:ED:94:98:42:06:4E:2C:46:4C:82
Certificate issuer:       /CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
Certificate serial:       1A8511FAE38B376917532FE4CC816D3C15395180
Authority key identifier: 17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134312e302f32342d3234203d3e20323634383139.roa
Signing time:             Tue 05 Mar 2024 18:02:40 +0000
ROA not before:           Tue 05 Mar 2024 17:57:40 +0000
ROA not after:            Tue 04 Mar 2025 18:02:40 +0000
asID:                     264819
IP address blocks:        170.80.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:85:11:fa:e3:8b:37:69:17:53:2f:e4:cc:81:6d:3c:15:39:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17FD7B4CD3B97225C91244D204C973ABA848EF0A
        Validity
            Not Before: Mar  5 17:57:40 2024 GMT
            Not After : Mar  4 18:02:40 2025 GMT
        Subject: CN=6E4FA1ADC79EAB34ABAEED949842064E2C464C82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:69:9a:73:5e:e6:18:04:0b:93:4b:c5:93:
                    41:f9:5d:1e:c4:eb:b1:d6:33:a1:2d:2d:d0:cf:e7:
                    0c:90:1f:4a:90:ba:53:1c:fd:19:c7:b8:7c:a5:88:
                    62:37:60:ef:d2:11:0b:d3:67:50:53:45:50:3a:b2:
                    d5:d0:35:69:fb:79:15:70:57:89:2e:99:51:10:36:
                    f8:20:b0:33:ac:17:90:f4:03:bd:10:6a:a7:e3:68:
                    1a:c2:bc:fa:aa:91:10:0e:4c:d2:87:ad:53:7e:a3:
                    38:c3:c7:a2:e3:7f:70:37:7f:99:24:e8:51:13:98:
                    e7:cb:e9:06:3f:79:d0:1f:08:65:1a:59:e0:1e:07:
                    e0:9d:3b:03:b7:dd:12:cf:a1:3b:16:b8:93:e5:91:
                    c9:a9:fb:11:c8:a1:71:f4:78:9d:3d:ce:c1:73:35:
                    ff:50:87:31:59:3f:74:f3:40:69:1f:fb:fa:1f:81:
                    b2:38:3b:ce:79:ad:df:60:a6:ac:d7:75:a3:24:e4:
                    29:56:0e:d7:d9:79:e0:b9:a7:92:35:51:69:ad:b8:
                    07:5d:ac:ce:10:0d:5c:2b:7f:61:3e:85:42:3f:e8:
                    d6:2d:96:0f:7f:48:04:75:f7:47:1c:57:1f:01:88:
                    ad:78:04:38:9c:8a:ee:e8:5c:2e:6a:40:52:60:03:
                    63:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4F:A1:AD:C7:9E:AB:34:AB:AE:ED:94:98:42:06:4E:2C:46:4C:82
            X509v3 Authority Key Identifier:
                keyid:17:FD:7B:4C:D3:B9:72:25:C9:12:44:D2:04:C9:73:AB:A8:48:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17FD7B4CD3B97225C91244D204C973ABA848EF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5BC27E67CC4BD72DBD695E8B8FD48EE83524B67C058379454E87EA4739D3405E/0/3137302e38302e3134312e302f32342d3234203d3e20323634383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:2a:ee:be:e0:1f:ca:0d:e0:45:7d:71:66:26:15:3c:19:62:
         0e:db:da:9a:d8:fc:ca:47:e4:a4:bb:fb:94:7c:99:c4:47:c1:
         b5:5e:0d:c1:71:a9:3f:2e:28:40:52:8b:86:62:2f:8d:a4:2d:
         72:d4:6a:ae:27:4a:07:35:14:2f:fb:49:b7:69:49:3b:89:89:
         ec:9f:66:cd:f1:18:af:9d:42:1a:cd:ce:10:1c:ef:87:3e:89:
         ba:5c:9f:63:f1:ed:41:16:cf:f2:43:f6:01:48:c5:f2:47:53:
         24:70:34:82:2b:f4:65:df:49:f8:3f:3b:83:25:5f:37:7f:c9:
         c6:22:15:47:6e:b1:9b:35:6c:df:b3:23:04:c6:92:02:5a:3b:
         e2:77:10:0e:19:3c:12:05:21:bd:cb:1f:86:c3:67:ec:c4:1b:
         9d:05:ff:9c:16:fb:ef:98:22:ae:ae:cb:91:3d:79:30:e2:9a:
         51:4f:3e:47:f7:5c:6b:28:ac:14:ef:d1:fb:03:c2:b4:06:d7:
         0e:ac:89:90:04:7c:26:5f:d9:87:de:45:05:f2:13:f9:77:66:
         4a:e8:de:fd:2f:bd:a7:6a:38:40:40:6c:2e:89:e4:bf:d6:72:
         0e:c4:ad:54:04:4d:e8:f5:74:b9:87:b0:3a:00:d7:5f:1c:51:
         f6:3f:1e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 12:54:04 2024 by rpki-client on console-fra.rpki-client.org