Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32342d3234203d3e20323730303839.roa
File:                     3137302e38302e39322e302f32342d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          Tg/u1/e48iuf5viGcG+wv8Hzy21HugfNxtXhzHh0KRM=
Subject key identifier:   F1:40:08:82:5D:BC:DF:DD:5B:A3:B4:F3:DD:D6:D5:6B:E4:CD:95:CE
Certificate issuer:       /CN=C73971A2080A975B88CBA6005895BD357D233BC8
Certificate serial:       328F21A85BA697D492A724F52B452BB446589FEB
Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32342d3234203d3e20323730303839.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     270089
IP address blocks:        170.80.92.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8f:21:a8:5b:a6:97:d4:92:a7:24:f5:2b:45:2b:b4:46:58:9f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=F14008825DBCDFDD5BA3B4F3DDD6D56BE4CD95CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:4e:de:9d:d2:d1:3d:c7:66:e3:a5:73:21:
                    6b:73:2e:26:a8:da:9c:00:b6:c6:06:5c:b1:30:6a:
                    19:cf:47:b0:1a:0a:3f:1a:76:17:8f:02:26:b5:6b:
                    e6:8a:90:ef:df:e9:c4:6d:c0:e3:3e:6e:b8:c9:d8:
                    94:72:a9:15:42:e8:60:4b:14:2a:89:88:d4:b8:87:
                    d3:15:8d:b1:ca:05:b1:27:0f:41:2b:b0:18:bd:55:
                    b7:07:08:d6:20:cb:52:e4:ac:86:33:6a:a4:bb:d6:
                    aa:55:2f:dd:89:80:76:bd:23:14:2f:14:e2:bf:74:
                    7f:8b:0d:67:fd:f1:99:08:f6:74:fd:7a:5f:3c:8f:
                    85:f7:ad:ab:4c:ee:ba:16:ec:cb:d1:74:cc:8e:df:
                    65:84:45:99:35:95:5a:58:55:2d:74:99:56:eb:e9:
                    85:d6:30:70:f4:df:fe:43:bd:98:76:35:74:b1:36:
                    af:b5:b7:65:26:79:b3:a5:94:21:4e:48:fd:30:d1:
                    9c:0c:e6:6e:61:f2:35:80:7f:d2:7c:5f:36:69:30:
                    4c:98:17:bf:f6:da:f5:71:50:b8:97:d6:74:04:f8:
                    ac:9d:ae:b9:c4:76:68:b2:2c:eb:b7:fd:7a:5b:03:
                    49:50:96:41:c9:13:9f:f9:6b:2d:a0:d9:63:dd:15:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:08:82:5D:BC:DF:DD:5B:A3:B4:F3:DD:D6:D5:6B:E4:CD:95:CE
            X509v3 Authority Key Identifier:
                keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39322e302f32342d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:c5:a5:8a:bd:80:e4:cb:03:b4:f5:69:38:aa:b9:89:4f:
         58:ab:62:24:a4:aa:76:e5:7d:21:7a:48:43:f6:3b:88:3b:8e:
         71:c1:ff:0e:7e:47:b8:40:b6:81:3c:08:21:44:da:f7:7c:2e:
         e4:8b:46:1f:f1:67:b9:15:a7:21:bb:68:f6:f1:3c:b5:7d:6e:
         0d:fc:f6:91:ec:4a:a8:62:fd:cb:85:bd:b8:01:d7:74:40:30:
         26:e9:00:5a:32:d5:15:c1:8c:63:9a:4b:73:4d:3d:73:17:2f:
         5a:b2:b9:a7:7a:12:62:f1:25:4f:6d:d0:93:5e:2a:77:3d:9d:
         a6:e5:f3:9f:6d:1a:4f:7d:0a:2d:70:c9:7d:a4:b1:63:cd:cc:
         82:31:be:cd:98:38:a5:f1:f4:a3:61:0b:95:0a:46:ca:46:84:
         e7:ea:cc:47:ea:75:b6:ae:0c:00:6f:a5:77:f7:3d:11:a0:52:
         7b:5e:84:a9:0a:f5:f1:cd:75:2e:7b:ee:fc:b3:38:14:1c:c8:
         77:d6:7f:de:0c:82:a4:79:bd:20:eb:7d:6d:91:e4:ee:9e:06:
         e2:22:bf:b6:ee:83:69:3d:5b:9b:9a:8c:40:a5:47:d2:3c:b8:
         2a:90:33:00:d2:08:06:56:68:03:bd:b2:0a:71:98:ae:96:48:
         e5:bf:db:e3
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUMo8hqFuml9SSpyT1K0UrtEZYn+swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzczOTcxQTIwODBBOTc1Qjg4Q0JBNjAwNTg5NUJEMzU3
RDIzM0JDODAeFw0yNDAzMDUxNzM0NTZaFw0yNTAzMDQxNzM5NTZaMDMxMTAvBgNV
BAMTKEYxNDAwODgyNURCQ0RGREQ1QkEzQjRGM0RERDZENTZCRTRDRDk1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRgU7endLRPcdm46VzIWtzLiao
2pwAtsYGXLEwahnPR7AaCj8adhePAia1a+aKkO/f6cRtwOM+brjJ2JRyqRVC6GBL
FCqJiNS4h9MVjbHKBbEnD0ErsBi9VbcHCNYgy1LkrIYzaqS71qpVL92JgHa9IxQv
FOK/dH+LDWf98ZkI9nT9el88j4X3ratM7roW7MvRdMyO32WERZk1lVpYVS10mVbr
6YXWMHD03/5DvZh2NXSxNq+1t2UmebOllCFOSP0w0ZwM5m5h8jWAf9J8XzZpMEyY
F7/22vVxULiX1nQE+KydrrnEdmiyLOu3/XpbA0lQlkHJE5/5ay2g2WPdFaC9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU8UAIgl28391bo7Tz3dbVa+TNlc4wHwYDVR0j
BBgwFoAUxzlxoggKl1uIy6YAWJW9NX0jO8gwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MjhENTJFNzA5OTE1Rjg3ODIyQzE5NkQ1MjE3QTZBNTA4
MDkzOTJFQzkzQ0FBRTBDMDE1M0FDRkM0NDk4OThGLzAvQzczOTcxQTIwODBBOTc1
Qjg4Q0JBNjAwNTg5NUJEMzU3RDIzM0JDOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9DNzM5NzFBMjA4MEE5NzVCODhD
QkE2MDA1ODk1QkQzNTdEMjMzQkM4LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjI4RDUyRTcwOTkxNUY4NzgyMkMxOTZENTIxN0E2QTUwODA5MzkyRUM5
M0NBQUUwQzAxNTNBQ0ZDNDQ5ODk4Ri8wLzMxMzczMDJlMzgzMDJlMzkzMjJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMDMwMzgzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpQXDAN
BgkqhkiG9w0BAQsFAAOCAQEARmzFpYq9gOTLA7T1aTiquYlPWKtiJKSqduV9IXpI
Q/Y7iDuOccH/Dn5HuEC2gTwIIUTa93wu5ItGH/FnuRWnIbto9vE8tX1uDfz2kexK
qGL9y4W9uAHXdEAwJukAWjLVFcGMY5pLc009cxcvWrK5p3oSYvElT23Qk14qdz2d
puXzn20aT30KLXDJfaSxY83MgjG+zZg4pfH0o2ELlQpGykaE5+rMR+p1tq4MAG+l
d/c9EaBSe16EqQr18c11Lnvu/LM4FBzId9Z/3gyCpHm9IOt9bZHk7p4G4iK/tu6D
aT1bm5qMQKVH0jy4KpAzANIIBlZoA72yCnGYrpZI5b/b4w==
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org