Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39332e302f32342d3234203d3e20323730303839.roa
File:                     3137302e38302e39332e302f32342d3234203d3e20323730303839.roa (raw, json)
Hash identifier:          Ovtf0sP4PVjZVkWrj6FocTNpD6+0KFJ8y8bjhHM23Ec=
Subject key identifier:   C1:FF:58:D9:5E:C5:91:5A:38:B7:20:E4:03:E9:BD:93:74:64:06:32
Certificate issuer:       /CN=C73971A2080A975B88CBA6005895BD357D233BC8
Certificate serial:       6527A4C2F9B4F82F153E5FC7E3A7E53380884034
Authority key identifier: C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39332e302f32342d3234203d3e20323730303839.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     270089
IP address blocks:        170.80.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:27:a4:c2:f9:b4:f8:2f:15:3e:5f:c7:e3:a7:e5:33:80:88:40:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C73971A2080A975B88CBA6005895BD357D233BC8
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=C1FF58D95EC5915A38B720E403E9BD9374640632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:07:6e:14:50:5d:a7:4f:a0:36:24:33:c4:3d:
                    22:80:3e:ed:af:77:1b:41:21:ec:34:9b:a1:1a:37:
                    d8:09:56:a9:4c:e3:ca:8e:65:c1:34:4f:c9:b0:25:
                    d7:7f:84:a2:43:34:bf:ff:d5:a7:49:76:38:16:73:
                    c9:78:ec:0f:f3:58:ec:cf:3b:02:4e:f7:3c:aa:8a:
                    02:0f:90:63:38:15:07:ee:95:09:da:57:3e:06:be:
                    2e:80:da:32:78:cb:82:0d:4b:32:14:71:20:fd:52:
                    d5:ac:4e:a2:65:e6:16:31:25:bf:b4:59:0f:87:c1:
                    07:a0:94:93:b6:d2:01:26:93:b3:e9:6c:94:d4:29:
                    f6:d4:f3:af:dd:f9:49:48:0a:48:3e:4d:79:73:c9:
                    21:3a:cd:07:06:fb:ac:5d:86:70:ab:cb:88:99:6b:
                    f8:66:1b:c0:60:5f:fd:ea:7c:a4:a1:53:97:32:dd:
                    6f:ff:e0:e0:0c:02:63:9a:65:e0:b9:a8:35:96:b6:
                    40:ef:18:6c:b1:94:e6:ed:66:39:06:16:75:53:c9:
                    81:c3:83:5e:cc:01:66:c0:7b:9f:13:5c:08:50:4e:
                    ce:ba:87:e2:12:07:4f:67:0a:03:70:e1:d9:07:9a:
                    b2:fd:b2:76:24:83:26:4c:77:b8:dd:57:a8:eb:7f:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FF:58:D9:5E:C5:91:5A:38:B7:20:E4:03:E9:BD:93:74:64:06:32
            X509v3 Authority Key Identifier:
                keyid:C7:39:71:A2:08:0A:97:5B:88:CB:A6:00:58:95:BD:35:7D:23:3B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/C73971A2080A975B88CBA6005895BD357D233BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C73971A2080A975B88CBA6005895BD357D233BC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/628D52E709915F87822C196D5217A6A50809392EC93CAAE0C0153ACFC449898F/0/3137302e38302e39332e302f32342d3234203d3e20323730303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:c6:ff:e1:c9:ca:27:7d:f9:fd:2b:1c:d1:07:14:c0:4e:c5:
         65:bb:41:03:20:f8:98:b1:fb:53:6c:87:d1:6a:79:e3:33:41:
         71:b3:bc:60:52:fd:ad:ac:3e:71:b9:14:08:97:98:00:91:c0:
         f3:1d:fd:aa:07:ca:02:df:c9:40:a5:b2:f3:73:a1:5c:ed:4e:
         56:f3:1b:ab:e5:dd:73:ad:55:14:6d:ae:cd:26:99:d3:92:64:
         c3:58:e1:ad:a9:c5:55:97:ae:bb:46:8a:9f:8a:3b:f2:db:fe:
         64:fa:a9:f4:4e:54:85:9b:b2:8f:b4:ad:0d:a2:e2:fe:31:6b:
         5b:8c:fc:e0:cc:74:68:16:13:fe:1c:03:d7:d8:e0:79:b6:59:
         b9:6c:75:09:f7:7e:44:71:81:a0:eb:89:43:7b:db:53:0b:6a:
         c7:b1:21:a1:7e:9f:7c:ab:42:5a:a5:37:de:43:fa:ad:a9:29:
         51:66:28:b3:47:77:2a:8f:48:da:10:14:4d:c4:4a:57:dd:2f:
         45:82:db:1c:bf:0a:6e:b4:10:30:d5:dc:6c:72:f2:a3:33:56:
         e6:fa:08:42:db:7f:03:2f:66:fb:a1:7f:cd:ed:0e:bf:05:a1:
         ae:79:f1:ac:3c:c1:c1:58:37:67:b8:80:e1:ca:f6:20:d8:3c:
         4f:ac:95:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org