Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa
File:                     3137302e37382e34302e302f32322d3234203d3e20323634373936.roa (raw, json)
Hash identifier:          ZZnyKNPL6e1lqgO5WZzGKxPPHIo/GNS7j1OEBNa7cNU=
Subject key identifier:   98:AF:72:CD:23:23:FF:EA:B7:F4:CE:E6:D0:2B:11:7B:6B:9C:E1:4E
Certificate issuer:       /CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
Certificate serial:       49230B6E022D310E8BB844E9C9940D9375157E0C
Authority key identifier: 7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa
Signing time:             Tue 05 Mar 2024 17:53:55 +0000
ROA not before:           Tue 05 Mar 2024 17:48:55 +0000
ROA not after:            Tue 04 Mar 2025 17:53:55 +0000
asID:                     264796
IP address blocks:        170.78.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:23:0b:6e:02:2d:31:0e:8b:b8:44:e9:c9:94:0d:93:75:15:7e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ED9ACC4C7390FB2C083BA37C144A9057A422D2D
        Validity
            Not Before: Mar  5 17:48:55 2024 GMT
            Not After : Mar  4 17:53:55 2025 GMT
        Subject: CN=98AF72CD2323FFEAB7F4CEE6D02B117B6B9CE14E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d2:37:37:99:41:72:d6:f3:63:5a:ce:3a:3d:
                    55:28:cb:43:a8:c3:c3:07:c8:b6:ef:f4:72:88:46:
                    03:17:56:79:40:c8:a6:8e:94:f2:30:75:2d:e9:e8:
                    69:ac:bc:f0:80:8a:e8:a6:79:50:1f:46:9f:64:01:
                    23:a6:d6:85:12:f2:ed:87:ca:a2:e6:36:e9:43:85:
                    4b:cd:88:63:d7:c5:b7:da:eb:1e:f4:19:76:a0:ae:
                    16:27:6d:c4:e5:63:8d:82:aa:67:25:b1:a1:36:b1:
                    2b:0f:3b:9b:11:91:47:c1:f2:3b:53:8b:ae:38:3f:
                    99:24:1f:68:6c:ab:d4:1c:c9:27:0b:04:cf:1d:e9:
                    6b:21:ae:7a:d4:96:a6:c1:48:41:e4:fd:a8:b9:2f:
                    73:4b:ee:4b:2a:56:7b:64:08:f8:24:87:f6:0d:e9:
                    b4:02:77:20:ff:34:26:3a:e1:95:51:89:c4:46:98:
                    e0:86:d0:26:6c:0a:7a:0d:90:07:71:41:77:6b:c1:
                    14:e6:f7:61:54:f1:10:f3:0b:d4:d3:c0:f5:83:6e:
                    f5:50:63:1e:6b:b4:9b:72:b4:9d:04:01:c6:61:fe:
                    bd:94:61:da:57:67:f8:59:1a:5e:8c:36:fd:e5:56:
                    3c:10:7e:1e:81:9f:0d:82:55:ad:aa:b9:0c:4a:f4:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AF:72:CD:23:23:FF:EA:B7:F4:CE:E6:D0:2B:11:7B:6B:9C:E1:4E
            X509v3 Authority Key Identifier:
                keyid:7E:D9:AC:C4:C7:39:0F:B2:C0:83:BA:37:C1:44:A9:05:7A:42:2D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7ED9ACC4C7390FB2C083BA37C144A9057A422D2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C7652360DAEFC4809109B92972A8067FE01A587C50B17269FDE078A78BC4F2D/0/3137302e37382e34302e302f32322d3234203d3e20323634373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:26:d2:b7:28:68:1b:7c:76:98:58:33:36:a4:c4:e4:b1:11:
         7b:55:c5:40:c0:da:ec:9a:be:fa:55:f9:e6:8f:c1:f3:a2:17:
         87:92:db:72:1c:41:41:b4:39:50:b4:b3:94:70:45:bf:fc:c1:
         17:82:93:a0:a8:32:39:86:36:b7:54:ee:39:e1:63:5f:01:8e:
         74:ba:99:d1:ea:9a:53:8d:1c:df:ac:66:4a:f7:c5:0a:b9:64:
         c7:ed:7a:8e:66:6c:46:f1:63:d6:bb:a6:5c:b7:a3:40:aa:c0:
         b3:f0:c7:66:e3:9a:f6:66:7f:2a:53:bf:59:89:90:c9:60:5b:
         9d:25:35:fe:39:d9:f8:aa:b3:9b:4d:76:74:8f:a6:dd:74:d4:
         3b:63:f1:d0:07:c6:e0:ef:9d:fe:fc:15:5a:27:b5:38:35:4d:
         ab:39:9e:0b:d5:b3:e5:60:62:a4:1a:51:c3:07:67:cf:a2:ac:
         e4:78:bb:b2:e2:a9:c8:ff:8a:2b:7a:db:6b:f8:a3:0a:1d:51:
         4e:51:9d:6e:f4:41:fc:d8:45:c4:33:83:4b:ee:21:f7:33:1c:
         13:f6:5e:4a:17:0f:4d:ae:bd:cf:4b:df:fc:a1:e3:e7:a7:e2:
         1f:08:d0:c7:40:ef:60:43:c8:fe:e0:95:d9:dd:08:ce:ab:ce:
         e3:6e:6c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:11 2024 by rpki-client on console-fra.rpki-client.org