Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32332d3234203d3e20323639393630.roa
File:                     3137302e38322e33362e302f32332d3234203d3e20323639393630.roa (raw, json)
Hash identifier:          Dxndr8K3GZt0ZjL+B3Ox1IXe3oHOZAd8kIChwzxTcCA=
Subject key identifier:   3A:05:11:80:17:9D:1B:77:0E:A1:BD:B9:A1:65:75:F8:DA:9A:93:10
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       6AD1BAF2D262D2A08C16F6DFD7F7C11A3610A3E7
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32332d3234203d3e20323639393630.roa
Signing time:             Tue 05 Mar 2024 18:14:15 +0000
ROA not before:           Tue 05 Mar 2024 18:09:15 +0000
ROA not after:            Tue 04 Mar 2025 18:14:15 +0000
asID:                     269960
IP address blocks:        170.82.36.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d1:ba:f2:d2:62:d2:a0:8c:16:f6:df:d7:f7:c1:1a:36:10:a3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Mar  5 18:09:15 2024 GMT
            Not After : Mar  4 18:14:15 2025 GMT
        Subject: CN=3A051180179D1B770EA1BDB9A16575F8DA9A9310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:75:7e:98:f6:3b:07:92:c7:75:6f:77:6a:
                    99:cf:f3:d6:d7:67:b5:17:e8:87:46:6c:47:a2:08:
                    62:30:d5:aa:9c:da:e2:0f:7c:c8:50:99:ab:68:0e:
                    30:f5:d0:3b:12:84:33:4f:45:d9:99:36:ef:82:3c:
                    4d:ee:ec:47:bd:ec:47:3c:1e:d6:8f:fa:c7:ce:e8:
                    78:97:37:e1:93:d2:e3:32:d2:6c:8c:1b:12:da:6b:
                    7f:18:63:42:88:f5:cd:5a:76:3e:3f:3c:d0:94:73:
                    64:05:db:59:4a:f4:5c:f3:83:02:1a:d5:3f:a3:f0:
                    41:40:78:94:eb:8b:66:73:03:11:37:2f:84:67:35:
                    f4:8a:e0:f6:49:53:a0:4a:29:36:d2:18:af:51:d0:
                    1f:9f:23:b0:db:75:7f:2a:c7:d8:39:ce:96:52:cf:
                    8e:a0:5f:e3:c0:20:43:5d:cc:7c:cc:c0:01:d9:a8:
                    cb:fa:a1:49:56:dc:a3:84:ee:9e:ff:9b:4e:b2:33:
                    91:9b:e3:a5:8e:c0:4d:b7:fa:7b:83:13:73:4c:bb:
                    d9:90:30:ba:d6:f6:3f:37:00:ae:cc:1c:e8:a3:e1:
                    fe:cf:b0:a2:ba:d2:a6:56:74:35:8f:b0:43:73:21:
                    54:5e:7f:3d:15:77:8c:19:10:64:c0:be:25:6a:10:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:05:11:80:17:9D:1B:77:0E:A1:BD:B9:A1:65:75:F8:DA:9A:93:10
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33362e302f32332d3234203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:cc:9a:1d:38:7c:0f:35:b3:b8:ba:c7:94:41:c6:ca:ab:86:
         0f:41:80:ec:37:8d:aa:36:d9:7b:01:d9:14:c3:31:d4:a9:bc:
         64:6a:e5:2d:3a:50:70:e9:5d:a6:b3:08:86:e9:66:1f:aa:d8:
         ef:e2:e1:4b:25:a8:1d:92:15:8a:4e:88:19:76:00:0d:ac:c9:
         31:4d:ea:f0:f9:f4:29:1f:57:d5:ac:ff:c0:c6:11:ec:3a:ac:
         d6:99:af:1e:99:58:b7:2e:b1:ad:67:1a:f2:e2:cb:7f:ba:d0:
         e5:c6:5a:95:22:05:9a:f1:25:22:73:6c:37:d6:4d:9f:f3:87:
         67:9f:73:c4:14:75:4a:0a:e7:2c:fa:d3:e2:7e:c0:d1:31:6c:
         3b:05:07:0d:af:2f:56:bb:e9:e5:b0:d0:43:8c:e8:d0:d2:22:
         76:92:8b:e5:7e:da:43:5d:e2:cd:11:bb:14:16:2a:eb:51:a1:
         9c:10:51:4e:07:5e:1b:ab:76:27:85:2b:72:52:c0:96:6a:18:
         4c:1a:fe:89:69:6e:b1:a3:50:a2:97:88:5e:e4:65:27:2f:ef:
         e7:de:b6:2e:47:06:da:79:04:be:a9:3b:47:c1:b6:56:4c:e6:
         aa:61:d6:44:f1:f4:49:87:53:ce:08:1e:24:8b:d8:f8:68:61:
         46:3a:0a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org