Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33382e302f32342d3234203d3e20323639393630.roa
File:                     3137302e38322e33382e302f32342d3234203d3e20323639393630.roa (raw, json)
Hash identifier:          zc9hrfJdNCVS0DewGS1EHc+i8GQQVFgKZMByej+ZzuQ=
Subject key identifier:   9C:93:42:7C:20:C0:E9:51:C1:3E:8C:BC:7E:68:03:A5:7E:AE:D5:3C
Certificate issuer:       /CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
Certificate serial:       3B74D5B454098CBA7945E1BCE1FC916B945D6C73
Authority key identifier: 7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33382e302f32342d3234203d3e20323639393630.roa
Signing time:             Tue 05 Mar 2024 18:14:17 +0000
ROA not before:           Tue 05 Mar 2024 18:09:17 +0000
ROA not after:            Tue 04 Mar 2025 18:14:17 +0000
asID:                     269960
IP address blocks:        170.82.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:74:d5:b4:54:09:8c:ba:79:45:e1:bc:e1:fc:91:6b:94:5d:6c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9
        Validity
            Not Before: Mar  5 18:09:17 2024 GMT
            Not After : Mar  4 18:14:17 2025 GMT
        Subject: CN=9C93427C20C0E951C13E8CBC7E6803A57EAED53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:cc:a9:50:42:c3:8b:a2:b1:98:37:14:a7:4a:
                    f2:23:f1:70:ad:e2:e2:d4:f7:82:f5:9d:00:9b:47:
                    19:97:12:70:c9:ce:5a:eb:67:a6:45:30:82:55:5d:
                    5c:0e:5d:b9:ae:71:ec:5c:bd:cd:84:d9:01:e9:de:
                    eb:e6:42:b7:ef:e1:91:8b:4b:3f:ef:e6:f2:69:a9:
                    b8:8c:b0:84:67:2a:c0:da:d8:af:37:a2:7d:a9:78:
                    e2:e7:d0:d1:a0:3c:4e:a8:a7:5a:41:79:97:1a:e4:
                    52:64:4c:7d:14:d2:8a:89:37:4f:c5:d4:d3:90:18:
                    0e:f4:aa:d1:ce:9e:5e:46:61:ad:22:63:d0:70:f1:
                    dd:59:0b:45:87:2e:06:e9:4b:9b:db:d3:fd:c1:95:
                    dc:9e:ac:76:c2:9c:cb:36:eb:73:7c:16:1c:6b:1b:
                    83:c7:cd:2a:eb:59:b3:09:54:b6:44:3a:ff:d1:2c:
                    fa:37:d5:e5:9b:fd:31:22:08:bb:18:5a:b9:74:36:
                    97:a9:31:ad:a7:06:6e:ec:59:e9:48:a9:09:27:40:
                    94:3f:d8:39:82:a1:36:1a:37:78:10:e6:04:da:96:
                    6c:b1:a2:ad:10:e5:58:0f:82:f4:ca:d3:5b:bb:e7:
                    d2:fd:c2:22:1f:4c:27:d8:87:19:d9:83:13:76:79:
                    09:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:93:42:7C:20:C0:E9:51:C1:3E:8C:BC:7E:68:03:A5:7E:AE:D5:3C
            X509v3 Authority Key Identifier:
                keyid:7E:B2:2B:FF:3A:5E:5D:07:C8:92:DA:44:FC:05:67:E8:99:E8:CF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7EB22BFF3A5E5D07C892DA44FC0567E899E8CFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7BB2B86CAE209F75F587C75F537AC058063D182301B7286B6211DAF527DBF390/0/3137302e38322e33382e302f32342d3234203d3e20323639393630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:15:d6:00:db:bc:2e:ad:42:77:21:2f:8f:09:69:69:96:6f:
         48:94:7f:88:8c:ac:84:f4:e4:18:83:23:7b:30:b0:16:83:fc:
         f6:7a:28:4b:9b:e8:df:1e:00:44:f0:71:da:8e:13:38:0c:56:
         dd:30:ce:c7:a2:bd:20:d4:eb:7f:0b:c4:2e:0c:d6:28:d9:fa:
         57:7a:f9:84:d9:df:53:6e:60:75:5c:1b:e7:59:1a:89:4b:bb:
         77:76:53:e7:4d:54:b5:6e:a3:17:3a:6b:05:83:8e:8c:56:1d:
         64:1b:f5:20:0d:7d:27:07:4e:3f:2e:11:af:63:8a:00:62:da:
         a7:93:47:e4:33:82:e2:4a:ef:4c:6d:03:8a:59:1a:18:1e:64:
         74:d4:2c:e0:2e:0f:99:f4:93:a5:e0:b4:f4:b1:9a:fc:49:ce:
         de:0b:08:cc:f6:f1:76:e0:c1:a5:b3:be:a9:5f:b0:2d:c3:80:
         3a:69:b9:f1:97:3e:a4:98:67:d1:28:11:dc:86:59:5d:c6:c9:
         50:16:a9:2a:09:36:73:cc:6d:b6:38:d5:00:94:bd:82:6d:10:
         f9:64:dd:1a:87:55:15:dd:b4:9d:83:86:22:4c:11:00:a0:4a:
         22:26:d4:5e:7c:66:d3:a5:f0:4f:66:67:ab:79:c0:a4:fe:94:
         e1:6e:27:ec
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUO3TVtFQJjLp5ReG84fyRa5RdbHMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VCMjJCRkYzQTVFNUQwN0M4OTJEQTQ0RkMwNTY3RTg5
OUU4Q0ZGOTAeFw0yNDAzMDUxODA5MTdaFw0yNTAzMDQxODE0MTdaMDMxMTAvBgNV
BAMTKDlDOTM0MjdDMjBDMEU5NTFDMTNFOENCQzdFNjgwM0E1N0VBRUQ1M0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zKlQQsOLorGYNxSnSvIj8XCt
4uLU94L1nQCbRxmXEnDJzlrrZ6ZFMIJVXVwOXbmucexcvc2E2QHp3uvmQrfv4ZGL
Sz/v5vJpqbiMsIRnKsDa2K83on2peOLn0NGgPE6op1pBeZca5FJkTH0U0oqJN0/F
1NOQGA70qtHOnl5GYa0iY9Bw8d1ZC0WHLgbpS5vb0/3BldyerHbCnMs263N8Fhxr
G4PHzSrrWbMJVLZEOv/RLPo31eWb/TEiCLsYWrl0NpepMa2nBm7sWelIqQknQJQ/
2DmCoTYaN3gQ5gTalmyxoq0Q5VgPgvTK01u759L9wiIfTCfYhxnZgxN2eQkTAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUnJNCfCDA6VHBPoy8fmgDpX6u1TwwHwYDVR0j
BBgwFoAUfrIr/zpeXQfIktpE/AVn6Jnoz/kwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83QkIyQjg2Q0FFMjA5Rjc1RjU4N0M3NUY1MzdBQzA1ODA2
M0QxODIzMDFCNzI4NkI2MjExREFGNTI3REJGMzkwLzAvN0VCMjJCRkYzQTVFNUQw
N0M4OTJEQTQ0RkMwNTY3RTg5OUU4Q0ZGOS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC83RUIyMkJGRjNBNUU1RDA3Qzg5
MkRBNDRGQzA1NjdFODk5RThDRkY5LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0JCMkI4NkNBRTIwOUY3NUY1ODdDNzVGNTM3QUMwNTgwNjNEMTgyMzAx
QjcyODZCNjIxMURBRjUyN0RCRjM5MC8wLzMxMzczMDJlMzgzMjJlMzMzODJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzOTM5MzYzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKpSJjAN
BgkqhkiG9w0BAQsFAAOCAQEAjBXWANu8Lq1CdyEvjwlpaZZvSJR/iIyshPTkGIMj
ezCwFoP89nooS5vo3x4ARPBx2o4TOAxW3TDOx6K9INTrfwvELgzWKNn6V3r5hNnf
U25gdVwb51kaiUu7d3ZT501UtW6jFzprBYOOjFYdZBv1IA19JwdOPy4Rr2OKAGLa
p5NH5DOC4krvTG0DilkaGB5kdNQs4C4PmfSTpeC09LGa/EnO3gsIzPbxduDBpbO+
qV+wLcOAOmm58Zc+pJhn0SgR3IZZXcbJUBapKgk2c8xttjjVAJS9gm0Q+WTdGodV
Fd20nYOGIkwRAKBKIibUXnxm06XwT2Znq3nApP6U4W4n7A==
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org