Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa
File:                     3137302e37382e3230302e302f32322d3232203d3e203134323332.roa (raw, json)
Hash identifier:          La70qvrIdIbli4q4JTb8zYdBxHk+LW48UYUtzNeJH2Q=
Subject key identifier:   42:30:B3:B4:37:F5:B9:43:F0:6D:99:B9:97:48:C6:41:2E:D1:B6:80
Certificate issuer:       /CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
Certificate serial:       5C2DB29525774838B5249D1D6E8CAD61C7C9B877
Authority key identifier: 9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa
Signing time:             Tue 05 Mar 2024 17:50:27 +0000
ROA not before:           Tue 05 Mar 2024 17:45:27 +0000
ROA not after:            Tue 04 Mar 2025 17:50:27 +0000
asID:                     14232
IP address blocks:        170.78.200.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2d:b2:95:25:77:48:38:b5:24:9d:1d:6e:8c:ad:61:c7:c9:b8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5
        Validity
            Not Before: Mar  5 17:45:27 2024 GMT
            Not After : Mar  4 17:50:27 2025 GMT
        Subject: CN=4230B3B437F5B943F06D99B99748C6412ED1B680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:6c:47:72:43:c9:eb:fb:56:b7:b8:fc:65:
                    8e:2d:3e:43:ea:b9:35:45:71:7f:37:7d:59:3f:d1:
                    06:4e:12:a4:f5:ab:fe:93:12:d2:a1:c6:d5:dc:c8:
                    cc:ec:f7:29:7a:69:5f:43:d8:4e:1b:b1:29:dc:1b:
                    6e:91:f7:1a:ba:49:fe:e6:33:84:26:66:99:8e:46:
                    8e:d0:41:51:bf:20:94:a1:28:bf:2a:46:1c:4c:2c:
                    79:37:16:3c:45:8d:c5:49:cb:ed:4a:7c:13:b0:a4:
                    fd:1f:34:9b:a0:12:19:7a:f3:ab:43:94:fd:ad:0b:
                    17:bd:12:b8:e1:54:89:b2:b3:79:10:ca:88:9d:c3:
                    c9:9a:2e:56:ba:3b:3e:88:59:8f:2f:dd:8d:8a:2d:
                    c0:36:f3:21:a0:dd:5c:68:b8:20:99:71:7f:23:2b:
                    8f:04:6a:57:db:91:98:3b:b1:96:90:ac:35:1f:3f:
                    03:d8:09:da:ab:33:6b:e9:33:25:17:24:41:cb:7e:
                    f4:c0:7c:1a:0a:2c:6c:c0:10:72:71:be:43:01:34:
                    33:90:e5:9b:ee:99:1f:9c:af:42:2d:ce:70:0b:45:
                    0e:eb:28:37:d3:e9:98:a3:5d:dd:e4:12:50:a0:5c:
                    6e:9a:ef:33:c5:d5:d3:32:ed:f5:e0:5d:d0:90:e6:
                    7f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:30:B3:B4:37:F5:B9:43:F0:6D:99:B9:97:48:C6:41:2E:D1:B6:80
            X509v3 Authority Key Identifier:
                keyid:9A:9F:16:48:A3:D8:E4:9E:1B:52:84:F8:6C:E1:C3:48:F3:A7:28:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9A9F1648A3D8E49E1B5284F86CE1C348F3A728A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7E8D50E2C16BA4739823910CF2F049FE81927C348B9E86D9756BC63B8D42EEAA/0/3137302e37382e3230302e302f32322d3232203d3e203134323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:76:81:0f:15:f0:42:78:ea:29:e1:3b:90:7f:31:c7:3b:74:
         8b:c7:5f:e3:a6:21:2e:21:45:42:db:0e:04:dd:a1:b1:6a:9c:
         34:a6:d4:81:b8:63:a0:ea:5d:7b:97:14:f3:8c:16:80:11:59:
         c3:d2:1e:e6:5e:1f:69:58:1e:3f:22:39:65:de:5a:ec:13:24:
         9e:24:b2:da:06:2b:16:ac:25:21:04:3f:c5:53:88:82:2e:d2:
         e6:c7:18:f7:cb:cb:78:12:0d:ce:97:f3:05:1e:1b:df:ae:63:
         12:4e:52:f6:ea:f8:29:49:f4:76:fa:ab:ac:ad:5f:03:d6:ed:
         5e:ae:6a:2d:40:83:5d:fc:a0:d0:ff:1a:7d:34:d4:47:a7:1f:
         cc:61:ee:8d:1f:49:d0:23:3c:22:e4:eb:39:d7:11:9e:74:d9:
         06:12:51:f0:0a:c1:3d:f6:72:49:35:fb:cb:bd:ae:51:08:20:
         a8:63:c5:d2:47:e7:16:68:dd:95:87:4f:23:b3:40:53:92:37:
         71:1a:d0:8e:a0:6f:0f:bd:67:af:e2:8a:5c:2d:86:8a:86:8a:
         a5:e6:8e:f1:33:ed:7e:d7:68:85:b8:be:c1:e7:27:ae:c0:93:
         4e:f3:9a:32:d9:85:9c:1c:67:27:58:9d:6c:e3:81:3f:27:da:
         e3:66:5b:0a
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUXC2ylSV3SDi1JJ0dboytYcfJuHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUE5RjE2NDhBM0Q4RTQ5RTFCNTI4NEY4NkNFMUMzNDhG
M0E3MjhBNTAeFw0yNDAzMDUxNzQ1MjdaFw0yNTAzMDQxNzUwMjdaMDMxMTAvBgNV
BAMTKDQyMzBCM0I0MzdGNUI5NDNGMDZEOTlCOTk3NDhDNjQxMkVEMUI2ODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdZGxHckPJ6/tWt7j8ZY4tPkPq
uTVFcX83fVk/0QZOEqT1q/6TEtKhxtXcyMzs9yl6aV9D2E4bsSncG26R9xq6Sf7m
M4QmZpmORo7QQVG/IJShKL8qRhxMLHk3FjxFjcVJy+1KfBOwpP0fNJugEhl686tD
lP2tCxe9ErjhVImys3kQyoidw8maLla6Oz6IWY8v3Y2KLcA28yGg3VxouCCZcX8j
K48EalfbkZg7sZaQrDUfPwPYCdqrM2vpMyUXJEHLfvTAfBoKLGzAEHJxvkMBNDOQ
5ZvumR+cr0ItznALRQ7rKDfT6ZijXd3kElCgXG6a7zPF1dMy7fXgXdCQ5n87AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUQjCztDf1uUPwbZm5l0jGQS7RtoAwHwYDVR0j
BBgwFoAUmp8WSKPY5J4bUoT4bOHDSPOnKKUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy83RThENTBFMkMxNkJBNDczOTgyMzkxMENGMkYwNDlGRTgx
OTI3QzM0OEI5RTg2RDk3NTZCQzYzQjhENDJFRUFBLzAvOUE5RjE2NDhBM0Q4RTQ5
RTFCNTI4NEY4NkNFMUMzNDhGM0E3MjhBNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85QTlGMTY0OEEzRDhFNDlFMUI1
Mjg0Rjg2Q0UxQzM0OEYzQTcyOEE1LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvN0U4RDUwRTJDMTZCQTQ3Mzk4MjM5MTBDRjJGMDQ5RkU4MTkyN0MzNDhC
OUU4NkQ5NzU2QkM2M0I4RDQyRUVBQS8wLzMxMzczMDJlMzczODJlMzIzMDMwMmUz
MDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNDMyMzMzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAqpOyDAN
BgkqhkiG9w0BAQsFAAOCAQEAYHaBDxXwQnjqKeE7kH8xxzt0i8df46YhLiFFQtsO
BN2hsWqcNKbUgbhjoOpde5cU84wWgBFZw9Ie5l4faVgePyI5Zd5a7BMkniSy2gYr
FqwlIQQ/xVOIgi7S5scY98vLeBINzpfzBR4b365jEk5S9ur4KUn0dvqrrK1fA9bt
Xq5qLUCDXfyg0P8afTTUR6cfzGHujR9J0CM8IuTrOdcRnnTZBhJR8ArBPfZySTX7
y72uUQggqGPF0kfnFmjdlYdPI7NAU5I3cRrQjqBvD71nr+KKXC2GioaKpeaO8TPt
ftdohbi+wecnrsCTTvOaMtmFnBxnJ1idbOOBPyfa42ZbCg==
-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org