Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa
File:                     3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa (raw, json)
Hash identifier:          gCZbcXVEUjL1Cj1TaHJkJlAZ9ITqUoUsV1x8uZkxVfQ=
Subject key identifier:   11:02:CE:79:70:6F:38:05:25:75:39:F8:52:3C:7B:96:05:16:3A:09
Certificate issuer:       /CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
Certificate serial:       4773123417A63783175BBD77B6159724B653A5D0
Authority key identifier: EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa
Signing time:             Tue 05 Mar 2024 18:13:38 +0000
ROA not before:           Tue 05 Mar 2024 18:08:38 +0000
ROA not after:            Tue 04 Mar 2025 18:13:38 +0000
asID:                     264834
IP address blocks:        170.81.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl
                          rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:73:12:34:17:a6:37:83:17:5b:bd:77:b6:15:97:24:b6:53:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC26663ACAE29445E5B6D7E1004A10C38B71FA71
        Validity
            Not Before: Mar  5 18:08:38 2024 GMT
            Not After : Mar  4 18:13:38 2025 GMT
        Subject: CN=1102CE79706F3805257539F8523C7B9605163A09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:60:bd:ed:7a:16:4d:77:8b:61:87:bb:ae:
                    be:f2:cf:90:d6:24:6e:5e:b1:25:80:f5:fb:25:98:
                    b3:39:eb:a3:54:fa:57:b7:1d:83:c2:fa:0c:75:5b:
                    37:e4:18:64:49:43:c3:f6:16:7e:d0:ea:72:63:86:
                    23:20:ce:4a:78:a1:b8:95:91:f4:78:53:45:7b:59:
                    71:42:02:b1:36:4d:db:b7:69:8b:94:71:58:5d:b6:
                    d9:b2:79:c2:93:a3:87:5b:fc:c4:0a:04:4b:96:2f:
                    a7:5a:1f:e2:58:a2:6f:50:06:e4:91:d5:2d:e8:01:
                    7e:22:70:79:98:f0:a0:1e:92:5f:5b:b2:f5:3c:92:
                    cc:0c:2d:5b:98:81:87:25:d0:5f:29:dd:b4:dd:48:
                    98:1b:52:1d:86:09:82:c9:19:a4:5f:2c:34:39:87:
                    37:de:6e:ca:4f:43:86:ab:04:6f:1a:3b:a3:3f:8f:
                    84:cd:8e:ca:44:7b:d2:5a:8f:27:95:d4:27:03:9a:
                    db:c6:da:aa:d1:b2:17:bd:e2:5e:ab:8c:58:4f:b8:
                    1e:fa:c3:0f:b9:3e:c7:24:93:28:2b:42:83:ec:8f:
                    20:7b:6a:b0:20:8e:5c:e6:51:94:29:85:e0:bf:d1:
                    68:d5:78:6e:74:ac:9a:dc:1f:63:fa:a8:41:d6:fc:
                    09:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:02:CE:79:70:6F:38:05:25:75:39:F8:52:3C:7B:96:05:16:3A:09
            X509v3 Authority Key Identifier:
                keyid:EC:26:66:3A:CA:E2:94:45:E5:B6:D7:E1:00:4A:10:C3:8B:71:FA:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC26663ACAE29445E5B6D7E1004A10C38B71FA71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/827761D6DF437C41C78D55A4DCB7E4C0339170DCB435DE300AFE2B316FA31FEC/0/3137302e38312e3133392e302f32342d3234203d3e20323634383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:83:08:53:b0:9d:80:32:ed:9a:3e:10:fe:48:08:78:25:
         cb:79:de:ce:1c:af:e4:22:b5:2e:c1:d3:45:d6:42:cc:54:f3:
         fb:d5:a4:03:b4:a2:90:b7:b1:d3:7e:d5:39:72:90:be:e9:b6:
         87:41:92:a5:c2:3b:f9:a7:6b:33:e9:bb:6f:02:e9:d5:a8:04:
         3f:a6:dc:98:ed:9a:96:df:31:68:cb:f1:70:71:2c:27:18:77:
         1c:1c:39:05:7a:a2:77:bc:71:be:94:5a:3e:e4:c6:09:61:b3:
         97:ea:c3:01:b7:ec:df:f8:6c:92:6b:f1:d4:64:40:34:6f:f5:
         39:04:6b:c2:92:b8:12:9c:35:fa:c3:03:cf:60:31:15:a9:ec:
         b5:2f:07:9c:b5:2c:91:e1:cc:e7:68:95:10:41:5c:7d:42:e2:
         72:2f:64:d6:cf:ed:5b:21:6c:9f:f7:18:f9:50:44:c4:ee:53:
         f3:80:99:7b:fa:bb:bb:79:54:25:bf:43:a7:e0:48:38:d9:19:
         32:57:4d:30:86:e2:a7:77:a3:72:c9:87:2f:a6:58:1f:9c:83:
         3f:23:da:7e:ee:fc:dd:2d:3a:5f:b1:8b:5a:76:b7:e9:fe:e9:
         32:05:ef:98:0d:f9:0b:5b:86:a5:60:a4:d4:cd:aa:b8:28:fe:
         49:f2:1f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org