Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/3137302e38312e3232382e302f32322d3234203d3e20323634383332.roa
File:                     3137302e38312e3232382e302f32322d3234203d3e20323634383332.roa (raw, json)
Hash identifier:          iXzPsIFf3v9snQyl0Fi3O3V7JoCuyxCJ1STlNli41p0=
Subject key identifier:   CE:04:AC:AB:35:FC:36:A9:5E:E4:65:52:66:9A:CD:BB:4D:F2:79:A0
Certificate issuer:       /CN=C0A959C99718A77FC3BADB1D875B782D01705927
Certificate serial:       3EBE613702A5E4C565973E4DE363F3788F2F7F4C
Authority key identifier: C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/3137302e38312e3232382e302f32322d3234203d3e20323634383332.roa
Signing time:             Tue 05 Mar 2024 18:08:45 +0000
ROA not before:           Tue 05 Mar 2024 18:03:45 +0000
ROA not after:            Tue 04 Mar 2025 18:08:45 +0000
asID:                     264832
IP address blocks:        170.81.228.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.crl
                          rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:61:37:02:a5:e4:c5:65:97:3e:4d:e3:63:f3:78:8f:2f:7f:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0A959C99718A77FC3BADB1D875B782D01705927
        Validity
            Not Before: Mar  5 18:03:45 2024 GMT
            Not After : Mar  4 18:08:45 2025 GMT
        Subject: CN=CE04ACAB35FC36A95EE46552669ACDBB4DF279A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:a2:3f:a4:9f:a2:b4:c4:3c:b9:8d:60:22:
                    23:55:f9:ec:36:1c:db:68:81:f4:62:65:63:c5:ab:
                    a6:8d:11:1b:d5:66:ee:92:a9:ab:82:ad:14:44:1a:
                    4e:3f:2d:b8:ee:f6:bb:32:e2:31:09:a6:19:50:27:
                    b1:ac:e0:d6:66:a4:ea:47:81:42:7a:93:4c:59:79:
                    c4:e0:4e:1d:17:53:20:39:c7:ce:b2:53:4c:fa:ff:
                    a9:66:ae:31:6f:63:64:8f:00:52:11:48:be:96:b1:
                    17:aa:16:fa:47:fd:15:3b:cd:ee:27:32:c0:58:7d:
                    5b:4d:b9:dc:84:af:c0:dd:e5:cd:83:3c:4b:2b:1f:
                    0d:ce:3c:59:10:b3:7e:d3:34:79:ff:06:99:52:e9:
                    d0:ea:d9:e6:bd:06:b3:0d:fa:97:e7:82:e8:90:28:
                    eb:c8:e7:ff:32:f0:42:85:26:62:87:47:9b:b6:93:
                    05:a1:9d:9f:60:47:0c:50:8d:23:b2:6c:08:6e:a4:
                    e1:1d:11:ea:84:79:ba:6a:bc:5c:f1:34:ee:aa:05:
                    eb:a2:12:c4:f6:d8:2f:53:c6:af:05:97:a3:91:36:
                    67:5c:b4:36:78:72:13:09:a8:de:79:14:1b:bd:b9:
                    99:cf:bc:cf:1f:31:48:26:e4:44:52:34:6a:f4:09:
                    0b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:04:AC:AB:35:FC:36:A9:5E:E4:65:52:66:9A:CD:BB:4D:F2:79:A0
            X509v3 Authority Key Identifier:
                keyid:C0:A9:59:C9:97:18:A7:7F:C3:BA:DB:1D:87:5B:78:2D:01:70:59:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/C0A959C99718A77FC3BADB1D875B782D01705927.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0A959C99718A77FC3BADB1D875B782D01705927.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87ECF80171545183B8D5C15D2878E41170336FCDE0C38140A85BD25293AC6E7F/0/3137302e38312e3232382e302f32322d3234203d3e20323634383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1d:c5:cc:a3:a8:41:a8:dd:a8:ee:97:03:19:9a:f7:ff:ec:26:
         6d:27:e3:61:a1:52:81:28:46:ce:15:e8:18:c1:eb:13:7f:80:
         e6:34:1e:79:9c:39:0d:67:7b:cc:3c:29:d3:f8:84:64:24:6c:
         1d:8d:37:67:40:6a:24:da:95:d6:8b:da:1d:eb:0e:d6:cb:f8:
         07:92:31:9d:a9:98:a6:aa:b7:39:b5:69:00:dc:8f:a4:96:74:
         de:fa:5b:a1:58:b5:66:b9:ab:01:84:04:27:41:e6:b0:df:fa:
         50:29:ee:b5:2b:62:63:b7:88:13:fe:a3:c5:aa:6d:92:17:b5:
         dc:7d:65:84:24:41:a6:1a:e3:ab:fa:a2:63:b5:11:dd:42:5f:
         f0:4e:30:eb:2d:77:9f:50:96:de:56:06:27:98:2c:a3:cc:8e:
         cd:90:59:82:01:31:ae:b9:59:d5:8c:04:12:75:99:e9:6c:36:
         39:1a:ec:27:7c:eb:84:4f:c8:18:11:87:0d:7a:ed:58:25:51:
         d0:58:fa:9d:16:79:a0:40:13:53:f5:16:62:33:9b:3c:2d:19:
         f7:e3:34:be:91:46:ae:e8:3b:e8:75:5c:1a:da:3d:ba:8a:8b:
         8e:ed:1b:69:5e:d6:bc:cd:e4:5e:74:d6:77:84:c5:41:41:a3:
         04:79:67:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org