Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa
File:                     3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa (raw, json)
Hash identifier:          u/ViSU0vaQ8Q42+8enKUZWBR+zmTRKDjMjsfskoaE40=
Subject key identifier:   19:2F:60:DF:59:CA:25:D1:20:2D:AD:9F:D1:EE:DB:8D:1D:3F:9A:60
Certificate issuer:       /CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
Certificate serial:       773B016A30ADDF2109AC6D3E21AE62D42B5808E9
Authority key identifier: 2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa
Signing time:             Tue 05 Mar 2024 17:47:05 +0000
ROA not before:           Tue 05 Mar 2024 17:42:05 +0000
ROA not after:            Tue 04 Mar 2025 17:47:05 +0000
asID:                     264729
IP address blocks:        170.233.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl
                          rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:3b:01:6a:30:ad:df:21:09:ac:6d:3e:21:ae:62:d4:2b:58:08:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED47C2FB75D2367E01C76EF5BD93642FE56F051
        Validity
            Not Before: Mar  5 17:42:05 2024 GMT
            Not After : Mar  4 17:47:05 2025 GMT
        Subject: CN=192F60DF59CA25D1202DAD9FD1EEDB8D1D3F9A60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:85:de:4a:d6:3a:5d:40:ea:29:3a:2b:3d:
                    5c:75:ac:d6:7e:67:51:bd:9d:01:0a:c6:ad:4d:5c:
                    76:7b:07:57:40:66:9f:43:3a:2f:e2:9a:aa:d0:d3:
                    11:f1:3c:b6:40:d9:03:50:ca:e7:69:67:fe:ac:3b:
                    c9:35:e5:bf:ee:0f:6e:bd:fb:53:da:4d:23:79:e4:
                    73:cc:35:bd:d3:33:59:28:b9:fa:17:aa:d7:f5:c8:
                    c8:dc:c3:83:ba:fd:a6:9f:f3:e8:e8:6a:74:e5:0d:
                    76:52:74:08:8a:00:fc:c9:d0:3a:ab:28:b8:f7:f2:
                    ca:25:f9:37:97:7e:bc:e4:c5:b1:9f:f2:a2:af:30:
                    5b:8a:09:a7:4d:2f:c1:55:c5:a3:ab:f9:98:16:d7:
                    06:5b:f0:c4:1d:e3:c6:83:a6:a4:d8:9a:be:f4:92:
                    4f:8a:ce:54:fd:c2:9e:7d:39:76:03:5f:31:18:ff:
                    57:49:66:1a:5c:79:78:cf:b4:c8:64:05:7e:7c:57:
                    44:56:3c:ba:6d:a6:4c:af:34:49:ec:2c:66:f8:7a:
                    dc:24:ed:fd:5d:29:3d:6a:bf:f8:32:d5:d4:4c:82:
                    da:5e:3f:42:4d:e1:84:20:73:9e:60:5c:86:eb:30:
                    c8:f4:43:9f:1f:b2:3a:52:5d:5a:1c:da:cb:46:c6:
                    f7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:60:DF:59:CA:25:D1:20:2D:AD:9F:D1:EE:DB:8D:1D:3F:9A:60
            X509v3 Authority Key Identifier:
                keyid:2E:D4:7C:2F:B7:5D:23:67:E0:1C:76:EF:5B:D9:36:42:FE:56:F0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2ED47C2FB75D2367E01C76EF5BD93642FE56F051.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B1815EAB5FB4E95B361E0B16E012767B7D8844F8F6A480D57EC28AAED1545B7/0/3137302e3233332e3135322e302f32342d3234203d3e20323634373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:e8:0c:ec:9a:12:95:ae:6b:ac:ac:50:78:df:b9:35:4b:
         93:ee:2f:57:9b:f7:ec:06:c5:5f:e9:00:41:4d:1e:2e:e0:3c:
         ba:83:44:21:4f:1e:c5:d4:25:bf:39:a8:48:df:1c:10:2d:f1:
         27:29:cd:6c:2f:50:7e:df:ad:3b:ca:8c:e9:a6:0a:dd:03:2c:
         19:d4:c6:49:09:b6:ef:73:8c:ea:59:93:d5:93:89:cf:29:47:
         0b:ca:fb:22:f8:d5:da:1f:ff:2f:19:c1:27:ce:20:69:22:f1:
         d3:1e:6e:5c:e4:5f:0b:ae:c1:6b:3c:9b:2c:c9:60:ff:62:a7:
         eb:43:78:e3:a0:0f:1b:7f:19:d7:ed:d5:3f:87:80:26:c1:61:
         67:1f:e3:b0:83:27:55:73:66:9f:84:1b:27:e0:a4:d0:d1:fc:
         4e:22:1a:5c:0e:e5:f6:31:01:e2:54:e1:e1:90:4c:d2:03:5f:
         db:4e:f5:d3:5f:ba:ab:08:e3:54:de:7b:bb:70:a7:71:02:9d:
         de:2f:89:f2:a1:08:5d:e8:22:d0:71:74:74:72:01:2d:52:0f:
         3d:6b:77:07:23:f1:30:2d:32:45:ef:2f:28:11:22:7a:70:78:
         55:03:39:a2:d5:db:12:a1:d8:40:e2:d3:50:7b:21:25:ff:f6:
         a6:a3:30:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:20 2024 by rpki-client on console-fra.rpki-client.org