Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          nxcehVuWE6PFyWkmQRQdDSshS9gO/mqAa3hRkIexX84=
Subject key identifier:   10:94:D6:C2:6A:2F:9F:E3:1A:F2:CC:70:52:BC:2F:00:76:78:BF:6A
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       2CDEC57416B4B92841BD3293415B787E4BC57D0A
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 05 Mar 2024 18:08:43 +0000
ROA not before:           Tue 05 Mar 2024 18:03:43 +0000
ROA not after:            Tue 04 Mar 2025 18:08:43 +0000
asID:                     262218
IP address blocks:        170.79.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:de:c5:74:16:b4:b9:28:41:bd:32:93:41:5b:78:7e:4b:c5:7d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Mar  5 18:03:43 2024 GMT
            Not After : Mar  4 18:08:43 2025 GMT
        Subject: CN=1094D6C26A2F9FE31AF2CC7052BC2F007678BF6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:33:3b:d8:01:d9:ab:c8:75:ff:6f:fa:4e:28:
                    19:18:81:7d:87:43:13:b6:5c:f1:25:b4:23:07:b8:
                    77:a7:16:a1:07:9b:97:5b:0e:27:36:ba:23:bf:9f:
                    0f:52:67:b9:ae:eb:f5:b3:46:d0:93:27:a9:bb:14:
                    ce:f4:30:3e:72:9e:76:6c:e9:0c:93:50:84:28:e8:
                    85:a4:a3:fa:22:a8:88:0d:27:3e:2c:5a:b8:f7:35:
                    39:2a:7e:7a:84:52:91:6f:ce:78:7c:21:46:82:15:
                    24:36:cf:26:c7:3d:6b:6e:5c:94:73:9a:7d:58:9b:
                    23:d0:46:fb:01:fc:61:04:52:cc:3b:ab:07:5c:5a:
                    99:c3:24:b7:9b:ae:f3:ab:d5:2c:4d:6e:5b:41:c0:
                    18:fc:77:03:d2:46:60:01:65:33:2d:3b:1f:06:b6:
                    df:25:ba:80:8e:59:73:b6:44:ba:46:89:9f:fa:b7:
                    12:23:23:c2:78:93:1a:8c:84:03:3d:d0:00:7b:32:
                    ef:7a:3e:f9:68:b7:5b:fa:46:6a:1c:74:e4:77:1a:
                    94:c2:19:00:5e:55:a0:15:60:7f:95:61:ca:4b:f7:
                    21:93:ab:dd:b0:6e:e5:81:27:41:9e:f3:9f:f7:ba:
                    cd:16:31:4a:54:86:1a:71:80:03:af:99:0d:b3:2e:
                    16:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:D6:C2:6A:2F:9F:E3:1A:F2:CC:70:52:BC:2F:00:76:78:BF:6A
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130382e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e9:0b:a1:6c:7d:3a:85:ed:8a:37:3e:61:d0:84:aa:d7:60:
         e8:b6:53:1c:e7:73:53:3e:f7:32:4b:aa:27:ef:4e:85:54:b9:
         fb:82:2a:f1:fe:42:de:e2:cb:11:02:39:fd:e3:62:af:79:b3:
         01:04:05:a4:9a:66:2a:90:dd:54:d3:ff:40:ef:d5:50:ac:77:
         2b:a7:cc:e2:12:e1:0c:0a:48:5a:7e:ef:c3:40:9b:f3:f2:75:
         07:4c:ef:22:7e:6a:0d:b1:03:7b:19:8d:3f:02:b1:6a:4e:e0:
         52:dd:33:93:81:28:33:95:c2:ae:e6:89:c2:21:53:c6:57:75:
         e0:15:2c:11:d6:fd:3f:09:a4:bf:eb:7d:c7:9b:ac:cd:7e:ba:
         83:1d:8b:53:12:ee:57:49:77:fe:41:5f:c3:ec:d1:91:e3:f0:
         9c:62:23:57:19:e8:94:64:ad:fa:9c:d4:7b:cd:c3:00:79:f7:
         80:94:26:6b:49:11:0b:b5:12:f3:0a:f8:c6:05:7b:22:07:6f:
         6a:a6:df:b8:dd:d4:f2:56:e7:72:ce:84:fc:8e:2f:fe:30:4c:
         37:ed:2f:ed:23:8f:22:71:ae:cd:22:b2:79:ca:43:70:b3:bb:
         57:f2:b5:fa:d4:6d:f5:5a:09:9e:ef:3e:86:dc:6f:c5:b5:11:
         55:d8:2a:ad
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIULN7FdBa0uShBvTKTQVt4fkvFfQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzczMDlFQkQxMzk1NENBMzVFQzU4OTg2QUVGRUY1NzlE
QTUyQTlCRDAeFw0yNDAzMDUxODAzNDNaFw0yNTAzMDQxODA4NDNaMDMxMTAvBgNV
BAMTKDEwOTRENkMyNkEyRjlGRTMxQUYyQ0M3MDUyQkMyRjAwNzY3OEJGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpMzvYAdmryHX/b/pOKBkYgX2H
QxO2XPEltCMHuHenFqEHm5dbDic2uiO/nw9SZ7mu6/WzRtCTJ6m7FM70MD5ynnZs
6QyTUIQo6IWko/oiqIgNJz4sWrj3NTkqfnqEUpFvznh8IUaCFSQ2zybHPWtuXJRz
mn1YmyPQRvsB/GEEUsw7qwdcWpnDJLebrvOr1SxNbltBwBj8dwPSRmABZTMtOx8G
tt8luoCOWXO2RLpGiZ/6txIjI8J4kxqMhAM90AB7Mu96Pvlot1v6RmocdOR3GpTC
GQBeVaAVYH+VYcpL9yGTq92wbuWBJ0Ge85/3us0WMUpUhhpxgAOvmQ2zLhaFAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUEJTWwmovn+Ma8sxwUrwvAHZ4v2owHwYDVR0j
BBgwFoAUNzCevROVTKNexYmGrv71edpSqb0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85NUM3NTJFMUFENDg4OUJCN0VCNTQ1QTZCN0VGODFGOEFF
QzU4RDhCMjFFODFDM0M5OTYxMDNGQUVEN0MxNzk4LzAvMzczMDlFQkQxMzk1NENB
MzVFQzU4OTg2QUVGRUY1NzlEQTUyQTlCRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zNzMwOUVCRDEzOTU0Q0EzNUVD
NTg5ODZBRUZFRjU3OURBNTJBOUJELmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOTVDNzUyRTFBRDQ4ODlCQjdFQjU0NUE2QjdFRjgxRjhBRUM1OEQ4QjIx
RTgxQzNDOTk2MTAzRkFFRDdDMTc5OC8wLzMxMzczMDJlMzczOTJlMzEzMDM4MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzIzMTM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqk9s
MA0GCSqGSIb3DQEBCwUAA4IBAQBR6QuhbH06he2KNz5h0ISq12DotlMc53NTPvcy
S6on706FVLn7girx/kLe4ssRAjn942KvebMBBAWkmmYqkN1U0/9A79VQrHcrp8zi
EuEMCkhafu/DQJvz8nUHTO8ifmoNsQN7GY0/ArFqTuBS3TOTgSgzlcKu5onCIVPG
V3XgFSwR1v0/CaS/633Hm6zNfrqDHYtTEu5XSXf+QV/D7NGR4/CcYiNXGeiUZK36
nNR7zcMAefeAlCZrSRELtRLzCvjGBXsiB29qpt+43dTyVudyzoT8ji/+MEw37S/t
I48ica7NIrJ5ykNws7tX8rX61G31Wgme7z6G3G/FtRFV2Cqt
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org