Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa
File:                     3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa (raw, json)
Hash identifier:          KL6UtKb6EV5otn9k9xF3d+fI2o1oFk9YFIoPsB3lXeA=
Subject key identifier:   9F:AD:FB:78:41:0D:FB:5B:C6:27:06:AB:01:F4:DE:C7:FF:F5:4D:59
Certificate issuer:       /CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
Certificate serial:       3A4FF22451B60AA2C4B0AA6ADB06CEAB1F322306
Authority key identifier: 37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa
Signing time:             Tue 05 Mar 2024 18:08:42 +0000
ROA not before:           Tue 05 Mar 2024 18:03:42 +0000
ROA not after:            Tue 04 Mar 2025 18:08:42 +0000
asID:                     262218
IP address blocks:        170.79.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:4f:f2:24:51:b6:0a:a2:c4:b0:aa:6a:db:06:ce:ab:1f:32:23:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37309EBD13954CA35EC58986AEFEF579DA52A9BD
        Validity
            Not Before: Mar  5 18:03:42 2024 GMT
            Not After : Mar  4 18:08:42 2025 GMT
        Subject: CN=9FADFB78410DFB5BC62706AB01F4DEC7FFF54D59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:48:02:04:56:03:9a:ee:0a:32:64:52:75:
                    8a:e3:55:fb:20:d6:0b:4b:91:4c:1a:bf:05:45:df:
                    36:32:ac:19:19:7c:52:71:e3:74:bb:9d:8d:ca:6e:
                    c7:00:93:29:77:78:96:f3:5a:8e:6a:f9:4c:a8:bc:
                    49:cb:75:d2:38:26:86:dc:7c:8b:50:40:93:72:2f:
                    94:22:c1:f9:34:e8:6b:9d:13:a1:b8:78:0f:22:3d:
                    4e:67:69:69:a7:ec:7b:60:cd:06:a9:8d:b0:08:8a:
                    59:85:59:e8:cf:00:55:1f:9a:44:e0:7e:ef:0a:b6:
                    1c:5b:50:31:a0:98:44:b5:88:9c:e2:32:86:1a:72:
                    21:e5:8c:af:41:71:09:79:1e:16:2e:38:3f:e1:c0:
                    ca:ad:a1:f6:34:f0:ca:da:67:b8:41:3b:e1:30:b3:
                    41:c3:c8:32:7c:3b:96:65:32:c7:8c:79:16:c4:3a:
                    53:68:55:2a:cd:b8:29:b1:fb:0c:48:14:1c:53:c9:
                    d2:53:5b:72:d7:cd:d1:fe:99:37:b2:b9:25:fc:8d:
                    53:72:5c:65:48:64:3f:e5:b1:9c:11:10:68:0f:d0:
                    14:a0:a5:e7:bf:38:2a:06:4e:50:44:22:2b:6b:17:
                    0b:90:19:3a:8f:a8:47:4e:74:50:cf:df:10:3b:24:
                    49:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AD:FB:78:41:0D:FB:5B:C6:27:06:AB:01:F4:DE:C7:FF:F5:4D:59
            X509v3 Authority Key Identifier:
                keyid:37:30:9E:BD:13:95:4C:A3:5E:C5:89:86:AE:FE:F5:79:DA:52:A9:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37309EBD13954CA35EC58986AEFEF579DA52A9BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95C752E1AD4889BB7EB545A6B7EF81F8AEC58D8B21E81C3C996103FAED7C1798/0/3137302e37392e3130392e302f32342d3234203d3e20323632323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:62:83:15:76:5d:db:d5:c5:ca:49:d8:26:01:82:0f:b7:03:
         7e:94:56:e6:49:c7:6f:59:18:75:d5:27:3a:da:16:08:e0:3d:
         f5:8b:e9:21:d0:2f:a3:21:dd:b0:d8:31:7d:58:06:62:cb:b0:
         b3:2f:cc:5d:c4:d0:c7:17:1a:eb:60:8e:fa:99:d2:3d:c0:d1:
         30:ae:85:75:16:81:c9:37:ce:3d:8f:01:f5:db:ca:21:5d:8f:
         e4:81:d2:06:11:23:de:73:0f:b4:44:d9:b4:0b:80:3e:86:e3:
         82:3d:b0:0d:17:15:76:a2:84:54:69:2b:36:99:90:c5:60:be:
         3c:e1:1d:71:04:af:3e:39:e8:40:e0:57:4f:ff:df:c7:05:9a:
         0a:f0:48:62:b5:4b:13:65:0f:6b:32:f5:70:b1:81:3c:e9:70:
         43:2a:4e:21:43:56:58:e3:01:09:57:ae:54:27:6f:7a:2c:7d:
         2b:67:db:15:d4:ab:2d:06:4b:ad:e2:51:0e:59:b8:06:d4:f3:
         83:86:b3:72:6f:73:90:b9:ea:01:19:24:22:25:35:d7:fb:fc:
         88:33:8d:b8:e1:90:e6:64:e5:a3:2c:6a:1a:73:7f:43:c3:d7:
         48:1c:fd:f6:b6:3a:15:70:22:6a:a3:52:cd:66:78:27:b5:eb:
         24:17:a1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:50 2024 by rpki-client on console-ams.rpki-client.org