Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa
File:                     3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa (raw, json)
Hash identifier:          TY2DHgn/q/1XR6xBtR/YiNKDIYPLKCle7gPmGgFQAqc=
Subject key identifier:   BE:C0:62:A9:FB:D9:36:06:8D:0F:3D:2F:0E:77:C5:1D:4C:4F:29:4B
Certificate issuer:       /CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
Certificate serial:       12CCA7A84571F7BE63557557515F68104D88838B
Authority key identifier: 68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa
Signing time:             Tue 05 Mar 2024 17:40:40 +0000
ROA not before:           Tue 05 Mar 2024 17:35:40 +0000
ROA not after:            Tue 04 Mar 2025 17:40:40 +0000
asID:                     264681
IP address blocks:        170.79.100.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:cc:a7:a8:45:71:f7:be:63:55:75:57:51:5f:68:10:4d:88:83:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68FDDBE1BF749D2FC48F59317C6389C8186C4613
        Validity
            Not Before: Mar  5 17:35:40 2024 GMT
            Not After : Mar  4 17:40:40 2025 GMT
        Subject: CN=BEC062A9FBD936068D0F3D2F0E77C51D4C4F294B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:c9:7b:87:c7:77:79:2a:4b:06:9d:e5:5e:
                    58:db:a5:e1:4b:8c:ed:81:a2:a9:35:81:1a:ce:8f:
                    e1:55:dc:cb:b1:fa:eb:b5:71:cf:59:39:a0:ae:11:
                    05:b3:ef:fd:4c:2e:ee:5c:7c:16:eb:ca:77:3a:e1:
                    d1:ca:1a:1a:df:73:80:a9:8d:28:a8:8b:57:35:7f:
                    11:b7:10:9e:aa:ec:43:d9:fc:64:24:2a:90:6b:12:
                    e3:12:d5:35:2b:60:f9:2b:3d:b9:ca:52:ce:4d:d2:
                    af:47:93:4d:e3:44:69:a1:ab:af:ee:20:61:14:86:
                    6a:0e:8d:8c:e6:77:9c:26:7a:db:db:48:e1:8a:f6:
                    9d:2d:ba:46:96:85:fb:69:6f:9e:7b:ac:db:2a:d0:
                    27:04:8d:a6:14:90:51:1f:87:c5:b5:c7:44:3d:12:
                    c3:3d:98:a4:3b:d1:e9:76:00:5f:be:87:bd:bb:23:
                    37:48:f4:8a:be:e2:2a:81:be:e9:86:0a:93:19:8a:
                    4c:2d:b2:49:85:e3:e0:2a:17:61:c4:db:3a:88:03:
                    e6:05:58:74:58:85:23:09:d7:b5:f1:06:f8:b3:bc:
                    23:ca:47:8a:de:e9:d0:d2:63:fc:0e:44:8e:c7:97:
                    58:27:1c:0f:44:66:11:ee:36:c6:44:e7:a3:03:ea:
                    0c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:62:A9:FB:D9:36:06:8D:0F:3D:2F:0E:77:C5:1D:4C:4F:29:4B
            X509v3 Authority Key Identifier:
                keyid:68:FD:DB:E1:BF:74:9D:2F:C4:8F:59:31:7C:63:89:C8:18:6C:46:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/68FDDBE1BF749D2FC48F59317C6389C8186C4613.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B4E3744F24E907740AFF85CE9457F3FA8E3BF32359D4255C9B5FE81ED74EC44/0/3137302e37392e3130302e302f32322d3234203d3e20323634363831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:17:43:74:2c:f2:a0:04:22:17:d2:c7:23:12:af:06:20:ee:
         6c:ca:43:e9:9f:9b:77:40:27:67:86:95:20:7b:35:73:0f:f4:
         5e:f9:fd:9f:a3:a9:fb:9f:c3:e0:96:19:49:b4:3f:11:a0:f9:
         90:84:a8:66:fd:d4:6e:c8:79:0b:75:52:51:77:16:d0:45:37:
         4a:d1:00:70:a5:12:b3:0a:52:fd:75:1d:50:b3:44:bf:f8:d5:
         56:72:bc:e6:fe:34:35:07:da:69:0f:9f:92:51:05:b5:4e:a1:
         37:ab:b3:93:3b:a5:f4:31:29:e4:62:37:32:89:de:c4:10:8a:
         fd:7f:a5:e1:2e:42:1e:34:28:61:f1:d6:36:73:93:36:0f:52:
         50:d2:f3:3c:f4:2e:6f:ee:eb:ba:6e:5b:df:52:eb:a6:63:6c:
         92:8c:81:57:ae:57:f0:06:83:f3:dc:3b:6b:57:38:95:88:38:
         ae:e3:b5:f2:d9:bf:a9:4b:e0:8f:ce:43:db:98:be:b7:4c:da:
         d9:c8:4d:d8:94:1b:a5:15:1a:24:04:ea:37:b3:c2:7f:39:5a:
         27:29:48:60:40:c8:23:95:e6:2d:24:1b:23:34:a1:a7:96:45:
         6e:f4:6e:57:c0:05:60:2d:43:38:dc:e8:84:6f:c8:aa:e7:09:
         73:e9:63:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:19 2024 by rpki-client on console-fra.rpki-client.org