Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237373536.roa
File:                     3137302e38342e3233342e302f32342d3234203d3e203237373536.roa (raw, json)
Hash identifier:          XAqOPVDTlLtVBFnAhwBBd5o+c5EY4UfIqbo8IhfbkBg=
Subject key identifier:   39:68:A9:19:99:C1:73:90:59:3C:77:C0:85:4A:82:5E:8C:23:D9:9B
Certificate issuer:       /CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
Certificate serial:       612A2489F4442FC7E68AEA4A000501D8E0F3B82F
Authority key identifier: 3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237373536.roa
Signing time:             Tue 05 Mar 2024 18:08:11 +0000
ROA not before:           Tue 05 Mar 2024 18:03:11 +0000
ROA not after:            Tue 04 Mar 2025 18:08:11 +0000
asID:                     27756
IP address blocks:        170.84.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:2a:24:89:f4:44:2f:c7:e6:8a:ea:4a:00:05:01:d8:e0:f3:b8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3CB23E6FBC1B568FD478F82218A2B5A9A90EC844
        Validity
            Not Before: Mar  5 18:03:11 2024 GMT
            Not After : Mar  4 18:08:11 2025 GMT
        Subject: CN=3968A91999C17390593C77C0854A825E8C23D99B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5e:67:91:3f:87:e4:b0:4e:9c:06:ad:47:20:
                    07:1a:2f:8d:8d:71:09:b3:b5:08:14:50:2c:37:64:
                    31:1d:01:ed:ba:8f:52:27:9f:a7:8e:b7:49:ab:15:
                    34:db:c3:7c:75:c1:fc:8a:ce:1f:5f:5e:3d:fc:e2:
                    45:30:24:bb:79:a7:40:89:5f:0c:9a:98:39:62:d6:
                    ec:cc:a0:6e:6b:6b:49:77:16:7e:96:95:2b:d1:a8:
                    3c:d7:4f:e2:a3:5b:f4:cc:b3:99:f1:ee:59:ac:0c:
                    eb:30:25:c5:49:b3:ec:e4:95:2d:af:13:13:c2:e5:
                    42:5e:cd:ea:12:b3:f8:1b:5b:3b:98:e0:b1:c2:ec:
                    cb:3a:82:f3:4c:66:94:36:86:fd:bd:89:cd:c9:29:
                    ba:91:2d:15:10:ad:f2:69:9d:a1:60:b8:57:af:09:
                    00:f6:9a:de:fb:98:c4:d5:45:91:64:2d:48:46:d0:
                    73:1c:cc:af:09:ca:06:25:e3:b0:b9:04:4d:6c:74:
                    1d:67:4f:9d:22:3d:ce:05:25:41:06:e1:a2:be:d2:
                    d6:14:b0:cb:37:8f:45:db:d8:ca:04:65:47:57:46:
                    e8:6d:93:01:64:bc:29:c3:dc:2e:2f:8d:23:fd:09:
                    3d:6f:5b:c1:09:47:32:20:54:01:bf:64:3b:bf:32:
                    bb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:68:A9:19:99:C1:73:90:59:3C:77:C0:85:4A:82:5E:8C:23:D9:9B
            X509v3 Authority Key Identifier:
                keyid:3C:B2:3E:6F:BC:1B:56:8F:D4:78:F8:22:18:A2:B5:A9:A9:0E:C8:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3CB23E6FBC1B568FD478F82218A2B5A9A90EC844.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9CFEAF2C91AB1C34993C311291CE50A3F9B8FF6FE4AEE3E9DCE4D43B4819702A/0/3137302e38342e3233342e302f32342d3234203d3e203237373536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:8c:9a:e7:09:d8:ae:8a:25:7c:6e:0b:f3:da:aa:42:39:
         d9:67:23:8e:93:dc:8e:93:87:da:30:40:4c:1b:9a:1f:df:22:
         bd:fb:10:b9:84:20:20:c5:5e:72:8c:29:c0:df:ef:6a:22:c2:
         f7:a2:6b:18:69:d9:ee:f8:9b:3a:70:80:a4:d4:c0:be:ab:6b:
         c5:ff:f7:92:c0:48:8c:32:b0:58:c6:65:56:72:93:1e:27:39:
         7e:42:ac:66:34:ba:61:e7:0c:25:27:e7:08:ef:30:36:cd:ca:
         33:64:54:c2:c7:99:a7:ef:43:30:8b:8f:93:cc:db:90:a7:93:
         6d:92:49:be:46:6a:9b:ae:25:d0:a1:dd:f3:12:27:81:19:6f:
         9a:33:a9:91:18:ca:8f:1b:67:57:e2:30:68:97:a6:53:2b:81:
         61:b9:72:7e:e4:c6:ed:89:e8:c0:88:bf:8e:30:41:0d:ad:5e:
         54:5a:81:4a:f3:49:18:5a:ba:48:9b:98:c7:43:14:d7:f9:4c:
         02:8f:cb:9b:ad:49:a5:02:ab:d5:d1:22:7a:7b:8a:48:4d:6d:
         3d:87:4f:7b:f4:13:8b:63:fc:90:32:ab:f0:73:9b:12:7d:5a:
         89:03:a6:2d:d3:c2:71:51:50:97:81:b4:da:36:21:77:b3:49:
         7a:0d:2f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:23 2024 by rpki-client on console-ams.rpki-client.org