Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa
File:                     3137302e3234362e37372e302f32342d3234203d3e203131353632.roa (raw, json)
Hash identifier:          rcM0bN/S/yl2lQKUeSxMD2eb45NllMvVtCHSAbYoYC0=
Subject key identifier:   E0:8B:79:E8:86:F2:52:B9:24:9F:65:14:FC:5B:6F:84:CB:10:4F:C5
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       5729DC2E6B78737E898A2E639506A4876A41466C
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:28 +0000
ROA not before:           Tue 05 Mar 2024 17:48:28 +0000
ROA not after:            Tue 04 Mar 2025 17:53:28 +0000
asID:                     11562
IP address blocks:        170.246.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:dc:2e:6b:78:73:7e:89:8a:2e:63:95:06:a4:87:6a:41:46:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:28 2024 GMT
            Not After : Mar  4 17:53:28 2025 GMT
        Subject: CN=E08B79E886F252B9249F6514FC5B6F84CB104FC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:14:40:ad:32:b4:0f:d4:5e:f4:5e:f1:6a:
                    73:c5:aa:6e:e8:e4:50:8a:3f:2a:2a:af:fa:91:39:
                    0e:c9:c5:ce:8b:de:01:a5:f1:ad:28:3c:d3:1f:3d:
                    c5:d3:f9:35:c5:ff:4c:82:ff:58:04:bd:7e:96:c3:
                    b6:e9:79:06:fa:9c:55:a1:38:d9:b0:f2:e3:24:cb:
                    ef:19:9c:f4:74:e5:fd:55:37:27:6d:7c:6d:96:88:
                    05:2c:cb:a0:7a:45:ec:b6:26:02:c7:ea:47:e1:18:
                    58:7f:f9:f1:f5:39:ed:c9:98:89:78:82:63:a4:63:
                    6b:66:32:bf:51:f5:af:9a:19:93:5c:0c:0d:26:ab:
                    9d:f3:80:58:70:cb:78:7a:00:59:0e:dc:f4:44:a0:
                    5a:f5:55:fd:5d:4e:8a:89:70:99:c4:a1:0f:72:61:
                    cd:ba:c3:34:02:a9:30:0f:b4:12:56:07:c2:18:2a:
                    54:c7:98:65:3e:51:93:1c:6e:f2:70:12:78:26:83:
                    69:3c:c2:25:f3:6b:23:64:20:98:c5:63:0f:39:94:
                    9f:cb:9c:ff:67:ea:fe:80:dc:1a:eb:40:22:06:f1:
                    c4:f9:6f:d6:ee:45:67:71:d7:09:c7:e4:21:3a:90:
                    98:d0:d0:fe:71:b3:d6:4f:c2:7b:59:6e:8f:ac:85:
                    65:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8B:79:E8:86:F2:52:B9:24:9F:65:14:FC:5B:6F:84:CB:10:4F:C5
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37372e302f32342d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:0b:d5:d8:8d:af:6c:60:10:e2:cf:83:f4:53:2d:dd:eb:3c:
         50:ed:81:bd:9e:20:e3:db:48:c0:87:92:aa:73:05:20:89:8c:
         d2:0e:0d:cc:27:02:29:5f:7c:b2:c1:2c:32:8e:c3:4e:73:59:
         23:41:d0:98:c5:38:eb:d1:4e:6a:e4:2a:6b:55:e3:f2:98:35:
         a3:36:4f:ba:72:35:e6:5d:df:0e:22:fd:54:3f:97:6e:86:fe:
         70:bd:3f:08:68:08:10:31:46:18:96:1c:e4:5c:9e:36:7f:c0:
         e1:9b:29:f0:b7:7b:32:27:c9:bc:0a:0e:bb:d8:d4:57:cb:c6:
         5d:2b:ee:1a:8b:25:3c:d4:d4:d8:db:59:a2:4a:17:dc:be:d0:
         11:ee:17:c3:3c:79:4a:39:0a:17:7b:8f:5a:fb:fa:67:9d:54:
         a4:7d:5c:e9:5c:4a:81:3c:94:89:89:e7:3a:c2:46:e8:99:fa:
         fc:82:f0:54:d6:fb:f1:71:64:6a:20:16:61:b4:93:29:91:c5:
         02:3b:fc:9b:c5:0b:38:18:74:e3:29:c4:92:84:e7:39:af:1a:
         5c:64:4a:85:4e:1b:6c:78:6f:18:23:e1:4b:aa:c1:38:a4:67:
         1e:9c:6d:b4:14:e9:84:11:b1:32:ef:91:af:b6:fc:e4:55:3a:
         2e:c2:28:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:09 2024 by rpki-client on console-fra.rpki-client.org