Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37392e302f32342d3234203d3e203131353632.roa
File:                     3137302e3234362e37392e302f32342d3234203d3e203131353632.roa (raw, json)
Hash identifier:          vcDXBcke2vK2a0g5grjU6jbom13lxFgZE5zJk36PND8=
Subject key identifier:   69:A9:71:38:BB:DE:CF:A8:5D:6C:4F:33:57:0B:D9:98:9C:14:66:1A
Certificate issuer:       /CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
Certificate serial:       671046F6A5AB318A8A3BAF6B7396DB2631614AC1
Authority key identifier: 8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37392e302f32342d3234203d3e203131353632.roa
Signing time:             Tue 05 Mar 2024 17:53:28 +0000
ROA not before:           Tue 05 Mar 2024 17:48:28 +0000
ROA not after:            Tue 04 Mar 2025 17:53:28 +0000
asID:                     11562
IP address blocks:        170.246.79.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:10:46:f6:a5:ab:31:8a:8a:3b:af:6b:73:96:db:26:31:61:4a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D6A7A61067CADD65929191F3556022BD1D2E09A
        Validity
            Not Before: Mar  5 17:48:28 2024 GMT
            Not After : Mar  4 17:53:28 2025 GMT
        Subject: CN=69A97138BBDECFA85D6C4F33570BD9989C14661A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:44:ac:5b:6b:ba:7b:8d:75:67:10:5f:7c:d3:
                    fb:d9:9d:ac:88:4c:69:0f:4a:e8:dd:c5:16:44:20:
                    d3:f6:06:47:d1:3f:59:25:d6:23:b2:82:59:86:f2:
                    01:2b:ac:b3:25:c4:a2:91:f0:04:28:5e:d5:99:03:
                    36:56:fe:43:dc:6c:5e:82:be:1c:d1:0a:b2:94:ad:
                    34:2f:93:b8:f0:ca:6f:9e:74:91:6b:b3:79:21:01:
                    e4:8a:fb:44:1a:18:7e:28:46:f7:14:c3:fc:1d:af:
                    f8:c4:74:b3:18:1f:e3:c3:4d:36:4a:24:75:9f:e0:
                    3a:87:9f:fe:46:32:4a:e2:aa:2e:4f:68:0d:ec:33:
                    db:81:9c:93:d4:34:dc:e3:4b:09:b2:ea:a9:8f:56:
                    f0:f9:78:6c:52:d3:82:53:7f:4a:8b:c6:00:21:98:
                    57:52:c5:21:53:d7:31:52:00:74:4b:10:dd:61:99:
                    04:c2:c6:36:e2:aa:6b:8c:2b:fd:de:54:b9:46:27:
                    50:aa:7f:5d:fb:78:38:32:6b:d5:f1:a4:ba:08:81:
                    58:27:d5:9d:8f:bd:35:a4:bc:64:a4:26:da:a6:3d:
                    c8:36:a2:bf:09:f0:07:f7:d4:bc:3f:91:49:70:67:
                    70:13:e0:f0:bf:32:f9:0f:b7:ba:88:7b:d6:a5:fc:
                    96:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A9:71:38:BB:DE:CF:A8:5D:6C:4F:33:57:0B:D9:98:9C:14:66:1A
            X509v3 Authority Key Identifier:
                keyid:8D:6A:7A:61:06:7C:AD:D6:59:29:19:1F:35:56:02:2B:D1:D2:E0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D6A7A61067CADD65929191F3556022BD1D2E09A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A213BEAC8C25B0ADD4BC241BB6A5DBC907383A458D13E127EE5137044BAB582A/0/3137302e3234362e37392e302f32342d3234203d3e203131353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:59:1f:aa:a8:18:09:f0:b2:eb:66:f6:db:a3:38:bc:bf:d0:
         58:4d:58:80:a7:96:8b:43:e1:a6:f7:12:4f:7b:37:76:d0:32:
         52:56:cd:4d:20:29:13:86:41:a8:71:0e:55:c9:b3:33:ba:49:
         70:c3:44:3a:99:9e:f2:70:5a:b0:ae:11:5e:7a:1b:c7:06:e8:
         2f:4a:81:47:81:e5:8c:35:29:b9:5b:5b:fe:bd:d9:5c:0c:43:
         b5:46:76:83:d3:ad:0e:48:29:7f:fc:27:1e:41:1b:dd:53:28:
         af:01:8d:5f:d2:be:e1:5a:26:7e:4e:00:9b:13:a9:4c:90:30:
         0a:f8:7f:3e:59:20:d3:5c:9b:5b:bf:95:5b:48:33:ff:7d:63:
         6b:19:a0:c0:54:bd:a4:13:e4:bc:71:02:56:63:a7:5f:d0:f9:
         e2:48:4a:f8:c7:18:a8:d3:55:d3:33:97:78:16:2f:12:12:2e:
         e5:d6:26:4d:c1:94:37:a4:0a:e2:1b:ef:4a:14:08:de:be:d5:
         2b:4c:a6:dc:37:03:99:13:68:d6:e4:5c:0a:ef:3b:8a:a4:8f:
         5e:e7:27:3f:3d:9f:77:5c:ce:c8:74:2f:33:38:6a:5c:ef:48:
         ff:e4:4c:e1:08:d0:31:c1:24:29:5e:b4:97:cc:4d:e1:54:3b:
         c8:2f:08:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:18 2024 by rpki-client on console-ams.rpki-client.org