Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa
File:                     3137302e38312e32342e302f32322d3234203d3e203130323939.roa (raw, json)
Hash identifier:          XqpwiktR9/gIYJTaVgxS2nixE6ZxKSL2+2d0/47WKXM=
Subject key identifier:   62:47:77:96:D5:37:05:82:DC:F6:5B:0F:FD:97:2D:7C:59:A9:54:E8
Certificate issuer:       /CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
Certificate serial:       7C874008291697F4EF30621521071B6F2D5C770E
Authority key identifier: 9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa
Signing time:             Tue 05 Mar 2024 18:01:05 +0000
ROA not before:           Tue 05 Mar 2024 17:56:05 +0000
ROA not after:            Tue 04 Mar 2025 18:01:05 +0000
asID:                     10299
IP address blocks:        170.81.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:87:40:08:29:16:97:f4:ef:30:62:15:21:07:1b:6f:2d:5c:77:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E552EDA3BF8A5B6CADC533E403537B6DC729938
        Validity
            Not Before: Mar  5 17:56:05 2024 GMT
            Not After : Mar  4 18:01:05 2025 GMT
        Subject: CN=62477796D5370582DCF65B0FFD972D7C59A954E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:f1:cd:48:b8:18:4c:6e:2c:12:7c:ec:d3:
                    01:60:e9:e4:69:22:e4:d1:c3:23:ca:60:ea:12:c5:
                    0d:d1:09:01:3d:ee:1a:8f:19:73:18:2b:4b:7a:c1:
                    fb:d5:55:80:65:f7:35:43:cf:07:95:bc:cb:f6:b8:
                    b6:aa:73:94:82:1c:3d:52:00:99:69:96:94:23:54:
                    65:88:aa:c6:b9:13:4b:9a:a8:bf:a9:ce:f5:b1:67:
                    bb:72:7e:95:92:82:cf:b7:c8:1e:3c:9d:14:13:b8:
                    12:82:27:d2:f3:66:a8:b2:19:34:0b:89:72:0f:c9:
                    ef:67:8e:98:b9:ca:71:a2:e6:08:dc:45:71:b3:09:
                    4c:94:39:f6:00:c2:d2:6c:35:18:59:39:8f:4f:eb:
                    a3:84:ab:a0:dd:0e:71:35:0d:d1:d6:ea:16:23:8a:
                    d1:ca:05:47:49:df:f5:da:81:10:70:11:fa:48:b5:
                    67:88:2d:9e:ed:49:e1:7f:bd:cf:c3:7d:24:a1:44:
                    60:fa:c0:b0:18:df:07:18:ba:76:f0:8e:9c:5a:bc:
                    a1:2a:1d:3a:2f:11:1c:96:95:b8:13:0a:54:77:5a:
                    83:f6:38:f2:1a:3c:9d:6f:9f:0d:ff:76:0b:a1:f6:
                    68:5d:83:ad:da:f5:f2:a7:10:16:31:e9:1e:e3:20:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:47:77:96:D5:37:05:82:DC:F6:5B:0F:FD:97:2D:7C:59:A9:54:E8
            X509v3 Authority Key Identifier:
                keyid:9E:55:2E:DA:3B:F8:A5:B6:CA:DC:53:3E:40:35:37:B6:DC:72:99:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E552EDA3BF8A5B6CADC533E403537B6DC729938.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEC379831D2AE7A5D56AF6A90D9AF915FB6377EE9FF9B2A25FE909700E8A3C7F/0/3137302e38312e32342e302f32322d3234203d3e203130323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c2:ce:18:32:de:8a:b0:f7:16:d2:2b:fd:9e:81:a4:21:46:f3:
         8f:07:e8:42:3e:fd:65:76:12:27:c5:68:95:bd:bd:ea:3f:07:
         30:7d:43:94:6e:65:b0:cb:b3:7e:88:ab:5d:bb:84:ea:24:f4:
         34:08:26:85:fd:22:f0:88:b0:d9:18:0e:d1:03:2c:29:1e:ff:
         cf:08:d8:f6:4a:8d:02:9c:86:65:27:c0:3c:58:f0:41:4f:98:
         33:cc:ce:54:5a:a0:74:e2:51:35:42:31:8f:3b:a1:e0:9f:a5:
         21:db:94:30:17:ef:c6:5a:5a:44:89:02:a9:b7:5e:18:75:62:
         14:e6:a3:53:3d:89:67:0f:9c:b2:73:43:7e:2c:ae:c2:88:eb:
         18:3f:9f:af:0f:02:a1:eb:f6:ca:16:1a:5e:5d:2a:64:04:14:
         a8:6f:31:1f:9e:e2:41:32:32:d3:08:55:13:b5:e9:3f:ab:9b:
         7d:b5:73:45:d3:02:04:36:fd:74:74:f6:e5:f0:96:db:05:5e:
         a5:57:fa:b6:d7:b3:a4:93:8b:53:1c:fd:25:68:5b:29:ed:2f:
         07:44:9d:b3:46:07:d1:49:ba:e9:e6:4e:d7:c2:bb:d0:2e:aa:
         34:bd:14:35:49:2b:26:b6:7a:c8:19:5d:2e:ef:2a:93:50:3f:
         3c:59:32:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:24 2024 by rpki-client on console-ams.rpki-client.org