Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235332e302f32342d3234203d3e20323634383432.roa
File:                     3137302e38312e3235332e302f32342d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          17vImYiJCxlRTxCTNn2f+C9slCLK7VpW7uuMXgTwew0=
Subject key identifier:   7C:8D:42:71:85:1F:F2:5E:0D:F2:A5:D1:7B:D9:BE:A4:6A:E8:02:72
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       2B14429A9F57BE4384BF6E20BD1BC3FB0A75AAE8
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235332e302f32342d3234203d3e20323634383432.roa
Signing time:             Tue 18 Jun 2024 15:00:00 +0000
ROA not before:           Tue 18 Jun 2024 14:55:00 +0000
ROA not after:            Tue 17 Jun 2025 15:00:00 +0000
asID:                     264842
IP address blocks:        170.81.253.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:42:9a:9f:57:be:43:84:bf:6e:20:bd:1b:c3:fb:0a:75:aa:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Jun 18 14:55:00 2024 GMT
            Not After : Jun 17 15:00:00 2025 GMT
        Subject: CN=7C8D4271851FF25E0DF2A5D17BD9BEA46AE80272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5d:3f:98:27:7a:7e:a6:2e:2b:91:1e:c5:3a:
                    56:b5:4d:01:a9:46:cd:ab:d7:f7:53:a2:cf:f9:1e:
                    71:6f:ba:f3:32:22:39:43:89:12:ca:86:01:3d:16:
                    99:14:49:4b:d8:51:a8:66:54:8e:82:24:9c:f8:f1:
                    b7:f8:88:5d:57:36:a8:00:15:dc:fd:b3:72:f6:5b:
                    80:b8:5d:f6:01:d0:af:44:4f:1f:7d:be:62:73:4b:
                    95:be:8d:a0:9e:c8:49:6f:99:7c:57:8d:6a:e7:2e:
                    e3:73:ef:0f:28:44:39:a6:d7:d2:df:79:57:64:38:
                    04:d1:2d:21:00:fc:d4:66:cd:c6:83:ee:80:98:b8:
                    17:8b:4a:f8:0e:70:88:97:f4:dd:94:dc:e5:ac:25:
                    be:62:a6:b4:02:90:96:ef:14:ff:d0:ec:1e:de:43:
                    e8:45:c9:a6:3f:cf:70:af:96:1d:09:da:67:c3:0a:
                    c6:c1:88:db:b6:f3:4e:b1:55:d4:ab:84:8a:b1:22:
                    22:1f:09:d2:c6:c7:64:ef:d9:b5:a9:5f:2e:4f:f9:
                    85:1b:7c:46:19:eb:3c:db:11:32:27:02:ac:65:29:
                    5c:5f:48:e4:3d:ff:45:a7:af:3f:74:2c:c6:61:c5:
                    f4:36:4b:5c:ba:81:a0:ee:5c:65:c8:88:36:69:48:
                    1e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:8D:42:71:85:1F:F2:5E:0D:F2:A5:D1:7B:D9:BE:A4:6A:E8:02:72
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235332e302f32342d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:dd:e7:53:d0:b1:f7:9d:d9:62:38:13:c4:4a:d3:8a:ad:06:
         c9:f2:85:91:3a:2b:9c:65:e7:81:b9:65:3e:4c:5b:57:f9:da:
         bd:74:70:46:a3:2d:db:7d:4c:a1:a6:f9:33:8b:05:54:28:8f:
         94:95:55:03:f1:80:09:69:87:ec:5b:1c:45:cd:57:b6:d7:b8:
         96:cc:b3:32:0e:63:9c:c3:4c:ac:97:6c:00:b7:2a:2e:9d:cc:
         7e:1e:15:a2:a6:81:7d:72:1c:72:a6:b1:9f:37:63:d6:91:c0:
         17:70:c2:eb:7d:47:80:92:fe:29:90:57:fb:0c:7e:57:b4:51:
         c6:9c:51:30:4b:d8:9e:c1:43:3f:a9:6b:48:58:7f:dd:36:ac:
         aa:c7:80:4b:3f:38:7a:9c:18:7d:dc:1b:f2:da:4c:19:e6:4c:
         2b:79:c8:09:e8:66:76:8c:af:54:a9:cf:54:d6:26:ef:d9:60:
         16:7e:1d:86:fa:ef:c4:0c:9d:02:b3:b4:59:2f:f2:8b:fc:b7:
         c3:86:c0:9c:f2:12:34:14:33:a8:b0:85:7d:22:3a:6f:5f:14:
         45:26:73:aa:ee:cd:e7:e2:6a:65:f8:55:65:7f:47:07:ad:41:
         be:4c:b9:0f:34:76:19:df:0f:0d:ef:fc:d4:65:9a:08:78:b5:
         08:c3:56:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:16 2024 by rpki-client on console-ams.rpki-client.org