Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa
File:                     3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa (raw, json)
Hash identifier:          a19W8KJcJTwv3ZgEKdZBiTyBqcV2HJ9quVG7t4XHnok=
Subject key identifier:   9E:D5:14:26:54:43:7E:7A:37:48:31:0C:E9:A7:DD:40:C6:5F:FF:F2
Certificate issuer:       /CN=2AE59E62324C453AEB84910F81FFB3247C715B49
Certificate serial:       6DAD9DA3F99AE5A92415BAB95D5A0963CC0B92F4
Authority key identifier: 2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa
Signing time:             Tue 18 Jun 2024 15:00:00 +0000
ROA not before:           Tue 18 Jun 2024 14:55:00 +0000
ROA not after:            Tue 17 Jun 2025 15:00:00 +0000
asID:                     264842
IP address blocks:        170.81.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 20 Sep 2024 22:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ad:9d:a3:f9:9a:e5:a9:24:15:ba:b9:5d:5a:09:63:cc:0b:92:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AE59E62324C453AEB84910F81FFB3247C715B49
        Validity
            Not Before: Jun 18 14:55:00 2024 GMT
            Not After : Jun 17 15:00:00 2025 GMT
        Subject: CN=9ED5142654437E7A3748310CE9A7DD40C65FFFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5c:da:77:a4:70:1d:ff:1e:30:91:8f:a6:be:
                    66:6a:64:4b:5d:04:78:e9:5a:71:17:7a:25:30:17:
                    df:6e:d1:f7:e2:e9:45:70:e5:e9:08:17:10:7e:e8:
                    dc:18:fc:66:53:3d:8a:44:2f:db:e3:0d:df:ce:89:
                    e8:b7:3f:fa:5f:7f:8a:86:4f:1e:20:7d:d1:fc:4f:
                    81:7f:e0:57:6a:09:bb:e9:9e:b0:0c:ca:29:6e:91:
                    95:fd:c3:d1:6d:51:a4:fc:85:45:87:2a:ed:e8:18:
                    24:ea:6e:68:50:53:e3:7e:1b:b4:64:fa:5c:d5:2a:
                    c1:3d:15:94:30:87:d7:a4:08:8b:90:8e:e9:3b:27:
                    19:e1:17:83:7b:28:13:71:05:f1:db:b7:f9:e7:ab:
                    cd:56:7d:d5:41:ba:70:5d:bd:48:68:d9:a2:12:89:
                    65:69:71:3a:27:a4:53:ef:70:30:9f:fb:c5:a5:31:
                    c7:76:80:f4:ff:07:5b:a3:e5:4d:76:0a:23:1e:b7:
                    e7:50:6a:63:d0:92:64:7b:ce:dc:45:22:19:ff:b6:
                    fc:4a:e5:68:55:c4:a9:ad:d3:c9:12:e8:3a:4c:82:
                    7e:14:9d:13:2d:e9:e1:94:49:67:a6:8e:41:40:88:
                    b3:ae:9e:b7:01:7a:0b:6f:36:f6:65:c2:d2:6f:36:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:14:26:54:43:7E:7A:37:48:31:0C:E9:A7:DD:40:C6:5F:FF:F2
            X509v3 Authority Key Identifier:
                keyid:2A:E5:9E:62:32:4C:45:3A:EB:84:91:0F:81:FF:B3:24:7C:71:5B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/2AE59E62324C453AEB84910F81FFB3247C715B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AE59E62324C453AEB84910F81FFB3247C715B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1EF7D8DB15D54379148B50DB90A4F61D2DD531FE334841DA30778834700DA9D/0/3137302e38312e3235352e302f32342d3234203d3e20323634383432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:4d:d5:39:e4:71:0c:54:eb:86:31:bb:f4:b1:c6:c3:38:6a:
         3c:19:a0:0a:fc:5e:a5:b6:41:ed:7a:0d:de:f6:3f:27:18:6d:
         4d:07:80:70:e4:39:9d:8c:83:40:27:b3:d7:c4:d2:bf:9c:7f:
         e9:df:0e:73:5c:b5:ec:d7:31:15:d3:9b:14:9b:bb:87:76:8d:
         82:65:b8:bf:de:d8:9c:7d:a3:3f:8e:3b:e6:43:83:90:1b:4a:
         b4:6d:40:6e:82:a3:b4:29:ea:f8:5f:e1:80:61:ba:fe:d5:ab:
         f6:19:c8:9f:c7:9e:32:2d:d6:79:c4:61:18:da:91:f2:46:23:
         e0:27:13:6b:e5:dc:73:09:ae:ea:3f:c3:a7:8b:01:a4:68:8c:
         30:bb:28:11:11:75:9d:be:86:cc:de:b9:f3:67:18:69:3f:79:
         71:b7:0e:bf:cf:80:4e:83:1c:fc:23:b9:6d:65:5e:de:d1:a7:
         2f:5a:f4:bf:c2:0a:62:2f:42:2d:19:ad:59:cd:81:49:03:db:
         32:18:20:af:8d:9f:32:13:98:33:85:c5:21:59:09:73:aa:2e:
         ba:5c:56:e5:f7:21:5a:14:10:15:a4:24:c2:e9:10:eb:cc:71:
         75:e8:b6:23:8e:84:bf:c3:ba:7f:6a:e5:3f:bd:98:79:ba:30:
         27:3f:4a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 17 20:08:43 2024 by rpki-client on console-fra.rpki-client.org