Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234352e302f32342d3234203d3e20323634383538.roa
File:                     3137302e38322e3234352e302f32342d3234203d3e20323634383538.roa (raw, json)
Hash identifier:          3zzl1bUjlUX34dYypfCwGkwo0GRRrDbgdRn1015XAqw=
Subject key identifier:   2E:11:80:49:43:12:63:2A:8E:A8:AC:93:76:D5:F9:6E:63:81:01:C7
Certificate issuer:       /CN=D425886F4B35D1F04B8DE6DC8171270697146F76
Certificate serial:       7B1EF055BC1C1DBA844F2AB8CC802F4CBEC4EC1B
Authority key identifier: D4:25:88:6F:4B:35:D1:F0:4B:8D:E6:DC:81:71:27:06:97:14:6F:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D425886F4B35D1F04B8DE6DC8171270697146F76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234352e302f32342d3234203d3e20323634383538.roa
Signing time:             Tue 05 Mar 2024 18:23:15 +0000
ROA not before:           Tue 05 Mar 2024 18:18:15 +0000
ROA not after:            Tue 04 Mar 2025 18:23:15 +0000
asID:                     264858
IP address blocks:        170.82.245.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/D425886F4B35D1F04B8DE6DC8171270697146F76.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/D425886F4B35D1F04B8DE6DC8171270697146F76.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D425886F4B35D1F04B8DE6DC8171270697146F76.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1e:f0:55:bc:1c:1d:ba:84:4f:2a:b8:cc:80:2f:4c:be:c4:ec:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D425886F4B35D1F04B8DE6DC8171270697146F76
        Validity
            Not Before: Mar  5 18:18:15 2024 GMT
            Not After : Mar  4 18:23:15 2025 GMT
        Subject: CN=2E1180494312632A8EA8AC9376D5F96E638101C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:28:f5:02:f9:61:68:4c:af:6a:f5:87:90:
                    a0:02:91:3d:75:8b:a1:32:34:f0:18:6c:8a:37:23:
                    d8:29:df:5c:24:62:07:8f:60:40:64:f2:46:8d:94:
                    fc:4e:6a:8b:61:64:e5:ae:85:79:12:26:eb:95:76:
                    33:65:6b:7c:f3:c7:64:ff:77:44:fd:8a:04:40:9d:
                    ef:7b:dd:42:4d:31:e1:e6:3f:99:6c:72:5c:b3:fe:
                    5c:b8:34:48:e3:e4:39:c3:bd:c2:02:d3:13:08:d9:
                    95:44:ab:1d:b0:0b:46:e6:c2:68:56:62:da:01:41:
                    c0:c6:61:b6:23:d9:ad:12:2a:b1:e1:df:7e:ea:8f:
                    e8:52:65:65:12:19:8a:1b:dd:52:b9:af:c2:5f:f6:
                    6f:39:f6:8b:50:21:10:21:30:2d:93:25:74:8e:89:
                    9f:58:56:ad:3d:a2:e1:e1:4d:fc:de:ee:6a:b2:a9:
                    e5:59:14:00:1b:8f:af:c4:88:69:64:87:65:34:e1:
                    7d:b7:29:21:a6:8d:54:8e:fd:e6:96:de:cb:9b:ca:
                    d0:9f:62:91:e8:74:cd:b3:27:6c:80:35:57:c9:de:
                    5f:71:a9:ce:d2:64:3e:39:7e:2e:0e:6a:ed:37:9f:
                    f4:ac:dd:8e:ed:e1:04:4a:5e:c6:58:93:43:0c:8f:
                    0d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:11:80:49:43:12:63:2A:8E:A8:AC:93:76:D5:F9:6E:63:81:01:C7
            X509v3 Authority Key Identifier:
                keyid:D4:25:88:6F:4B:35:D1:F0:4B:8D:E6:DC:81:71:27:06:97:14:6F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/D425886F4B35D1F04B8DE6DC8171270697146F76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D425886F4B35D1F04B8DE6DC8171270697146F76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B34F2D90FAFF8E2559CDB2C9870E8758A0F5D9DCCE26DF5F56F541D3D26FC102/0/3137302e38322e3234352e302f32342d3234203d3e20323634383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:21:a1:5d:3f:90:83:b4:b5:75:bc:56:d8:bd:74:ce:de:bb:
         80:b0:3b:78:54:24:dc:fe:cd:2e:96:11:9b:ff:f4:d4:36:53:
         8c:ba:8a:f5:83:8f:44:62:92:4e:31:eb:41:82:67:56:1d:ce:
         1d:de:dc:e5:9d:bd:e5:d0:91:cd:dd:31:a9:49:5a:d4:bf:62:
         da:ad:51:5f:74:c0:af:07:28:e6:f1:36:5e:63:fe:fe:e0:56:
         19:92:50:21:e0:80:d6:68:89:8d:06:72:c7:8b:e9:86:55:bd:
         48:68:39:38:8f:fb:18:73:01:fc:58:07:07:bc:84:8d:11:77:
         49:4b:94:91:a9:0e:74:fe:4b:a5:fa:e3:26:83:b7:67:5e:1c:
         0d:ec:88:5f:62:b8:28:12:62:60:32:c2:13:6a:0c:a9:ee:52:
         d3:0e:0c:94:f4:ad:6c:c3:26:8d:b2:10:c4:2a:3f:8e:05:05:
         d3:74:fe:93:1d:88:c4:41:0e:87:51:f1:ed:cb:4e:4d:ce:a4:
         a8:98:15:0a:67:96:3b:b2:72:d2:70:94:23:3d:0d:3c:8a:93:
         73:c5:15:dc:c7:c9:98:d5:45:e1:9a:41:5a:1e:64:7d:68:c6:
         1e:7a:39:2d:9e:75:85:a6:f3:57:7f:ef:74:58:40:8c:7f:93:
         e3:e4:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 20:17:09 2024 by rpki-client on console-ams.rpki-client.org