Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135392e302f32342d3234203d3e20323637383332.roa
File:                     3137302e3234352e3135392e302f32342d3234203d3e20323637383332.roa (raw, json)
Hash identifier:          6RAKtdlsQS6OFeRC9iGpMavhOhaO9VdiIJX3NOvA6LA=
Subject key identifier:   73:91:66:50:82:C1:14:22:1D:0E:04:37:A6:CD:DA:A8:89:F4:5E:43
Certificate issuer:       /CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
Certificate serial:       567312E02715A41B73523C6A9E9FCF4BA1F70B47
Authority key identifier: ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135392e302f32342d3234203d3e20323637383332.roa
Signing time:             Tue 05 Mar 2024 18:19:39 +0000
ROA not before:           Tue 05 Mar 2024 18:14:39 +0000
ROA not after:            Tue 04 Mar 2025 18:19:39 +0000
asID:                     267832
IP address blocks:        170.245.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:73:12:e0:27:15:a4:1b:73:52:3c:6a:9e:9f:cf:4b:a1:f7:0b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ED35A136442571FBFB23487E7FCF579A7CAE6BBB
        Validity
            Not Before: Mar  5 18:14:39 2024 GMT
            Not After : Mar  4 18:19:39 2025 GMT
        Subject: CN=7391665082C114221D0E0437A6CDDAA889F45E43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:70:84:46:e7:d8:bc:30:bc:f5:91:04:9e:
                    7f:c7:79:5c:b8:5c:c0:14:3a:d5:a2:61:6f:35:41:
                    2f:16:a8:23:c3:99:2f:4b:c9:58:4e:76:50:85:b1:
                    c2:4c:18:5d:b1:98:bf:29:db:55:bd:b6:ec:c5:95:
                    cb:ec:af:15:00:10:11:3d:a8:7c:e8:05:5e:43:88:
                    b3:6e:ba:a4:32:48:ae:31:3c:a7:22:82:5f:de:46:
                    ce:fa:e8:32:1b:7a:d7:c8:ea:d8:51:27:e4:6d:6b:
                    6f:75:24:46:fe:d2:e7:12:a0:92:ff:2c:34:e2:53:
                    3b:77:f1:70:54:39:97:01:20:f9:bf:ed:6e:81:b2:
                    c9:74:98:b3:11:c5:ea:1c:ff:03:9b:2e:0d:39:a1:
                    21:93:37:2f:98:8d:16:f5:84:f2:5e:c1:48:81:d7:
                    fd:00:6f:0d:27:64:ef:b6:c5:70:15:db:14:74:08:
                    00:97:b8:5f:ea:87:21:f7:1d:6d:17:70:97:ee:a5:
                    a1:8b:14:69:89:20:b8:78:44:c0:22:6c:f3:37:15:
                    86:6a:55:fb:e8:f0:3e:e1:2c:c1:87:4d:82:18:29:
                    52:4c:4c:e5:60:6a:03:13:9d:b0:ed:9b:66:5d:bc:
                    8f:c5:0b:13:c1:9f:b1:0b:13:69:d5:b7:29:b2:3a:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:91:66:50:82:C1:14:22:1D:0E:04:37:A6:CD:DA:A8:89:F4:5E:43
            X509v3 Authority Key Identifier:
                keyid:ED:35:A1:36:44:25:71:FB:FB:23:48:7E:7F:CF:57:9A:7C:AE:6B:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ED35A136442571FBFB23487E7FCF579A7CAE6BBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C50A99167BE1CC39370AB4CB9E3CE7C535B7C6ABC718E1047629C96A486C3FF5/0/3137302e3234352e3135392e302f32342d3234203d3e20323637383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:74:b9:27:9c:0b:2c:d4:b4:5c:5f:a1:e1:53:55:11:9b:92:
         5e:b3:9b:98:7e:cd:90:06:4c:83:c8:5b:d9:48:44:98:70:0e:
         a6:21:68:4d:24:50:7e:31:e2:68:d2:d2:51:dc:0a:b3:96:c6:
         c1:54:57:53:23:7b:b4:a5:b9:68:84:fa:66:6c:43:e2:ca:73:
         2e:f3:1c:6b:65:24:a8:5d:93:15:88:49:a5:3c:49:09:b6:ca:
         d5:34:b1:cb:64:77:6f:ea:31:80:3f:e8:ef:0b:6e:40:db:01:
         30:93:16:8e:e8:6a:c6:2e:b1:f3:b4:3a:e0:5c:e1:bf:f5:d3:
         d2:2d:64:5c:ff:11:9e:b2:2a:7a:60:23:8d:a7:d2:ad:67:4d:
         06:93:23:71:67:73:5c:de:26:6a:42:d8:e8:9f:58:e3:64:d9:
         46:c1:e9:ae:a2:fb:83:e2:f0:10:c1:e2:8b:c2:00:02:88:e4:
         fa:18:06:d0:c5:5c:be:dc:bc:0b:14:21:d1:18:1e:74:e8:13:
         50:17:40:f3:2b:b1:12:4c:de:53:f9:89:4c:53:93:6d:e6:2c:
         ad:e4:f7:38:99:65:46:15:37:fd:94:1c:a8:7b:59:f6:c3:a7:
         c8:6a:01:da:dc:9a:c9:56:c6:1c:ba:e5:ab:cf:89:2c:09:f7:
         ee:4c:40:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 14:10:16 2024 by rpki-client on console-ams.rpki-client.org