Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131302e302f32342d3234203d3e203238343038.roa
File:                     3137302e3234342e3131302e302f32342d3234203d3e203238343038.roa (raw, json)
Hash identifier:          rSoHmu6s1PcdtaaovchEDr/j45f7NdcCcQYstUwk2wM=
Subject key identifier:   DF:13:75:BD:33:6B:83:08:FE:90:2D:2B:AC:6C:7B:89:32:41:DA:FC
Certificate issuer:       /CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
Certificate serial:       16C23F97C141676348113BFAE49B292556D43860
Authority key identifier: 01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131302e302f32342d3234203d3e203238343038.roa
Signing time:             Tue 05 Mar 2024 18:03:35 +0000
ROA not before:           Tue 05 Mar 2024 17:58:35 +0000
ROA not after:            Tue 04 Mar 2025 18:03:35 +0000
asID:                     28408
IP address blocks:        170.244.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c2:3f:97:c1:41:67:63:48:11:3b:fa:e4:9b:29:25:56:d4:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ED585C7FF695D515C213CCD92F98A26AF818D7
        Validity
            Not Before: Mar  5 17:58:35 2024 GMT
            Not After : Mar  4 18:03:35 2025 GMT
        Subject: CN=DF1375BD336B8308FE902D2BAC6C7B893241DAFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:a2:56:08:fb:b6:95:f4:f7:ab:b4:e4:23:
                    ab:f2:9b:03:7b:42:05:ac:47:fa:32:f6:ac:e8:70:
                    80:09:a2:aa:aa:8c:75:15:d0:fc:7e:70:43:02:fc:
                    57:45:fe:07:f7:02:21:d1:0e:5b:a2:f0:2b:b8:32:
                    ba:6a:ff:86:04:ac:b5:ae:74:bc:42:ad:79:74:61:
                    f6:65:d8:a2:62:b7:aa:4f:d8:e8:92:84:e1:6d:db:
                    c3:4d:f4:19:ca:0a:78:b8:7d:0c:dd:0e:c2:9c:1e:
                    5e:26:8a:ed:98:59:26:ca:12:fc:29:e8:b0:7b:fc:
                    24:71:2c:dc:34:d3:5a:44:85:d8:2f:b6:34:fa:96:
                    b8:ae:10:68:51:a0:a5:3e:c0:c4:c5:01:ef:1d:cb:
                    97:4c:24:ab:91:18:66:30:dc:47:2f:cb:f7:e1:b2:
                    e2:84:0c:14:bd:60:4d:b4:b2:bb:09:59:e8:30:c1:
                    2e:22:ab:e8:99:15:52:cc:60:04:54:73:53:1f:99:
                    c3:c6:6d:6b:5d:d1:6e:c2:0e:ec:20:75:aa:5b:a7:
                    ab:6b:43:c0:69:c5:81:fd:be:de:08:84:67:7d:4f:
                    37:8a:8b:d8:90:7f:e0:5c:54:b2:d4:ad:11:df:95:
                    bf:1d:35:3b:b8:be:3c:52:8e:c9:0f:8c:03:82:f0:
                    29:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:75:BD:33:6B:83:08:FE:90:2D:2B:AC:6C:7B:89:32:41:DA:FC
            X509v3 Authority Key Identifier:
                keyid:01:ED:58:5C:7F:F6:95:D5:15:C2:13:CC:D9:2F:98:A2:6A:F8:18:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01ED585C7FF695D515C213CCD92F98A26AF818D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD96A10A651E01C032F7F25AA20AF311BFE36F04776606125D370A6277276F29/0/3137302e3234342e3131302e302f32342d3234203d3e203238343038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:4c:56:43:12:50:0c:1d:18:29:4a:8e:e8:72:2f:d4:93:5e:
         c2:07:bb:3b:40:e3:fb:c4:2b:69:13:7f:dd:60:87:3c:e2:07:
         57:7c:ab:83:c2:01:17:10:3d:88:01:77:cc:84:60:b3:7f:0b:
         56:52:0a:de:ae:d4:06:4f:ac:43:91:33:a7:15:d0:a3:88:9b:
         98:22:2b:ea:97:f0:4d:3f:f0:7c:c1:0d:cc:51:1c:62:ee:49:
         00:87:7a:9d:98:32:9d:1e:39:b7:a4:ca:77:fa:f9:a5:ed:86:
         23:36:a1:bd:44:f9:57:a7:b2:52:2f:ac:f7:71:55:63:fb:17:
         30:eb:ce:4a:8b:16:56:19:ef:82:b4:6c:39:85:cf:9e:3e:3a:
         cf:ce:f6:f1:40:be:8e:7a:90:8d:13:2f:66:eb:a0:71:a2:a6:
         c9:93:65:5f:a8:3e:4f:a1:a4:a2:15:fd:dd:bf:5d:30:2d:c4:
         a8:a3:9e:98:72:23:16:03:d7:c0:67:63:8e:c3:3a:59:c0:c6:
         df:c2:f9:fd:e0:29:ab:b5:f6:ca:1a:8c:2e:db:e9:b3:b3:ac:
         3f:bb:c5:32:57:86:d9:1f:e5:40:65:b0:12:91:04:8d:23:07:
         f0:09:f9:ba:4a:68:f2:24:dc:4b:a0:6e:15:8e:66:1b:8a:ac:
         ea:f9:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:01 2024 by rpki-client on console-ams.rpki-client.org