Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
File:                     3137302e38302e32372e302f32342d3234203d3e203237393831.roa (raw, json)
Hash identifier:          JDGDh9v+yHrNIxh1xTeeiJRwkJJXIjinUPCui6xPkGA=
Subject key identifier:   71:60:7C:BE:F2:64:74:97:61:CA:73:B3:AA:1F:A6:56:DF:40:48:96
Certificate issuer:       /CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
Certificate serial:       7C0A7B5C171B673356BE705C7F7B56130524F821
Authority key identifier: 9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa
Signing time:             Tue 05 Mar 2024 17:41:09 +0000
ROA not before:           Tue 05 Mar 2024 17:36:09 +0000
ROA not after:            Tue 04 Mar 2025 17:41:09 +0000
asID:                     27981
IP address blocks:        170.80.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0a:7b:5c:17:1b:67:33:56:be:70:5c:7f:7b:56:13:05:24:f8:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E7F2EB76A05A952625CB92EA40D238CA348F718
        Validity
            Not Before: Mar  5 17:36:09 2024 GMT
            Not After : Mar  4 17:41:09 2025 GMT
        Subject: CN=71607CBEF264749761CA73B3AA1FA656DF404896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:e8:35:c1:25:64:90:be:09:a5:22:c5:b8:
                    a2:f1:8b:5e:68:fc:cf:c8:c2:92:4d:31:bc:c7:d6:
                    44:aa:f2:a9:ce:58:ba:5c:c0:42:45:2a:77:bb:c3:
                    74:ee:b8:e8:b1:fa:d5:02:4a:b3:f0:7f:cb:22:de:
                    cc:f0:c4:67:7b:54:43:64:05:1a:1c:9a:7f:d2:67:
                    26:b1:99:93:a8:9b:37:0d:e0:ad:ce:25:46:e1:fd:
                    cb:de:3d:e4:0c:26:e3:91:4d:49:e2:c3:43:59:7b:
                    13:79:38:47:63:e7:2d:61:ce:fb:2b:ad:e4:2c:4b:
                    07:d9:f1:8a:2f:4f:c5:c9:09:20:97:66:a4:70:29:
                    1b:4a:49:f5:ec:43:d9:b8:04:04:81:09:32:87:35:
                    f6:c0:b8:80:b7:ec:cd:e1:80:51:8a:44:14:6d:a9:
                    3b:9f:33:6a:ff:0b:29:5e:ac:7d:be:df:96:00:fc:
                    75:94:21:f8:c4:85:5e:58:9b:53:47:ee:db:77:bd:
                    5d:f3:20:8a:27:2c:8b:62:a6:ae:41:1f:a9:86:a1:
                    07:25:c5:33:16:ea:62:69:b4:c3:89:87:0a:de:22:
                    33:13:44:af:a8:bb:6f:65:94:34:5e:e9:64:48:5e:
                    15:52:ec:c2:17:58:6c:95:7b:fa:de:36:0c:d6:f5:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:60:7C:BE:F2:64:74:97:61:CA:73:B3:AA:1F:A6:56:DF:40:48:96
            X509v3 Authority Key Identifier:
                keyid:9E:7F:2E:B7:6A:05:A9:52:62:5C:B9:2E:A4:0D:23:8C:A3:48:F7:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E7F2EB76A05A952625CB92EA40D238CA348F718.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB7B8B4B4E6E8C43722E958F037046B89E9E27F0DF2AA08EB3DFD9DCCECF1247/0/3137302e38302e32372e302f32342d3234203d3e203237393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:71:8c:bc:27:af:7f:50:8d:f0:3b:5c:0a:d9:d2:21:9b:bc:
         12:37:1b:70:29:db:68:e2:4b:6e:05:87:5b:98:e2:ea:3b:b7:
         56:f5:c4:1e:db:16:05:a2:d8:7c:21:6c:1f:eb:22:94:1a:67:
         d1:8b:46:ab:c2:42:92:7e:69:93:fc:83:60:35:4c:c9:d7:a9:
         ef:94:e3:64:e5:bd:0b:0b:2e:9c:3f:c8:8c:af:49:f8:25:cb:
         15:2e:49:c9:5b:d1:43:bf:7c:79:10:23:a8:73:79:42:e7:f6:
         ed:d0:41:16:bc:a5:52:96:bc:48:6b:9a:af:5d:ae:d4:fa:eb:
         71:f5:7a:5f:4d:08:fe:0d:65:b8:a3:66:72:fe:ed:6c:11:07:
         78:db:44:39:85:a6:2d:35:7e:1e:86:a2:65:8f:2f:ce:5f:df:
         5f:60:19:f1:be:fb:2d:84:6f:d3:27:ce:57:46:1d:9e:d8:c0:
         83:78:68:e8:fa:14:de:ed:b9:ad:ec:bf:19:ab:e2:67:fe:7b:
         75:a3:40:15:c7:fc:4c:8f:37:5d:19:f1:49:2e:d3:3d:cd:fa:
         64:64:73:f1:a6:92:0f:d4:22:0f:dc:de:1b:f4:4e:7e:e8:44:
         41:50:f7:90:b0:9d:c2:8f:78:8f:59:19:3a:00:6d:c2:71:4f:
         c4:90:2a:cb
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUfAp7XBcbZzNWvnBcf3tWEwUk+CEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUU3RjJFQjc2QTA1QTk1MjYyNUNCOTJFQTQwRDIzOENB
MzQ4RjcxODAeFw0yNDAzMDUxNzM2MDlaFw0yNTAzMDQxNzQxMDlaMDMxMTAvBgNV
BAMTKDcxNjA3Q0JFRjI2NDc0OTc2MUNBNzNCM0FBMUZBNjU2REY0MDQ4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMug1wSVkkL4JpSLFuKLxi15o
/M/IwpJNMbzH1kSq8qnOWLpcwEJFKne7w3TuuOix+tUCSrPwf8si3szwxGd7VENk
BRocmn/SZyaxmZOomzcN4K3OJUbh/cvePeQMJuORTUniw0NZexN5OEdj5y1hzvsr
reQsSwfZ8YovT8XJCSCXZqRwKRtKSfXsQ9m4BASBCTKHNfbAuIC37M3hgFGKRBRt
qTufM2r/CylerH2+35YA/HWUIfjEhV5Ym1NH7tt3vV3zIIonLItipq5BH6mGoQcl
xTMW6mJptMOJhwreIjMTRK+ou29llDRe6WRIXhVS7MIXWGyVe/reNgzW9aP5AgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUcWB8vvJkdJdhynOzqh+mVt9ASJYwHwYDVR0j
BBgwFoAUnn8ut2oFqVJiXLkupA0jjKNI9xgwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EQjdCOEI0QjRFNkU4QzQzNzIyRTk1OEYwMzcwNDZCODlF
OUUyN0YwREYyQUEwOEVCM0RGRDlEQ0NFQ0YxMjQ3LzAvOUU3RjJFQjc2QTA1QTk1
MjYyNUNCOTJFQTQwRDIzOENBMzQ4RjcxOC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85RTdGMkVCNzZBMDVBOTUyNjI1
Q0I5MkVBNDBEMjM4Q0EzNDhGNzE4LmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREI3QjhCNEI0RTZFOEM0MzcyMkU5NThGMDM3MDQ2Qjg5RTlFMjdGMERG
MkFBMDhFQjNERkQ5RENDRUNGMTI0Ny8wLzMxMzczMDJlMzgzMDJlMzIzNzJlMzAy
ZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczOTM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACqUBswDQYJ
KoZIhvcNAQELBQADggEBAIRxjLwnr39QjfA7XArZ0iGbvBI3G3Ap22jiS24Fh1uY
4uo7t1b1xB7bFgWi2HwhbB/rIpQaZ9GLRqvCQpJ+aZP8g2A1TMnXqe+U42TlvQsL
Lpw/yIyvSfglyxUuSclb0UO/fHkQI6hzeULn9u3QQRa8pVKWvEhrmq9drtT663H1
el9NCP4NZbijZnL+7WwRB3jbRDmFpi01fh6GomWPL85f319gGfG++y2Eb9MnzldG
HZ7YwIN4aOj6FN7tua3svxmr4mf+e3WjQBXH/EyPN10Z8Uku0z3N+mRkc/Gmkg/U
Ig/c3hv0Tn7oREFQ95CwncKPeI9ZGToAbcJxT8SQKss=
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org