Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
File:                     3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa (raw, json)
Hash identifier:          bOteweprye2SiQ4hbNSLLRtggC0LL7poLsTBXm13hNc=
Subject key identifier:   2A:7A:0A:93:11:3A:62:44:60:53:98:FC:4A:93:E9:29:EC:04:4F:BB
Certificate issuer:       /CN=642B1C614F26920467439813FA812417800268E7
Certificate serial:       6F2DB6A74F919C3BBE9449CE6C9C7BE4311FBF07
Authority key identifier: 64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa
Signing time:             Tue 05 Mar 2024 18:22:20 +0000
ROA not before:           Tue 05 Mar 2024 18:17:20 +0000
ROA not after:            Tue 04 Mar 2025 18:22:20 +0000
asID:                     269803
IP address blocks:        170.81.240.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 30 Jun 2024 03:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:2d:b6:a7:4f:91:9c:3b:be:94:49:ce:6c:9c:7b:e4:31:1f:bf:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=642B1C614F26920467439813FA812417800268E7
        Validity
            Not Before: Mar  5 18:17:20 2024 GMT
            Not After : Mar  4 18:22:20 2025 GMT
        Subject: CN=2A7A0A93113A6244605398FC4A93E929EC044FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8c:a0:fc:a8:18:f6:37:b2:c9:68:86:4d:24:
                    a7:e5:5e:64:2b:d0:d8:08:c1:5c:2f:ed:ac:5d:3f:
                    10:19:15:6b:9c:f0:6d:53:0b:03:24:25:c6:2b:9c:
                    f2:4f:ea:b5:89:be:52:cc:15:21:26:d0:e1:45:8e:
                    21:28:15:07:b1:db:c6:2a:f7:17:62:73:18:78:5d:
                    16:08:fd:76:21:99:8f:d7:78:99:58:d9:27:0f:92:
                    a3:e2:00:ec:01:7a:4c:2e:ed:b3:bb:13:d7:60:1f:
                    f9:46:2c:1c:ca:6a:dc:a8:1f:c7:89:d1:b4:50:61:
                    90:62:23:33:ee:60:26:f4:72:8e:dd:60:80:77:6c:
                    d6:df:9d:f1:f3:bb:6c:44:d9:82:30:15:0b:2b:df:
                    39:63:c8:bf:c8:3d:01:cc:3c:1d:1f:18:8e:5b:d9:
                    34:94:7c:66:70:19:9f:3c:b6:30:19:c8:a7:3f:92:
                    d4:64:69:c5:1d:41:79:20:a6:12:8a:d9:97:88:ef:
                    fe:88:55:90:8c:b1:28:7e:b3:c4:81:2d:f5:53:f6:
                    b0:f7:11:c5:90:82:33:51:ca:75:1d:46:79:df:7b:
                    53:c6:62:72:d2:a1:dd:76:45:22:04:c5:4e:89:5c:
                    46:03:5c:53:f1:c4:7a:1e:d2:f3:60:27:88:07:ad:
                    fa:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7A:0A:93:11:3A:62:44:60:53:98:FC:4A:93:E9:29:EC:04:4F:BB
            X509v3 Authority Key Identifier:
                keyid:64:2B:1C:61:4F:26:92:04:67:43:98:13:FA:81:24:17:80:02:68:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/642B1C614F26920467439813FA812417800268E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/642B1C614F26920467439813FA812417800268E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DC65F22305A777AA290F1595C20E570C92705F1CB3B37574CA6D18C5B25642DB/0/3137302e38312e3234302e302f32322d3234203d3e20323639383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:08:33:44:1e:df:ee:5f:c1:cf:64:6b:21:fe:b3:a3:76:75:
         b7:a5:e4:a6:0e:96:ac:e2:0d:e4:10:be:a7:3a:2c:57:71:4b:
         30:f9:51:76:c8:7c:e3:d3:a0:c7:78:33:55:d7:7f:e4:10:89:
         60:dd:f4:26:13:6e:47:cd:0a:62:27:0e:10:0f:28:fa:f1:50:
         57:ec:a0:35:c7:13:1a:b7:17:4a:88:3c:9b:2b:d1:b6:a7:d5:
         7d:c5:f0:15:95:b4:93:e9:ee:a6:51:fc:98:70:0f:86:f5:76:
         aa:3c:ee:65:a3:98:c7:b4:59:07:f2:a4:8e:a6:7d:dd:b4:4c:
         a0:8d:77:6f:63:63:c0:44:dd:2c:34:12:4b:d0:98:28:67:9c:
         92:77:83:6b:8d:95:1d:ca:d2:9c:ba:63:81:03:58:99:20:6a:
         f3:bb:c7:a7:45:bf:6b:be:ef:48:2b:bd:79:4b:b1:1b:95:44:
         ee:16:9c:75:f4:e0:b6:b5:d6:c1:4b:c9:bf:d0:5c:b5:26:e3:
         65:bc:0f:a9:9c:67:f4:ed:cf:ad:80:b9:c4:a6:96:14:5a:3a:
         ca:c5:5d:cf:e1:8e:cd:64:c4:19:34:96:e2:70:ea:11:85:99:
         46:6d:2f:e0:ef:50:8c:bd:a3:d3:8c:7f:d6:49:78:39:ee:0e:
         ea:a0:8c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 04:09:51 2024 by rpki-client on console-ams.rpki-client.org