Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32332d3233203d3e203532353130.roa
File:                     3137302e3233332e3139322e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          DhBfVLN8eqg5giv1AXZsMOU55f11G/wuqKtu/l236cQ=
Subject key identifier:   74:4F:8A:FF:94:5F:7E:51:9F:BC:2B:A5:A1:55:59:A0:03:DE:0C:5D
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       38B7991E9E5F54076BDBC5D138DB8ACFE8BA5B7F
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:40 +0000
ROA not before:           Tue 05 Mar 2024 17:47:40 +0000
ROA not after:            Tue 04 Mar 2025 17:52:40 +0000
asID:                     52510
IP address blocks:        170.233.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b7:99:1e:9e:5f:54:07:6b:db:c5:d1:38:db:8a:cf:e8:ba:5b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:40 2024 GMT
            Not After : Mar  4 17:52:40 2025 GMT
        Subject: CN=744F8AFF945F7E519FBC2BA5A15559A003DE0C5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c8:54:15:5f:2b:68:a9:ad:e0:88:e7:33:5b:
                    5d:70:d2:05:33:fb:4a:d0:9a:f6:86:e5:51:96:ee:
                    fa:6e:1f:f9:45:d3:c1:23:ac:6f:6b:ec:8f:90:8a:
                    bc:61:eb:37:33:a4:33:c0:38:ce:3e:ba:58:6a:1d:
                    55:39:41:f7:2b:ae:1a:00:98:d2:a5:2d:6e:70:2a:
                    91:f6:fb:75:ed:96:97:fd:6f:48:60:c4:38:97:05:
                    79:a8:bc:40:01:13:9d:b3:89:35:30:c7:9f:75:f4:
                    2b:87:ce:2e:6b:79:ea:9b:04:ff:b8:5f:b0:ca:58:
                    4d:61:2c:7a:c8:fb:a8:f1:72:6e:01:90:70:26:3a:
                    f4:af:8b:60:0e:08:10:c8:5d:6b:e9:cb:79:3a:93:
                    18:e6:50:d1:bb:d3:d5:f8:84:8f:ff:83:cc:e0:35:
                    89:93:1e:a0:12:1d:bc:d3:c2:95:9b:b6:f0:92:be:
                    f8:a4:2b:16:e7:17:6e:d2:d0:65:62:f5:95:2d:21:
                    5f:a9:73:eb:3c:e9:e9:a5:57:51:29:9c:1c:5d:68:
                    53:d4:1c:58:2e:5b:77:83:0c:d2:71:ff:41:80:c2:
                    10:60:22:b0:e9:24:7c:8d:bf:b2:1f:d0:99:4f:34:
                    1f:1b:10:84:d6:df:37:00:20:40:02:02:3a:0a:b1:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4F:8A:FF:94:5F:7E:51:9F:BC:2B:A5:A1:55:59:A0:03:DE:0C:5D
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139322e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:c2:ac:16:dc:c8:61:4e:f8:a2:a2:69:ba:e4:8f:05:c8:77:
         58:7a:7a:0f:ef:2a:65:9c:f9:a9:a7:89:b5:22:1e:63:a2:97:
         5a:a9:e8:83:eb:a2:77:ee:80:24:58:8e:c8:b4:55:d9:3c:ce:
         7b:ef:a6:1d:17:1a:0a:69:e1:a2:b7:f2:1e:e2:5e:a4:0a:d0:
         5c:c6:db:4d:90:25:83:e4:d5:73:d5:33:c0:50:a1:f5:71:08:
         b4:c7:7e:75:cc:be:07:49:6a:23:91:01:b4:f7:a5:bd:21:f5:
         47:d8:93:66:2f:5a:1b:e5:78:10:c7:ef:85:4f:7d:aa:2e:89:
         52:b8:e6:84:85:25:74:24:1d:e9:a0:91:5d:11:73:88:8a:b7:
         b8:58:48:71:92:dc:8e:93:c6:85:73:e7:de:88:a8:40:53:71:
         dd:a0:d6:97:f3:8b:8e:ff:ce:13:30:f5:81:5c:f0:44:c2:fb:
         8d:ac:f3:03:2a:6b:3c:a6:6d:68:fb:ee:b0:f8:a2:ce:f9:37:
         d0:05:57:7f:35:b6:87:05:cc:bc:4f:1d:bf:36:3c:41:0f:7f:
         cf:70:d5:ab:0a:ec:d5:8b:1b:0d:c0:91:b9:1e:4a:d1:92:15:
         a3:7d:67:43:e0:77:44:fd:60:ef:c6:bb:ba:76:67:23:02:8f:
         0e:bc:b6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org