Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32332d3233203d3e203532353130.roa
File:                     3137302e3233332e3139342e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          vtKKDGmvXRiF+9UEGWP61S7XYnfqcp3lCrKytd49v4k=
Subject key identifier:   5B:70:3E:28:A9:F0:A6:AF:72:D0:37:6C:90:32:E4:91:0F:F2:F7:7D
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       27304C06DFCB0AB0F8D543FB17A889ECBF6D9C96
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:46 +0000
ROA not before:           Tue 05 Mar 2024 17:47:46 +0000
ROA not after:            Tue 04 Mar 2025 17:52:46 +0000
asID:                     52510
IP address blocks:        170.233.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:30:4c:06:df:cb:0a:b0:f8:d5:43:fb:17:a8:89:ec:bf:6d:9c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:46 2024 GMT
            Not After : Mar  4 17:52:46 2025 GMT
        Subject: CN=5B703E28A9F0A6AF72D0376C9032E4910FF2F77D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:da:9b:94:98:95:97:e7:9a:ae:f5:ad:11:
                    ff:68:d1:39:a4:01:80:04:78:28:b7:ec:f2:f9:5d:
                    62:c9:23:08:58:dc:cb:33:db:28:07:43:37:00:57:
                    e7:2e:4c:81:a1:d2:e8:cb:03:d5:5d:c8:b9:dd:30:
                    f6:f7:7f:3c:6b:09:78:08:bf:27:09:ef:b6:70:a9:
                    ed:63:b8:f2:e6:de:a5:b4:d1:f9:ad:f6:4a:d2:97:
                    19:2a:a1:30:44:ae:cf:2c:fa:ca:0e:f5:7d:bb:bf:
                    6f:05:7e:9e:90:d4:c9:4e:b0:a9:b3:38:58:b6:ed:
                    37:46:10:dc:4e:84:f5:e6:09:41:38:df:47:c3:69:
                    56:0b:2c:cc:bb:02:f6:2c:f8:8b:b8:76:a3:58:30:
                    b7:f4:0a:86:8b:13:cb:27:6e:38:49:09:a9:b2:87:
                    36:69:bf:5b:a3:a2:22:1a:a4:d5:f0:ae:de:38:55:
                    ac:a7:11:0d:5a:27:f2:19:68:64:87:ec:7f:b5:ec:
                    20:cf:33:c1:84:70:60:74:b1:0c:89:88:ec:37:03:
                    10:d2:b6:30:e2:bc:1f:fd:ea:a6:76:4f:65:95:01:
                    ae:3f:5c:8b:5b:11:68:3c:ac:78:d5:33:b2:35:a4:
                    53:55:64:4a:66:81:6d:2e:d1:4e:80:3b:27:5a:8b:
                    cc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:3E:28:A9:F0:A6:AF:72:D0:37:6C:90:32:E4:91:0F:F2:F7:7D
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3233332e3139342e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:ae:49:71:d1:94:38:42:94:98:15:b2:ef:2e:a0:e5:2d:14:
         af:bd:27:19:c1:d0:8d:8e:79:42:7f:ba:3b:aa:dc:ed:94:16:
         30:6c:cc:c8:df:d0:b5:d0:82:e1:cd:e0:31:3f:2a:d6:a5:e1:
         46:fa:f5:f3:05:4a:72:48:40:a9:9f:00:14:c5:79:82:3a:7d:
         8c:67:38:cf:c9:24:87:7c:2a:91:5b:26:cc:69:95:37:c5:4f:
         4b:df:b3:ed:32:f3:8c:a8:f1:7d:60:6e:08:b9:cd:21:ae:3e:
         9d:c0:21:13:9a:de:89:fb:ac:84:92:ba:76:55:c9:97:3d:71:
         a0:38:10:d7:41:ea:4d:3c:52:3a:50:c6:e2:18:3a:12:23:79:
         5e:ff:20:b7:76:64:a2:d7:07:30:f6:90:7e:df:8d:82:cf:92:
         ab:55:3c:55:ad:d7:86:61:6f:99:c8:2b:55:c9:69:ec:ef:10:
         f7:7e:a7:3d:e5:18:be:a1:f5:74:f4:0a:eb:17:20:3d:10:68:
         c8:43:7a:25:37:52:54:61:66:18:a3:0b:66:39:95:33:b5:86:
         6c:6f:53:80:d1:04:83:3e:e1:9d:69:4e:bb:1a:df:6d:dc:e9:
         35:06:71:19:5f:f1:d0:36:69:b5:a8:2b:1e:50:36:e0:fa:81:
         d3:0e:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org