Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa
File:                     3137302e3234352e34382e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          nqrpwtW9QW+JSelbwtn8mN9e0rE7BpllOVSeQ5eBosE=
Subject key identifier:   6A:D3:C8:0C:A1:FE:7F:5B:6A:D6:44:2D:95:F8:C6:CE:D7:20:16:2D
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       75BB9B417AAF85ED096503B7896B0D78DA43ABDC
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:47 +0000
ROA not before:           Tue 05 Mar 2024 17:47:47 +0000
ROA not after:            Tue 04 Mar 2025 17:52:47 +0000
asID:                     52510
IP address blocks:        170.245.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:bb:9b:41:7a:af:85:ed:09:65:03:b7:89:6b:0d:78:da:43:ab:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:47 2024 GMT
            Not After : Mar  4 17:52:47 2025 GMT
        Subject: CN=6AD3C80CA1FE7F5B6AD6442D95F8C6CED720162D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fc:48:89:62:15:a3:b9:68:7e:77:b9:9f:83:
                    1e:1f:87:c1:7f:c5:31:ad:83:13:ba:6d:2f:ed:1b:
                    33:6c:65:44:9b:ed:77:ac:ab:4e:c8:5d:70:8c:97:
                    9f:45:c8:f5:0a:6f:42:49:4b:fc:f6:76:72:70:42:
                    c4:2e:99:6b:91:14:01:fc:0c:ff:47:5f:3d:48:5e:
                    83:6e:16:68:1d:55:a4:6c:23:78:e4:fb:6d:c3:af:
                    8a:0a:7b:da:1e:93:33:c1:e4:9f:6b:80:fe:8c:b4:
                    3c:12:1d:a2:9d:dc:f1:c9:64:87:a9:14:f5:26:fb:
                    78:e5:93:b3:81:22:f7:19:e6:2c:ca:c8:e0:ba:b7:
                    f2:af:70:09:15:47:89:8f:99:61:47:bc:e4:7d:84:
                    fc:9d:01:1f:7e:0e:97:17:2a:00:28:f4:82:fd:c2:
                    58:54:69:f1:a0:f3:f0:23:86:24:7d:db:ab:48:de:
                    72:ae:53:83:8e:0f:9a:43:66:e4:ee:21:1f:37:77:
                    d3:8f:02:47:9f:2c:c6:f5:0c:62:ff:9c:d5:5c:d8:
                    da:55:76:b2:e2:27:d0:6a:ac:ae:7d:8d:15:ff:f1:
                    99:7e:3f:d3:f4:ea:f7:43:9e:6c:7f:cf:2f:b9:62:
                    50:b4:5d:0b:7a:88:d3:ca:69:4b:fa:f9:86:f7:61:
                    95:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:D3:C8:0C:A1:FE:7F:5B:6A:D6:44:2D:95:F8:C6:CE:D7:20:16:2D
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e34382e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:73:16:03:fb:2d:aa:9e:3d:f4:b7:0e:53:8f:ca:5c:08:82:
         98:b9:6e:de:1d:ea:80:11:fb:0c:f6:99:04:62:7b:67:0b:f1:
         8a:e2:19:99:83:2a:64:6d:29:4d:61:ba:6d:11:9b:2a:1b:ed:
         5e:65:28:27:bc:83:83:93:53:93:42:e9:4a:b8:75:74:b2:07:
         06:20:b8:29:32:bd:67:3e:b3:50:53:8a:b8:c9:7b:ee:66:90:
         f0:35:26:a8:d6:61:24:55:97:3e:5c:f2:ed:73:06:0c:d7:b5:
         31:cb:d0:a3:4b:cf:92:da:4d:c9:9c:8f:73:81:5e:b8:43:43:
         17:7a:a6:b3:d9:78:b2:07:b5:ef:ec:bc:75:07:cb:fa:97:86:
         ec:77:b9:45:6d:0c:41:fd:7d:0c:35:9f:80:e6:1a:70:47:a2:
         86:2c:31:33:97:8b:98:ab:9a:5d:4e:08:dc:24:5f:1b:e9:b4:
         82:a3:bc:88:63:ae:6e:37:b5:77:00:ac:9e:2c:02:64:95:1d:
         e6:ca:cd:e3:2b:35:3e:43:9e:81:18:e4:39:98:e9:0e:66:fb:
         51:f3:65:44:02:12:7b:2e:19:a0:68:92:06:48:53:af:51:bd:
         d9:d9:d9:3b:f8:24:04:e2:b1:94:56:34:b2:9a:8f:2a:8d:2c:
         a9:70:00:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:31 2024 by rpki-client on console-ams.rpki-client.org