Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
File:                     3137302e3234352e35302e302f32332d3233203d3e203532353130.roa (raw, json)
Hash identifier:          jtqJdU8eeFmBivWIQSAfsc3V4EVOmzkYdnPpr+kbp94=
Subject key identifier:   1F:65:F9:BD:6F:27:45:03:77:DA:41:7A:97:F7:47:13:DF:C8:EF:FF
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       7869EAE713D0A551EA5CEEAB052B35D0E3BC5A2F
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:41 +0000
ROA not before:           Tue 05 Mar 2024 17:47:41 +0000
ROA not after:            Tue 04 Mar 2025 17:52:41 +0000
asID:                     52510
IP address blocks:        170.245.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:69:ea:e7:13:d0:a5:51:ea:5c:ee:ab:05:2b:35:d0:e3:bc:5a:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:41 2024 GMT
            Not After : Mar  4 17:52:41 2025 GMT
        Subject: CN=1F65F9BD6F27450377DA417A97F74713DFC8EFFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0a:72:ca:30:43:41:30:3d:86:c8:df:d5:8f:
                    37:7e:7f:1f:90:ea:bb:12:89:35:73:e0:89:22:ac:
                    1b:cf:ab:04:98:af:70:86:1b:5a:17:cc:dd:fc:6e:
                    1f:de:f6:5f:54:7a:fb:9a:e5:6d:74:e1:e9:a7:37:
                    78:ee:35:13:a8:f8:5c:a6:21:ed:0b:c1:7a:e6:cc:
                    2f:44:74:97:cb:ae:88:2e:49:88:9b:11:e2:a3:be:
                    67:da:e8:78:f3:8c:a0:ef:d3:18:76:96:20:88:65:
                    95:d8:53:77:6e:12:94:6d:7f:0e:c0:7a:26:67:0a:
                    0b:d9:f0:c7:ec:13:2d:5c:42:b4:81:48:4b:b4:bb:
                    5b:60:2d:67:69:22:cd:da:d3:5f:5c:63:d4:34:14:
                    97:93:0b:2f:bc:87:2d:80:96:52:82:8d:b7:34:44:
                    92:fe:be:bf:ec:a1:9d:94:d5:f4:52:bb:eb:03:c7:
                    8a:83:bf:72:3f:58:12:9a:00:4a:82:88:c2:83:ab:
                    c3:bc:e7:41:da:5a:18:6a:86:fb:c3:3f:5d:50:4c:
                    2f:30:7b:ea:9e:60:d1:6a:46:10:3c:03:7f:f8:82:
                    fd:e5:9c:9a:b5:44:c1:75:a0:4c:7c:ef:10:dd:db:
                    24:5d:c7:6d:92:97:c3:27:21:8a:36:09:b8:7c:92:
                    b7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:65:F9:BD:6F:27:45:03:77:DA:41:7A:97:F7:47:13:DF:C8:EF:FF
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32332d3233203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         85:f4:60:71:5b:16:33:57:cc:37:02:8b:b7:cf:e7:ed:cd:fe:
         ef:3e:49:49:90:31:d8:02:7a:61:b4:e9:6f:a3:a1:6b:42:fd:
         7d:cc:05:40:40:85:44:34:68:58:5a:a3:09:a2:1b:3f:e5:cb:
         95:28:eb:ca:49:6d:e0:a9:33:f9:ad:e4:f8:8b:3b:cc:f7:07:
         90:97:71:b9:b0:36:62:c4:8d:97:ad:7b:77:b5:9c:44:51:e1:
         19:72:ef:c9:4e:65:3f:05:d2:20:e7:31:9a:c8:65:d1:09:f2:
         49:cb:aa:54:ef:41:6b:81:07:8c:8e:45:93:ba:5a:6c:a9:4a:
         20:7d:6d:1b:ef:fe:82:81:0a:17:4b:d8:12:12:09:9f:f1:b4:
         6e:a8:40:ca:3b:fa:cf:57:3e:83:4b:da:dd:16:b6:e2:09:be:
         78:8d:15:83:ce:7b:31:28:92:57:76:ba:93:fc:9e:8b:52:b0:
         cc:25:03:9f:3e:6e:c8:1f:55:e0:61:df:e3:e2:fe:b1:4f:d5:
         98:b0:ff:89:d0:13:b4:2e:5e:83:98:62:82:12:13:12:c1:e5:
         2e:d0:c7:b7:16:12:7e:ce:2f:83:c3:5b:43:37:13:9b:f4:7e:
         54:04:88:9d:13:1c:93:36:e9:36:28:8e:cb:7f:5d:84:fc:dc:
         f8:47:19:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:31 2024 by rpki-client on console-ams.rpki-client.org