Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32342d3234203d3e203532353130.roa
File:                     3137302e3234352e35302e302f32342d3234203d3e203532353130.roa (raw, json)
Hash identifier:          VVivwiM/E5shFO0C9RtVFUxt7cVe4dDBvTUBzRpaUEg=
Subject key identifier:   04:C2:7B:37:E8:60:C0:04:A0:79:51:D5:78:77:C4:E0:EB:B3:54:C5
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       01164E80815D0540E0F013DF8BF2BCCA5C721CB3
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32342d3234203d3e203532353130.roa
Signing time:             Tue 05 Mar 2024 17:52:45 +0000
ROA not before:           Tue 05 Mar 2024 17:47:45 +0000
ROA not after:            Tue 04 Mar 2025 17:52:45 +0000
asID:                     52510
IP address blocks:        170.245.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:4e:80:81:5d:05:40:e0:f0:13:df:8b:f2:bc:ca:5c:72:1c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Mar  5 17:47:45 2024 GMT
            Not After : Mar  4 17:52:45 2025 GMT
        Subject: CN=04C27B37E860C004A07951D57877C4E0EBB354C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:22:17:b5:88:f9:68:db:be:85:c9:c6:df:
                    2c:49:ea:ac:fb:76:0e:0c:89:cf:d5:4f:bd:2e:32:
                    2d:da:71:da:01:e4:dd:d2:04:9c:63:1c:44:90:d3:
                    af:09:5b:02:20:15:b6:41:b1:f1:26:bf:39:01:0b:
                    77:14:ab:ae:3c:d9:1f:f0:96:56:30:97:5e:d0:52:
                    33:81:df:e4:b2:3a:50:b3:36:a2:99:a9:bd:4d:b6:
                    cb:90:e2:77:63:6b:6e:d6:8e:6f:00:54:66:a2:a3:
                    fb:54:c0:31:c4:2e:f5:35:0c:e7:0d:da:c0:d2:36:
                    35:dc:54:d2:48:10:f7:9d:04:23:66:48:f0:74:2a:
                    98:e8:7f:8a:f0:94:c0:9d:e4:c4:5c:3f:2c:07:ae:
                    cc:42:14:8a:b5:94:d8:fd:67:a5:1f:01:47:2d:46:
                    ce:02:3f:5c:a2:3a:91:fe:ed:eb:19:8d:c1:14:e0:
                    19:2c:73:ce:ef:b3:0a:67:c1:cf:c8:fd:b5:e6:e4:
                    f3:07:3f:ca:9b:e3:33:c6:e1:f2:cf:e5:2f:29:21:
                    e6:0c:5c:92:bd:79:9a:4e:87:92:ee:7c:84:3f:06:
                    55:78:b7:40:ed:80:2e:f0:90:8e:37:64:13:a2:99:
                    0f:e4:da:9e:35:8f:6e:5a:84:69:7a:cc:d6:5d:77:
                    d8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:7B:37:E8:60:C0:04:A0:79:51:D5:78:77:C4:E0:EB:B3:54:C5
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/3137302e3234352e35302e302f32342d3234203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:74:0e:fe:42:5a:a2:5a:71:d1:77:2f:b8:c1:ac:d4:0f:44:
         3c:38:3b:b9:76:91:1d:c5:64:49:34:23:46:c6:a2:77:31:fa:
         6e:ac:8a:25:4b:ea:e4:73:9c:2a:84:da:c7:ce:0d:19:47:68:
         b0:5e:e5:3c:af:13:e7:45:5e:24:7d:0e:3c:6e:38:75:37:b9:
         b7:c4:b6:1b:1d:41:e7:6d:17:98:e2:6f:44:5c:ae:93:f9:a5:
         55:18:90:98:cb:71:28:82:b6:9b:4a:c6:32:60:d9:61:e4:36:
         37:4d:e3:9f:59:e4:54:54:72:90:41:6f:b5:33:c3:a1:5a:3b:
         78:d3:61:f7:e0:cc:6c:b2:cd:00:59:9e:b7:41:40:c4:f0:e1:
         c1:df:e4:e7:02:88:ec:24:ac:e1:f3:e0:ed:63:f2:22:21:1b:
         0e:8e:81:e6:f9:11:2c:a5:c7:38:ed:d4:d3:86:b4:ac:30:77:
         41:88:08:30:eb:8f:6f:93:7e:fd:7d:47:4e:5f:73:bf:73:c7:
         36:9f:9e:b1:0d:3b:a4:c1:dc:5d:93:38:11:ff:ec:ed:fb:44:
         ad:7a:5f:4c:17:51:84:08:76:bb:20:fb:9f:fc:b5:99:e3:9d:
         74:93:32:c5:be:20:10:65:69:3b:09:f7:c2:ce:1d:3a:27:01:
         ff:74:93:f6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUARZOgIFdBUDg8BPfi/K8ylxyHLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjYzNkQ0Q0JFREJFN0EwRjRENDNEQzE2MjFERTNEMTkz
NjY0NUYzRDAeFw0yNDAzMDUxNzQ3NDVaFw0yNTAzMDQxNzUyNDVaMDMxMTAvBgNV
BAMTKDA0QzI3QjM3RTg2MEMwMDRBMDc5NTFENTc4NzdDNEUwRUJCMzU0QzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVyIXtYj5aNu+hcnG3yxJ6qz7
dg4Mic/VT70uMi3acdoB5N3SBJxjHESQ068JWwIgFbZBsfEmvzkBC3cUq6482R/w
llYwl17QUjOB3+SyOlCzNqKZqb1NtsuQ4ndja27Wjm8AVGaio/tUwDHELvU1DOcN
2sDSNjXcVNJIEPedBCNmSPB0Kpjof4rwlMCd5MRcPywHrsxCFIq1lNj9Z6UfAUct
Rs4CP1yiOpH+7esZjcEU4Bksc87vswpnwc/I/bXm5PMHP8qb4zPG4fLP5S8pIeYM
XJK9eZpOh5LufIQ/BlV4t0DtgC7wkI43ZBOimQ/k2p41j25ahGl6zNZdd9gDAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUBMJ7N+hgwASgeVHVeHfE4OuzVMUwHwYDVR0j
BBgwFoAUJjbUy+2+eg9NQ9wWId49GTZkXz0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERTAyNUFERTYzQTkxNzc4OThEN0UxRUYxMTAzMDg5RTgy
RDE4Q0UwNTQxMDUwRjRDODQ5NTE2QTYwRjc3NDIzLzAvMjYzNkQ0Q0JFREJFN0Ew
RjRENDNEQzE2MjFERTNEMTkzNjY0NUYzRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yNjM2RDRDQkVEQkU3QTBGNEQ0
M0RDMTYyMURFM0QxOTM2NjQ1RjNELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREUwMjVBREU2M0E5MTc3ODk4RDdFMUVGMTEwMzA4OUU4MkQxOENFMDU0
MTA1MEY0Qzg0OTUxNkE2MEY3NzQyMy8wLzMxMzczMDJlMzIzNDM1MmUzNTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjM1MzEzMC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr1MjAN
BgkqhkiG9w0BAQsFAAOCAQEAInQO/kJaolpx0XcvuMGs1A9EPDg7uXaRHcVkSTQj
RsaidzH6bqyKJUvq5HOcKoTax84NGUdosF7lPK8T50VeJH0OPG44dTe5t8S2Gx1B
520XmOJvRFyuk/mlVRiQmMtxKIK2m0rGMmDZYeQ2N03jn1nkVFRykEFvtTPDoVo7
eNNh9+DMbLLNAFmet0FAxPDhwd/k5wKI7CSs4fPg7WPyIiEbDo6B5vkRLKXHOO3U
04a0rDB3QYgIMOuPb5N+/X1HTl9zv3PHNp+esQ07pMHcXZM4Ef/s7ftErXpfTBdR
hAh2uyD7n/y1meOddJMyxb4gEGVpOwn3ws4dOicB/3ST9g==
-----END CERTIFICATE-----
Generated at Tue Nov 19 22:25:44 2024 by rpki-client on console-fra.rpki-client.org