Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323637363939.roa
File:                     3137302e3235342e32392e302f32342d3234203d3e20323637363939.roa (raw, json)
Hash identifier:          jTRk8eJLKkLoF/+sNfw86vRm8WYO99gnCRDT4AWlYTw=
Subject key identifier:   B9:B6:39:03:73:99:F5:3A:71:DE:0F:19:11:07:44:BC:8B:82:BD:A7
Certificate issuer:       /CN=DF4F03C5770C7BA39912813367B5E868005CCD99
Certificate serial:       1CBA850DC86A045612CD9F7E76726D763F25E73F
Authority key identifier: DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323637363939.roa
Signing time:             Tue 05 Mar 2024 18:05:57 +0000
ROA not before:           Tue 05 Mar 2024 18:00:57 +0000
ROA not after:            Tue 04 Mar 2025 18:05:57 +0000
asID:                     267699
IP address blocks:        170.254.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:ba:85:0d:c8:6a:04:56:12:cd:9f:7e:76:72:6d:76:3f:25:e7:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF4F03C5770C7BA39912813367B5E868005CCD99
        Validity
            Not Before: Mar  5 18:00:57 2024 GMT
            Not After : Mar  4 18:05:57 2025 GMT
        Subject: CN=B9B639037399F53A71DE0F19110744BC8B82BDA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e2:31:f5:a6:34:a2:5f:43:1d:05:56:74:b2:
                    d4:84:cc:33:70:c3:d8:3c:2e:d1:0d:95:b9:6a:b7:
                    55:cb:0b:0b:a7:c3:ab:e1:99:6d:a5:aa:73:64:79:
                    e0:6c:27:7c:35:00:a7:25:3c:07:21:1c:07:ff:61:
                    d0:ae:25:32:76:5f:11:5d:ee:a5:bb:f0:a3:38:70:
                    1c:6d:49:e3:ba:58:ab:b2:93:24:96:71:a7:6e:5c:
                    80:72:8a:d1:16:0b:ce:8b:ff:80:a1:6d:60:e9:b5:
                    71:df:7d:83:78:58:fb:da:a6:bb:29:35:76:5f:e1:
                    d5:66:02:33:19:21:04:55:f5:95:c3:a4:00:7a:19:
                    79:eb:26:e0:52:b4:6b:93:14:0b:4a:cc:1c:c7:92:
                    e2:12:69:e7:59:93:e0:4e:f1:c6:0f:28:15:fc:6c:
                    a4:7c:30:b2:c5:c4:c1:c8:97:22:c2:9c:ae:18:f2:
                    34:45:84:e5:d9:da:fd:3c:d3:30:26:7d:8b:65:72:
                    8b:97:43:c1:57:a2:1b:ff:b6:e8:1b:fb:f9:31:64:
                    21:9a:73:8f:ac:0a:d4:0b:b0:17:ab:6a:26:27:07:
                    82:c2:ea:a7:07:21:d9:e5:0a:b6:31:27:45:51:67:
                    85:1a:6e:94:54:d3:7c:8e:ed:df:8a:39:98:80:5c:
                    fc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:39:03:73:99:F5:3A:71:DE:0F:19:11:07:44:BC:8B:82:BD:A7
            X509v3 Authority Key Identifier:
                keyid:DF:4F:03:C5:77:0C:7B:A3:99:12:81:33:67:B5:E8:68:00:5C:CD:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/DF4F03C5770C7BA39912813367B5E868005CCD99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DF4F03C5770C7BA39912813367B5E868005CCD99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E08D933682F688ED8C36D0FC1F34B68315053D3F371F684B9A387A5FA6709F17/0/3137302e3235342e32392e302f32342d3234203d3e20323637363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:03:88:05:39:28:97:80:54:e5:66:5a:3c:3c:3c:3c:20:54:
         18:e3:f1:04:cb:c3:b0:f4:a8:e5:d8:d4:73:2d:a7:54:8b:e6:
         42:3b:9d:84:94:d4:9a:4f:5f:ef:d7:21:17:8b:c1:51:f4:b2:
         3d:65:21:c6:6e:e5:0d:4c:73:da:c1:29:31:b6:06:25:92:89:
         3c:e7:02:eb:65:e9:9a:ad:c6:76:89:71:14:d7:0d:51:09:f4:
         de:18:66:2c:ff:c3:13:7a:2f:98:97:7c:75:94:c8:16:ec:e6:
         0a:1d:3c:09:0e:33:82:fc:0f:14:62:c0:1b:26:e7:5a:a6:62:
         4a:d1:f4:f9:ec:6a:3b:61:3d:11:18:55:f1:bc:af:a9:8a:cc:
         0f:4d:1f:e3:4c:59:c1:3f:d0:29:fb:80:8d:e3:37:cc:10:3b:
         ad:57:19:58:f9:43:f0:26:64:cd:55:77:2a:c5:1c:67:0c:ea:
         b3:bb:60:bc:44:cc:8d:8f:fc:06:6d:33:49:54:4e:b2:c5:06:
         b4:b4:28:d4:45:fa:b4:d5:bd:83:60:98:84:41:92:54:c1:20:
         46:4b:9e:8a:d4:13:a1:5d:11:97:8f:6e:27:4d:d1:4f:5e:75:
         81:ca:7f:d3:31:93:4c:f8:54:fd:06:4e:b4:03:cf:28:0f:d4:
         ce:77:da:7f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHLqFDchqBFYSzZ9+dnJtdj8l5z8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREY0RjAzQzU3NzBDN0JBMzk5MTI4MTMzNjdCNUU4Njgw
MDVDQ0Q5OTAeFw0yNDAzMDUxODAwNTdaFw0yNTAzMDQxODA1NTdaMDMxMTAvBgNV
BAMTKEI5QjYzOTAzNzM5OUY1M0E3MURFMEYxOTExMDc0NEJDOEI4MkJEQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4jH1pjSiX0MdBVZ0stSEzDNw
w9g8LtENlblqt1XLCwunw6vhmW2lqnNkeeBsJ3w1AKclPAchHAf/YdCuJTJ2XxFd
7qW78KM4cBxtSeO6WKuykySWcaduXIByitEWC86L/4ChbWDptXHffYN4WPvaprsp
NXZf4dVmAjMZIQRV9ZXDpAB6GXnrJuBStGuTFAtKzBzHkuISaedZk+BO8cYPKBX8
bKR8MLLFxMHIlyLCnK4Y8jRFhOXZ2v080zAmfYtlcouXQ8FXohv/tugb+/kxZCGa
c4+sCtQLsBeraiYnB4LC6qcHIdnlCrYxJ0VRZ4UabpRU03yO7d+KOZiAXPzfAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUubY5A3OZ9Tpx3g8ZEQdEvIuCvacwHwYDVR0j
BBgwFoAU308DxXcMe6OZEoEzZ7XoaABczZkwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9FMDhEOTMzNjgyRjY4OEVEOEMzNkQwRkMxRjM0QjY4MzE1
MDUzRDNGMzcxRjY4NEI5QTM4N0E1RkE2NzA5RjE3LzAvREY0RjAzQzU3NzBDN0JB
Mzk5MTI4MTMzNjdCNUU4NjgwMDVDQ0Q5OS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9ERjRGMDNDNTc3MEM3QkEzOTkx
MjgxMzM2N0I1RTg2ODAwNUNDRDk5LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRTA4RDkzMzY4MkY2ODhFRDhDMzZEMEZDMUYzNEI2ODMxNTA1M0QzRjM3
MUY2ODRCOUEzODdBNUZBNjcwOUYxNy8wLzMxMzczMDJlMzIzNTM0MmUzMjM5MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzYzOTM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqv4d
MA0GCSqGSIb3DQEBCwUAA4IBAQBMA4gFOSiXgFTlZlo8PDw8IFQY4/EEy8Ow9Kjl
2NRzLadUi+ZCO52ElNSaT1/v1yEXi8FR9LI9ZSHGbuUNTHPawSkxtgYlkok85wLr
ZemarcZ2iXEU1w1RCfTeGGYs/8MTei+Yl3x1lMgW7OYKHTwJDjOC/A8UYsAbJuda
pmJK0fT57Go7YT0RGFXxvK+piswPTR/jTFnBP9Ap+4CN4zfMEDutVxlY+UPwJmTN
VXcqxRxnDOqzu2C8RMyNj/wGbTNJVE6yxQa0tCjURfq01b2DYJiEQZJUwSBGS56K
1BOhXRGXj24nTdFPXnWByn/TMZNM+FT9Bk60A88oD9TOd9p/
-----END CERTIFICATE-----
Generated at Wed Nov 20 14:21:31 2024 by rpki-client on console-fra.rpki-client.org