Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa
File:                     3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa (raw, json)
Hash identifier:          blbiDcNp8c4dFA5Gaq9FG5DM3/wKGjIVBGkoPFkQKZY=
Subject key identifier:   78:A1:D5:9E:AA:EA:ED:40:86:F4:AD:5F:2C:2D:27:B7:C6:39:ED:0C
Certificate issuer:       /CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
Certificate serial:       6BBFAF2A434AB304C4CDFACDD432193B444C9AC4
Authority key identifier: 81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa
Signing time:             Tue 05 Mar 2024 17:51:47 +0000
ROA not before:           Tue 05 Mar 2024 17:46:47 +0000
ROA not after:            Tue 04 Mar 2025 17:51:47 +0000
asID:                     262262
IP address blocks:        170.247.84.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:bf:af:2a:43:4a:b3:04:c4:cd:fa:cd:d4:32:19:3b:44:4c:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56
        Validity
            Not Before: Mar  5 17:46:47 2024 GMT
            Not After : Mar  4 17:51:47 2025 GMT
        Subject: CN=78A1D59EAAEAED4086F4AD5F2C2D27B7C639ED0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:6f:3f:6a:41:fd:c5:49:83:18:31:12:41:
                    32:84:03:17:46:96:ed:e4:c0:94:24:84:3d:5b:83:
                    54:7f:34:ad:69:1a:4a:7c:7f:e1:9b:b0:60:37:b1:
                    d8:af:06:a6:40:d1:27:27:8f:c5:e7:aa:4d:27:ae:
                    ac:b9:72:90:8b:85:d5:f2:cd:b3:e1:2c:2d:83:f0:
                    dc:96:be:2c:05:c9:34:a0:a3:4c:ca:28:67:e1:cb:
                    44:04:86:b8:6a:c0:a7:25:53:7b:90:71:98:62:17:
                    6b:09:18:62:f2:20:34:39:e2:51:39:53:37:ae:1d:
                    01:3e:aa:e7:b9:aa:b4:3a:8b:5d:c0:89:9c:22:74:
                    3c:20:24:a0:0f:55:c6:8d:1b:43:44:45:95:2d:d9:
                    b1:26:b5:f8:48:b1:77:57:1a:5f:11:c9:dc:5f:59:
                    96:7c:41:65:e0:52:4f:0d:72:56:69:b9:89:a5:8e:
                    6a:ce:24:2f:74:41:29:15:86:5d:67:70:da:4e:3e:
                    4b:a8:3d:16:ca:6f:cd:d4:9f:69:5b:eb:28:48:b1:
                    cb:e5:92:95:30:f3:33:f5:e6:02:de:38:8a:a4:d2:
                    a3:d3:8d:c2:d9:3a:a5:e6:0f:a3:6f:e1:c5:27:fa:
                    33:70:30:60:1d:15:b7:13:d2:15:cd:67:ad:4a:b5:
                    73:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:D5:9E:AA:EA:ED:40:86:F4:AD:5F:2C:2D:27:B7:C6:39:ED:0C
            X509v3 Authority Key Identifier:
                keyid:81:0A:CF:84:85:1B:AE:45:EB:A4:09:3A:F8:E0:EB:E4:CB:3B:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/810ACF84851BAE45EBA4093AF8E0EBE4CB3B7D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E539FE2311D723D117FD14461A604ADB4311E912056D1FF9E72E27FBC57905EA/0/3137302e3234372e38342e302f32322d3234203d3e20323632323632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:a8:2a:fb:0f:26:90:b7:31:d4:f1:76:91:7a:9d:6c:f7:f7:
         01:20:89:d2:e7:e3:9b:ca:65:3b:a1:10:29:06:50:76:22:62:
         1c:45:59:06:ac:2f:e0:fd:06:09:f7:5a:6f:c4:e2:ec:ba:49:
         1d:9f:20:4f:c7:13:4e:24:a7:64:61:bd:20:67:79:ae:79:76:
         35:9a:b3:9c:25:2d:3e:25:c4:3d:11:e1:ab:a5:bc:f1:5d:6f:
         b0:14:04:ed:e5:87:4f:21:1c:0c:55:32:4a:20:dd:ec:13:9e:
         d3:fb:ef:7b:17:c2:38:09:ed:b3:da:54:68:84:e3:3c:cf:00:
         13:b0:e4:0c:30:95:15:39:67:90:5f:d0:b5:d0:df:9c:69:cd:
         2b:02:01:3a:12:51:e7:6b:31:a2:cc:13:a0:cf:45:b8:ec:3d:
         e8:29:dc:ec:28:78:0d:93:85:14:4a:b2:56:7f:1e:c7:33:c2:
         cf:cb:37:13:a0:6e:be:8a:12:02:60:10:74:39:ae:30:a7:ca:
         e1:e0:57:dc:6d:f9:d3:68:dd:30:9f:5e:2b:8c:53:a5:1d:c2:
         5f:a7:58:ca:70:af:90:36:9f:75:4f:df:04:ff:1c:26:7c:2f:
         0d:22:9a:be:aa:44:f5:63:6f:8e:72:b8:06:b7:09:53:ad:93:
         ef:c6:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:02 2024 by rpki-client on console-ams.rpki-client.org