Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa
File:                     3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa (raw, json)
Hash identifier:          Zux+LgdxeKVunTsOgNSqfXLPGnYHmY1GVHCITq2vyrU=
Subject key identifier:   76:AF:35:27:79:8E:EA:76:F3:40:CE:81:66:CD:44:E4:DB:05:1C:24
Certificate issuer:       /CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
Certificate serial:       381B9B55DE81C98D1F4B1F6C64A81031D3E8F50F
Authority key identifier: 4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa
Signing time:             Tue 05 Mar 2024 17:52:04 +0000
ROA not before:           Tue 05 Mar 2024 17:47:04 +0000
ROA not after:            Tue 04 Mar 2025 17:52:04 +0000
asID:                     264750
IP address blocks:        170.79.144.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 04 Jun 2024 22:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:1b:9b:55:de:81:c9:8d:1f:4b:1f:6c:64:a8:10:31:d3:e8:f5:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DE953D0DBB7E793914D04C32D69DD64097568ED
        Validity
            Not Before: Mar  5 17:47:04 2024 GMT
            Not After : Mar  4 17:52:04 2025 GMT
        Subject: CN=76AF3527798EEA76F340CE8166CD44E4DB051C24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6b:3e:79:05:af:bb:52:85:e2:0a:1e:26:c6:
                    53:89:19:3f:e1:04:10:81:1b:2a:50:74:f2:02:76:
                    00:d5:f0:68:99:8b:a1:78:0a:d3:4d:a1:fc:c0:54:
                    14:3a:a1:8f:67:18:4c:8c:6b:ec:a7:50:60:fd:b8:
                    68:e4:c9:3c:cb:3f:81:74:d8:b2:95:08:d1:e9:e8:
                    71:94:c2:7a:15:a5:c0:d8:6b:ac:54:18:af:c2:77:
                    dc:24:ef:07:81:08:bd:f9:cb:d6:12:3f:42:3f:5a:
                    79:a0:99:68:31:9b:84:fc:f2:25:9a:22:82:e4:46:
                    f9:63:25:97:1b:97:9c:ce:90:3f:91:1c:94:f6:d1:
                    9f:21:56:fe:db:10:e9:06:7f:da:49:a7:c1:e3:99:
                    34:6c:d1:0c:dc:10:3d:64:1e:4b:b1:b9:ca:92:7c:
                    4a:ba:b7:00:43:e3:1d:e0:f0:98:c5:8e:c5:4b:c0:
                    62:c6:89:1d:f4:f3:1b:9a:78:b0:ab:87:a8:a7:11:
                    d7:a3:18:fa:ba:27:92:7f:7d:ea:25:f7:32:c0:86:
                    88:6b:51:17:00:a8:fd:96:cd:e1:7f:83:15:d8:a3:
                    e1:06:ab:41:8e:5a:8c:db:da:89:ee:a4:3f:fd:1a:
                    15:8c:b3:83:97:9e:93:aa:37:bb:2b:5a:82:53:44:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AF:35:27:79:8E:EA:76:F3:40:CE:81:66:CD:44:E4:DB:05:1C:24
            X509v3 Authority Key Identifier:
                keyid:4D:E9:53:D0:DB:B7:E7:93:91:4D:04:C3:2D:69:DD:64:09:75:68:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4DE953D0DBB7E793914D04C32D69DD64097568ED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E8CFC117FB618BA5DCE1E251E113BF1DCE6C1BF6E9BF6F4914AE8095934C31E7/0/3137302e37392e3134342e302f32322d3232203d3e20323634373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:96:67:8b:8c:96:88:46:3c:06:18:4b:be:c0:95:d4:5f:f2:
         75:76:c1:bd:d7:85:ed:5f:fb:aa:a3:0b:54:7a:a8:4f:c7:af:
         e5:45:21:4d:da:87:4c:f1:d4:e1:67:fe:8b:c7:30:84:01:51:
         b5:ea:b1:97:25:be:4d:fd:37:82:66:df:99:2b:45:cc:de:2a:
         cf:b8:29:1b:f2:1b:db:0b:18:26:06:e3:76:14:fe:5b:e3:b6:
         e3:9a:72:31:c2:66:9b:9e:36:b0:ba:95:22:b5:51:d9:fe:7b:
         42:00:3c:91:0b:ff:d3:db:96:d2:c0:1a:9c:83:ee:0f:95:c0:
         30:1a:1d:9f:f0:32:2f:99:43:df:63:de:98:c4:01:5a:18:47:
         6a:a7:06:ef:d5:44:72:5b:16:5e:bf:c7:e5:35:7a:e1:bb:8d:
         73:b9:75:41:f9:d0:9e:ba:a4:cf:25:58:47:52:91:f3:f3:82:
         36:0f:ec:c7:fd:dd:2d:d7:d5:ae:7b:02:c0:83:39:f5:3d:18:
         40:23:4a:04:a7:49:4e:4c:76:14:c0:e0:7e:fe:fb:42:21:2a:
         cb:8c:aa:28:21:e6:be:fb:d8:02:7f:7a:0f:2f:2d:8a:5a:cb:
         cb:1d:8d:15:e2:d2:f5:5d:e8:7d:67:d9:e8:b4:9c:ac:53:0f:
         b2:29:94:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:13:50 2024 by rpki-client on console-ams.rpki-client.org