Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa
File:                     3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa (raw, json)
Hash identifier:          hMZwt0FZ+i6NCuxzExlrqYEUVrWzCqCti8RwAW7DLEw=
Subject key identifier:   EA:AC:F3:8E:0C:BC:1A:6C:54:BA:AA:85:FC:43:14:C3:DC:C5:D8:E9
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       3835E28669A7D9484C9864C3F32292D433B704F6
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa
Signing time:             Tue 05 Mar 2024 17:41:17 +0000
ROA not before:           Tue 05 Mar 2024 17:36:17 +0000
ROA not after:            Tue 04 Mar 2025 17:41:17 +0000
asID:                     264740
IP address blocks:        170.239.180.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:e2:86:69:a7:d9:48:4c:98:64:c3:f3:22:92:d4:33:b7:04:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Mar  5 17:36:17 2024 GMT
            Not After : Mar  4 17:41:17 2025 GMT
        Subject: CN=EAACF38E0CBC1A6C54BAAA85FC4314C3DCC5D8E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:42:71:ac:e1:5e:cd:06:f4:79:72:ba:ae:
                    11:cf:3d:27:99:22:01:48:6b:e3:bb:f6:f3:b3:1b:
                    48:ec:86:2c:e2:03:70:2c:a8:ad:2f:ea:d4:6b:19:
                    88:7c:47:5f:6c:fc:67:f1:fe:87:f6:a3:09:b9:81:
                    5e:b8:dc:17:4d:74:72:73:fb:84:12:3c:c2:59:8f:
                    93:66:0d:ed:9e:92:77:f6:c2:42:97:45:f2:c6:62:
                    1a:2e:c2:0d:1d:4d:fc:cf:59:b2:a0:7a:3b:7d:c6:
                    5a:79:95:06:81:9c:87:f6:51:99:e3:54:2f:c5:25:
                    5e:86:d8:82:46:b9:fa:39:fd:f2:77:8b:59:30:3d:
                    83:63:ce:91:6d:ca:c5:61:b7:35:23:94:db:b0:f7:
                    4a:dd:cb:bf:dd:91:0c:7f:da:2c:58:6b:c5:cf:1b:
                    6a:f3:88:ab:87:4d:a5:99:5d:6f:a6:a8:22:c1:bb:
                    c7:cb:e8:5f:b2:65:54:88:6e:66:44:0d:8d:f8:10:
                    34:f2:77:27:55:c1:e2:53:8e:11:e1:9f:1f:ce:3a:
                    71:a7:83:8d:b7:1b:44:ca:5d:ae:54:16:1b:be:54:
                    1d:90:02:88:d6:99:e0:b2:48:78:ab:b0:9e:00:44:
                    14:87:f0:02:56:01:c6:01:c1:90:b3:19:fc:6f:f4:
                    38:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AC:F3:8E:0C:BC:1A:6C:54:BA:AA:85:FC:43:14:C3:DC:C5:D8:E9
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138302e302f32342d3234203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ac:a8:2e:ac:06:e2:12:4e:37:0b:84:ac:73:91:d2:8d:8e:
         ae:46:1d:3a:a8:c3:02:0c:03:09:26:9b:03:08:27:73:3f:f3:
         3d:43:cd:67:0b:dd:e7:64:67:88:76:37:cd:29:c3:df:73:c1:
         fa:12:6c:df:d5:79:3f:17:91:b1:fd:3a:99:08:43:aa:f9:53:
         a5:94:b8:fd:b7:07:2c:76:12:fb:74:90:5a:48:0b:92:5d:32:
         80:fc:1b:4d:e1:a7:8e:1b:cd:89:bb:f3:df:45:c8:68:24:34:
         78:d3:fe:85:45:8b:3d:e1:3a:23:89:e4:9a:39:f1:3f:f9:bc:
         d5:0a:01:9d:02:e5:58:d8:11:36:be:ad:d2:cb:b4:00:f7:a5:
         e1:76:a6:3a:d8:1d:aa:d5:31:01:1e:f7:fa:77:a4:c1:33:03:
         37:31:db:c9:1a:00:89:9b:e8:91:13:3b:05:1b:33:0c:19:18:
         ef:e6:02:3b:71:db:fd:f4:e8:e2:57:2d:1b:04:96:3d:1f:ff:
         62:e2:aa:f2:13:50:2a:be:4a:d6:2f:f1:25:bd:ef:c8:a5:0e:
         1c:c0:00:51:aa:c4:86:5e:bb:71:8f:57:41:48:e2:2e:65:19:
         87:88:a0:f3:77:8c:66:29:03:f6:96:2a:15:23:99:fe:00:37:
         c3:7e:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:19:53 2024 by rpki-client on console-ams.rpki-client.org