Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa
File:                     3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa (raw, json)
Hash identifier:          XvjlE9fvgJn1+jvjGrwd7/p2GKLX37DnK1HZHnaKe3k=
Subject key identifier:   72:15:0A:2B:A6:47:31:8E:15:E3:79:D3:28:A0:FC:65:EC:12:EA:45
Certificate issuer:       /CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
Certificate serial:       5507DE2095AED6A9EDAF8B375E11F26B44ECAF97
Authority key identifier: 63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     264740
IP address blocks:        170.239.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:07:de:20:95:ae:d6:a9:ed:af:8b:37:5e:11:f2:6b:44:ec:af:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FC9421EBB37486CB2D8FB170255A77C13D6091
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=72150A2BA647318E15E379D328A0FC65EC12EA45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:39:96:92:92:8a:0e:de:26:4a:3d:84:24:73:
                    c6:82:1e:bd:76:0a:c1:ff:d6:59:97:1f:5e:6a:41:
                    6d:57:ca:99:18:19:5b:73:8d:c9:9d:0d:46:d0:10:
                    d2:b4:44:0d:f3:b3:cd:00:a9:1f:09:1e:44:65:aa:
                    59:3b:15:8a:e2:da:35:67:31:9a:9e:67:c9:9c:d2:
                    e6:c2:c0:db:25:ea:ab:4b:57:ea:6c:90:e5:56:e4:
                    13:2c:0d:5f:11:e5:e2:b6:3f:44:3e:66:de:b0:b7:
                    c3:5b:26:cf:a5:76:d3:91:ca:71:b1:18:cb:98:a4:
                    5c:0d:c9:67:49:af:bd:3c:b6:c4:7d:d4:12:d8:72:
                    d5:3c:c8:f0:4f:13:9c:e5:6c:1d:e3:ee:40:78:41:
                    2f:53:a4:ad:e2:a3:5b:88:7b:2f:6e:2d:ea:7f:9d:
                    79:f5:fa:3f:54:1d:d3:e0:30:72:e4:aa:4a:72:c2:
                    47:84:1d:3e:8b:93:c1:cb:42:57:11:a9:ac:01:9b:
                    b2:07:6d:66:b2:68:9b:2c:a5:38:e9:ea:9e:46:76:
                    b2:b6:fc:7e:be:24:ee:7a:45:0f:94:fd:ce:b6:09:
                    5b:e2:86:c0:a7:0b:88:f4:ea:04:30:3d:33:fc:bd:
                    37:f8:e2:6a:75:ce:f3:40:f2:0f:9f:75:4f:9e:1b:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:15:0A:2B:A6:47:31:8E:15:E3:79:D3:28:A0:FC:65:EC:12:EA:45
            X509v3 Authority Key Identifier:
                keyid:63:FC:94:21:EB:B3:74:86:CB:2D:8F:B1:70:25:5A:77:C1:3D:60:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63FC9421EBB37486CB2D8FB170255A77C13D6091.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EAFC1149A64BB384FD192879F7DC15A735B59A06822A2C6EB833E8FB6A55B388/0/3137302e3233392e3138322e302f32342d3234203d3e20323634373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:01:13:7b:32:ae:02:c9:bb:e9:73:d6:df:86:a3:5b:8f:6c:
         12:90:c0:d7:f5:aa:f3:29:7f:08:33:9a:7e:97:b0:1b:40:18:
         09:5c:14:72:37:3a:54:ee:87:b5:d2:7c:fe:02:58:5f:05:75:
         ab:2f:df:60:81:07:d9:80:2c:05:4b:e1:28:c0:e5:ea:62:89:
         7f:fd:30:82:b6:6e:00:fa:1e:64:84:bb:66:f8:cb:44:bc:e5:
         94:f1:0e:72:ae:9a:b9:cb:95:35:8b:9a:8d:fd:a6:71:b0:cb:
         17:08:f3:1f:38:f1:fb:c0:b2:8f:d7:d7:c2:97:a5:3b:56:29:
         c7:ba:e9:cf:d8:be:45:d8:88:ae:92:5f:46:4d:6f:76:26:6b:
         4f:0d:4b:d1:ea:a1:c1:43:f5:eb:5d:de:2a:c5:3f:4c:cc:94:
         89:4d:aa:f0:82:fe:4c:68:54:30:00:4b:13:72:9e:03:0c:27:
         c1:e0:7b:82:8f:37:4c:bb:3c:1d:73:e5:1d:43:e6:52:b0:95:
         48:e9:f5:70:d5:e0:36:1c:5e:2d:c7:21:a8:cf:e3:36:e6:a2:
         13:0b:98:62:7b:6e:f3:d4:38:c8:bb:6c:17:87:e2:77:e6:69:
         8f:a9:e7:ee:a4:6b:d3:51:d5:30:33:7b:e5:92:fd:17:98:f2:
         a1:bf:2e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 13:08:50 2024 by rpki-client on console-ams.rpki-client.org