Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa
File:                     3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa (raw, json)
Hash identifier:          VzYoUyQQmcX+9IPpQkWIhFreNcfjM8fWmdP1FnZ7wik=
Subject key identifier:   08:6C:D5:EE:42:A2:AD:AF:66:9B:30:CB:9B:AD:F6:5E:3D:4F:55:80
Certificate issuer:       /CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
Certificate serial:       6ED797677D923B84D8098A721BBA49AE3217664F
Authority key identifier: DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa
Signing time:             Tue 05 Mar 2024 18:02:23 +0000
ROA not before:           Tue 05 Mar 2024 17:57:23 +0000
ROA not after:            Tue 04 Mar 2025 18:02:23 +0000
asID:                     395161
IP address blocks:        170.80.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d7:97:67:7d:92:3b:84:d8:09:8a:72:1b:ba:49:ae:32:17:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB097B1D95BB51C9F513FC53429F30EA207C1549
        Validity
            Not Before: Mar  5 17:57:23 2024 GMT
            Not After : Mar  4 18:02:23 2025 GMT
        Subject: CN=086CD5EE42A2ADAF669B30CB9BADF65E3D4F5580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:65:60:77:4a:15:ff:0b:13:fe:3d:2e:f7:
                    b5:0b:fa:02:0d:26:0d:9f:c1:e5:7c:0e:23:2d:71:
                    35:5c:fd:15:b8:d7:96:50:02:c6:e8:89:59:ac:66:
                    48:c0:0e:77:61:81:70:99:21:21:80:b0:cb:32:11:
                    4a:31:d3:69:20:96:76:2a:89:73:00:ee:1c:bb:fa:
                    15:6a:3c:23:0d:0f:60:a2:1b:54:bb:52:35:fb:8f:
                    1d:c7:6d:00:58:c8:04:6f:f8:2b:01:53:19:e2:e0:
                    f8:60:05:cc:ce:13:5f:70:00:34:19:36:95:8c:67:
                    0f:90:a1:b7:1c:32:d1:7e:98:2c:42:11:59:fc:e7:
                    f2:bd:53:e2:f1:be:4c:05:ff:ab:79:bc:ce:fe:5e:
                    cb:15:9b:0f:d3:60:f0:a9:24:bc:cc:31:0b:9a:92:
                    19:4f:d7:e8:72:d9:5a:80:22:18:fd:79:6c:0d:52:
                    15:e0:41:1b:d4:1a:04:57:14:bf:79:b6:3d:f4:09:
                    f5:98:c1:43:1d:cd:9b:14:68:7a:63:6f:6a:d1:00:
                    d5:a6:76:df:be:12:4c:f3:35:ac:35:ad:f8:2f:8a:
                    b6:9c:06:1d:9b:0b:2e:85:b9:d1:ab:35:37:8b:8e:
                    2a:57:41:7d:14:b6:e6:7d:80:49:f7:b6:94:9e:c8:
                    05:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6C:D5:EE:42:A2:AD:AF:66:9B:30:CB:9B:AD:F6:5E:3D:4F:55:80
            X509v3 Authority Key Identifier:
                keyid:DB:09:7B:1D:95:BB:51:C9:F5:13:FC:53:42:9F:30:EA:20:7C:15:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DB097B1D95BB51C9F513FC53429F30EA207C1549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB1E9375601F121810894F046B3D3CECEA4EC816CD530090A0E9717B093EBF47/0/3137302e38302e3130382e302f32322d3234203d3e20333935313631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:7b:13:66:f8:3d:2f:43:81:67:89:4c:d7:b1:36:cb:a8:ba:
         d1:42:f0:0b:b1:70:c5:4c:5a:59:a8:ce:25:1c:76:18:9f:52:
         1d:aa:4e:f1:44:18:eb:d1:55:69:45:ca:30:d8:60:fd:2a:80:
         8e:a1:9c:15:14:65:b9:6c:7c:d4:41:fd:24:63:d6:3d:d8:e4:
         d1:fa:b7:4d:db:15:ea:b2:83:e0:2c:12:6b:25:fc:4b:50:e9:
         47:1f:bb:a0:e5:9d:89:55:3b:30:f7:8e:74:59:b8:ce:a4:8c:
         35:d6:83:4d:92:0e:c9:c7:c5:4e:1a:ed:f0:fc:e5:ad:42:ee:
         52:91:89:63:b1:03:79:4b:95:9a:5a:86:cc:7f:69:bb:18:c8:
         9a:18:61:9f:f7:23:51:b8:cd:8d:73:5a:6b:07:b2:42:42:10:
         b6:7e:f9:05:3a:a3:31:49:72:02:c8:5c:cb:12:b8:ed:f1:2f:
         55:74:e1:12:d5:e3:8b:d1:18:62:ba:9b:2c:a9:cf:cd:18:70:
         da:61:6f:d1:5a:fa:9f:86:84:7a:89:69:51:de:e4:87:02:9b:
         1a:6c:c0:04:d0:35:ca:ef:d2:67:72:ac:3a:a2:45:c4:ae:5f:
         23:b1:4c:3d:82:f0:2f:69:5f:c6:bb:2a:c6:0c:81:67:f5:f0:
         b5:f9:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:18:13 2024 by rpki-client on console-ams.rpki-client.org