Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3137302e37382e3132342e302f32322d3234203d3e20323633373830.roa
File:                     3137302e37382e3132342e302f32322d3234203d3e20323633373830.roa (raw, json)
Hash identifier:          jjZ+HGHyjvV47q2ppSKNHyO41N+5nUfSZpFFtD7D7YE=
Subject key identifier:   83:23:E0:E4:0E:77:47:EB:5D:AC:EC:1A:C3:D3:42:04:E7:A3:CB:D3
Certificate issuer:       /CN=188358D72A27E615B114F9B1D346721CB266F6EA
Certificate serial:       7909110785B217E3B2827C4732A6A1874C4D1093
Authority key identifier: 18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3137302e37382e3132342e302f32322d3234203d3e20323633373830.roa
Signing time:             Tue 05 Mar 2024 18:08:32 +0000
ROA not before:           Tue 05 Mar 2024 18:03:32 +0000
ROA not after:            Tue 04 Mar 2025 18:08:32 +0000
asID:                     263780
IP address blocks:        170.78.124.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:09:11:07:85:b2:17:e3:b2:82:7c:47:32:a6:a1:87:4c:4d:10:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=188358D72A27E615B114F9B1D346721CB266F6EA
        Validity
            Not Before: Mar  5 18:03:32 2024 GMT
            Not After : Mar  4 18:08:32 2025 GMT
        Subject: CN=8323E0E40E7747EB5DACEC1AC3D34204E7A3CBD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7b:54:86:0e:f1:a5:95:37:74:b9:b4:c2:81:
                    e3:13:9b:0a:f6:7b:b1:a6:22:e1:20:51:4d:31:fe:
                    7b:51:47:c7:6c:4e:87:16:a8:f2:f1:8a:3d:d2:1f:
                    c6:61:c2:11:78:37:ae:82:e9:aa:29:2c:0b:d6:1e:
                    d1:74:95:a3:48:06:04:55:e1:fb:42:b4:d2:86:bb:
                    27:5d:04:d1:74:df:7f:eb:72:24:25:42:14:db:d7:
                    61:57:ba:7e:ba:47:a8:80:14:ed:d6:c3:ec:2e:8d:
                    1c:4a:18:82:c1:56:03:87:6b:66:1e:6a:7d:81:88:
                    41:1a:c0:e3:7f:8b:35:8b:29:2a:c1:43:6f:19:9d:
                    7e:2f:8e:0b:56:06:74:40:35:3b:62:20:d1:6f:4d:
                    c8:72:e0:c7:1e:97:97:b2:e1:88:63:d9:92:f5:13:
                    36:93:09:76:34:0e:e7:97:bf:34:92:83:71:cc:fc:
                    e8:c6:03:14:b6:bd:a2:d7:25:5b:69:34:30:6b:33:
                    45:1a:92:02:dd:4c:d2:e0:c5:31:05:4b:7d:ef:ce:
                    8d:8d:2d:ef:61:08:33:d7:fe:dc:5c:0c:41:d1:65:
                    19:c1:d6:b7:26:da:63:84:6b:4a:37:9c:d9:88:83:
                    4c:f9:80:0d:d9:49:55:cb:a7:63:10:6f:eb:6d:8d:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:23:E0:E4:0E:77:47:EB:5D:AC:EC:1A:C3:D3:42:04:E7:A3:CB:D3
            X509v3 Authority Key Identifier:
                keyid:18:83:58:D7:2A:27:E6:15:B1:14:F9:B1:D3:46:72:1C:B2:66:F6:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/188358D72A27E615B114F9B1D346721CB266F6EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/188358D72A27E615B114F9B1D346721CB266F6EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F2B8E0A803684CA69136DF07068302F658390C91FA74AA3F1B298BF58757CA74/0/3137302e37382e3132342e302f32322d3234203d3e20323633373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:75:c7:9a:6f:83:96:7a:71:b8:59:52:15:bc:99:0e:7b:a1:
         3c:77:51:30:3a:0a:9a:44:15:52:4e:a2:64:18:1c:3f:57:fb:
         f4:9f:84:b7:d4:7d:09:ea:bd:cb:ec:59:9a:b9:65:e9:1d:67:
         2a:69:f4:07:07:8a:f5:86:ec:f6:40:9d:51:4a:d9:95:e9:38:
         81:13:04:17:8a:9b:af:97:da:3a:1c:dd:38:bd:75:b1:cf:d7:
         f2:c8:ac:a3:47:ac:48:32:ef:8e:d8:1a:fb:42:df:2d:c5:4d:
         65:2e:1d:6c:90:be:17:b5:d9:46:a3:1b:3a:49:11:0d:54:6d:
         d0:89:93:3b:0d:00:d6:25:3c:d1:ed:75:87:5c:39:8f:ec:a6:
         7c:38:e2:51:a0:81:92:e7:86:50:da:0e:2f:cb:c6:ab:a6:53:
         80:2e:d8:e2:02:ea:e5:85:ea:b7:fb:e1:20:52:70:5c:13:09:
         17:5a:f9:77:29:97:64:49:a1:4d:60:bc:de:53:17:0b:c4:36:
         60:7c:22:a3:ed:f6:db:9e:45:09:59:cc:9b:68:44:ba:f4:fd:
         0b:7a:06:47:9d:d3:e7:24:4b:7d:d9:f5:99:08:25:11:47:1c:
         6f:36:2a:3f:f7:fc:c3:54:c0:d5:72:1c:d4:1d:a7:8f:26:bd:
         e8:db:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:53:08 2024 by rpki-client on console-ams.rpki-client.org