Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa
File:                     3137302e3233332e37342e302f32342d3234203d3e203333333932.roa (raw, json)
Hash identifier:          bzv1VzspOuQHLZiJeXFyF7S3vhmGlem5bFtR+NLeEbg=
Subject key identifier:   53:E8:EC:D1:9E:60:DF:AD:27:5A:FB:A7:50:0B:8C:1B:66:FA:EB:02
Certificate issuer:       /CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
Certificate serial:       3DC7F27FA8DCC6A725CDC25644C7C4471FC31147
Authority key identifier: 96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa
Signing time:             Fri 03 May 2024 17:35:00 +0000
ROA not before:           Fri 03 May 2024 17:30:00 +0000
ROA not after:            Fri 02 May 2025 17:35:00 +0000
asID:                     33392
IP address blocks:        170.233.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:c7:f2:7f:a8:dc:c6:a7:25:cd:c2:56:44:c7:c4:47:1f:c3:11:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9651F1E4B6480D19626E784CA1A8F0ABC94C1487
        Validity
            Not Before: May  3 17:30:00 2024 GMT
            Not After : May  2 17:35:00 2025 GMT
        Subject: CN=53E8ECD19E60DFAD275AFBA7500B8C1B66FAEB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:ba:de:bf:7e:64:b6:c0:f3:b4:db:34:61:
                    40:e0:b4:bd:d1:6b:56:6b:84:36:fb:06:e8:4b:79:
                    d1:39:fa:a0:c6:f0:5a:ec:6f:a9:4b:7c:e2:ec:f8:
                    a9:8e:50:25:e9:f2:a6:e6:83:99:32:5a:96:46:bd:
                    54:c0:8c:15:6b:c4:f0:4b:dc:1b:f8:fc:c6:fd:5d:
                    27:c4:b3:7c:f4:15:a7:76:13:e4:71:c9:85:38:9d:
                    94:19:e9:1b:74:18:75:5a:ab:bf:a1:58:2e:a4:46:
                    7c:59:b1:37:1e:cb:24:27:c3:84:72:99:55:aa:24:
                    7f:0d:e9:ab:56:63:83:49:d8:99:e1:a0:3b:a3:a7:
                    d1:d6:81:5e:d8:4b:02:e7:14:77:5e:83:63:80:56:
                    5c:ea:c8:33:fd:c2:7e:7f:e1:b4:3e:0d:92:b8:6e:
                    8b:6d:0d:50:16:99:ec:cc:5c:f1:15:d8:93:01:69:
                    c0:fa:44:0b:80:57:cc:76:0e:6f:bb:dd:ff:83:02:
                    61:91:f1:f1:40:cf:2d:e0:ef:0f:1b:dc:8f:fc:42:
                    65:cb:e3:89:8f:23:2c:81:4a:f8:51:3a:f3:a2:e5:
                    d7:e3:4c:32:58:2c:8f:7c:f5:2f:ab:33:c3:9e:79:
                    04:59:3f:e8:0b:68:2d:57:ce:44:11:32:a4:fb:2f:
                    58:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E8:EC:D1:9E:60:DF:AD:27:5A:FB:A7:50:0B:8C:1B:66:FA:EB:02
            X509v3 Authority Key Identifier:
                keyid:96:51:F1:E4:B6:48:0D:19:62:6E:78:4C:A1:A8:F0:AB:C9:4C:14:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9651F1E4B6480D19626E784CA1A8F0ABC94C1487.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F68E217F69DE99D52AB3B6385D134B93C3D4D8260F1E24C0231493E89C2FF10F/0/3137302e3233332e37342e302f32342d3234203d3e203333333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:7b:d3:c6:85:82:51:e5:3f:07:e8:69:f1:e5:6b:71:b3:87:
         6a:0e:bf:6c:cd:72:72:44:dc:42:a0:f3:6f:33:fe:eb:6d:bd:
         52:bf:6d:d7:9c:94:f2:93:67:98:28:2b:81:3b:ba:cd:ac:be:
         2a:e9:9e:fb:23:1c:48:81:3e:db:6a:7e:89:41:bf:40:b7:60:
         7a:f5:ee:34:bc:1d:af:c9:e0:cd:19:ce:33:64:f3:bd:ef:ca:
         95:c9:f5:ce:b7:39:0d:b0:eb:4c:d2:25:8a:ce:f9:f7:e9:28:
         ba:9b:e1:fd:ea:35:15:2e:3c:46:e8:b7:80:8a:59:a7:71:34:
         96:6b:50:6c:90:e3:b5:86:08:3d:53:3b:68:64:8c:28:a1:6c:
         5d:2c:0f:0a:7f:56:0f:7d:01:36:73:4d:9b:86:57:c2:d0:5e:
         7c:89:9b:f3:64:96:88:6a:22:ed:a1:02:8a:0a:46:79:58:91:
         4e:95:f1:e3:5a:9c:e9:cc:6b:ac:ff:22:a3:26:1c:f8:89:6e:
         bb:26:8a:3a:b4:02:15:b2:b2:ef:f4:1d:48:14:ab:9d:b9:f1:
         41:24:49:8d:fc:9d:31:74:83:b5:b4:ea:a1:e5:6e:e7:71:fa:
         59:5d:d0:81:80:53:0e:79:c6:da:88:6e:f8:e1:8c:69:77:21:
         93:0f:34:ff
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPcfyf6jcxqclzcJWRMfERx/DEUcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTY1MUYxRTRCNjQ4MEQxOTYyNkU3ODRDQTFBOEYwQUJD
OTRDMTQ4NzAeFw0yNDA1MDMxNzMwMDBaFw0yNTA1MDIxNzM1MDBaMDMxMTAvBgNV
BAMTKDUzRThFQ0QxOUU2MERGQUQyNzVBRkJBNzUwMEI4QzFCNjZGQUVCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIr7rev35ktsDztNs0YUDgtL3R
a1ZrhDb7BuhLedE5+qDG8Frsb6lLfOLs+KmOUCXp8qbmg5kyWpZGvVTAjBVrxPBL
3Bv4/Mb9XSfEs3z0Fad2E+RxyYU4nZQZ6Rt0GHVaq7+hWC6kRnxZsTceyyQnw4Ry
mVWqJH8N6atWY4NJ2JnhoDujp9HWgV7YSwLnFHdeg2OAVlzqyDP9wn5/4bQ+DZK4
bottDVAWmezMXPEV2JMBacD6RAuAV8x2Dm+73f+DAmGR8fFAzy3g7w8b3I/8QmXL
44mPIyyBSvhROvOi5dfjTDJYLI989S+rM8OeeQRZP+gLaC1XzkQRMqT7L1h9AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUU+js0Z5g360nWvunUAuMG2b66wIwHwYDVR0j
BBgwFoAUllHx5LZIDRlibnhMoajwq8lMFIcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNjhFMjE3RjY5REU5OUQ1MkFCM0I2Mzg1RDEzNEI5M0Mz
RDREODI2MEYxRTI0QzAyMzE0OTNFODlDMkZGMTBGLzAvOTY1MUYxRTRCNjQ4MEQx
OTYyNkU3ODRDQTFBOEYwQUJDOTRDMTQ4Ny5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NjUxRjFFNEI2NDgwRDE5NjI2
RTc4NENBMUE4RjBBQkM5NEMxNDg3LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjY4RTIxN0Y2OURFOTlENTJBQjNCNjM4NUQxMzRCOTNDM0Q0RDgyNjBG
MUUyNEMwMjMxNDkzRTg5QzJGRjEwRi8wLzMxMzczMDJlMzIzMzMzMmUzNzM0MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzMzMzMzMzkzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKrpSjAN
BgkqhkiG9w0BAQsFAAOCAQEAJ3vTxoWCUeU/B+hp8eVrcbOHag6/bM1yckTcQqDz
bzP+6229Ur9t15yU8pNnmCgrgTu6zay+Kume+yMcSIE+22p+iUG/QLdgevXuNLwd
r8ngzRnOM2Tzve/Klcn1zrc5DbDrTNIlis759+koupvh/eo1FS48Rui3gIpZp3E0
lmtQbJDjtYYIPVM7aGSMKKFsXSwPCn9WD30BNnNNm4ZXwtBefImb82SWiGoi7aEC
igpGeViRTpXx41qc6cxrrP8ioyYc+IluuyaKOrQCFbKy7/QdSBSrnbnxQSRJjfyd
MXSDtbTqoeVu53H6WV3QgYBTDnnG2ohu+OGMaXchkw80/w==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:19 2024 by rpki-client on console-ams.rpki-client.org