Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3137302e3233332e33312e302f32342d3234203d3e20323634373338.roa
File:                     3137302e3233332e33312e302f32342d3234203d3e20323634373338.roa (raw, json)
Hash identifier:          CyVO0Lz0Tg+KHvQ+VCncfbMHn9JHqqI/2G9tclVbY7k=
Subject key identifier:   FD:F4:F0:03:54:20:07:40:6C:A2:7E:84:20:4F:43:37:93:D4:90:C3
Certificate issuer:       /CN=D7EE67424E7FC3136531741689B53CDA16769DD7
Certificate serial:       1EDE1683E3E8F78A3606FDE1C5C7653C0AA71176
Authority key identifier: D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3137302e3233332e33312e302f32342d3234203d3e20323634373338.roa
Signing time:             Tue 05 Mar 2024 18:19:53 +0000
ROA not before:           Tue 05 Mar 2024 18:14:53 +0000
ROA not after:            Tue 04 Mar 2025 18:19:53 +0000
asID:                     264738
IP address blocks:        170.233.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 22 May 2024 10:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:de:16:83:e3:e8:f7:8a:36:06:fd:e1:c5:c7:65:3c:0a:a7:11:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7EE67424E7FC3136531741689B53CDA16769DD7
        Validity
            Not Before: Mar  5 18:14:53 2024 GMT
            Not After : Mar  4 18:19:53 2025 GMT
        Subject: CN=FDF4F003542007406CA27E84204F433793D490C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cb:29:2e:ab:83:5a:a3:29:cc:df:b3:a7:04:
                    1e:e9:78:27:c6:0a:08:2a:7b:76:59:d1:d3:3c:32:
                    9d:77:ff:f6:f4:0a:24:40:2e:8e:7c:00:b3:36:96:
                    28:c8:50:ed:46:18:a7:0a:02:6a:62:de:31:a2:2e:
                    1a:c0:da:1b:0b:29:7e:4b:60:ad:a3:fa:43:34:4e:
                    0a:36:08:64:4d:a5:7d:cb:07:18:d0:df:30:53:c4:
                    34:03:07:6b:2c:02:7f:ee:f2:3a:12:df:39:56:56:
                    dd:ad:bc:b9:34:fa:42:81:04:81:a0:80:05:53:17:
                    fc:4d:ac:bb:0b:cc:0a:18:92:33:6b:bf:de:10:54:
                    60:e4:cc:ba:7e:75:1c:e5:52:8b:5f:5a:ff:25:1a:
                    fd:2f:31:e4:a0:47:4d:19:43:2c:4c:3d:49:88:2a:
                    9d:28:4d:17:82:dd:b2:99:24:6a:1b:74:a4:0c:08:
                    a7:e5:8b:29:98:34:be:7e:1c:39:9b:05:1b:db:f6:
                    c7:59:d3:f5:77:4f:b2:77:57:c1:05:b3:a5:37:00:
                    f5:2c:2d:ea:39:0c:d1:63:09:41:23:5c:8c:5c:a7:
                    d7:cf:b8:ff:ea:62:19:08:98:11:fb:79:28:93:c4:
                    68:c3:a9:23:30:16:3d:05:eb:8a:75:4a:e8:80:70:
                    d1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F4:F0:03:54:20:07:40:6C:A2:7E:84:20:4F:43:37:93:D4:90:C3
            X509v3 Authority Key Identifier:
                keyid:D7:EE:67:42:4E:7F:C3:13:65:31:74:16:89:B5:3C:DA:16:76:9D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/D7EE67424E7FC3136531741689B53CDA16769DD7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7EE67424E7FC3136531741689B53CDA16769DD7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F79AB5BE66A9803D5219845A3724819995932FC9856663D47F42228B2EFEAA32/0/3137302e3233332e33312e302f32342d3234203d3e20323634373338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:63:ab:4c:c6:4e:d0:ef:3d:96:57:38:3e:bf:e0:c7:59:13:
         c6:9d:a1:76:74:5b:bc:de:75:cf:d5:75:09:ce:8c:3b:6b:31:
         25:4e:29:29:cf:0f:f3:e2:ce:5d:cc:95:76:7b:d7:21:d9:b3:
         89:e4:be:70:b8:ab:22:ec:2a:b5:9f:22:aa:8b:65:bf:42:5c:
         61:b8:26:b3:40:b4:1f:33:a3:11:f3:51:1d:0c:4c:04:4a:90:
         92:ad:1b:50:06:8b:e7:d6:cb:03:73:bc:b9:78:24:75:a9:05:
         55:92:a7:fe:fa:29:db:ac:1c:e8:21:c8:63:8c:ed:00:ec:32:
         37:ae:91:3e:c4:3f:c2:cf:46:0b:5e:9e:c0:a0:50:6a:47:f7:
         be:6c:a8:d5:bb:85:28:6e:c7:c9:eb:43:1d:0c:2f:f9:b5:e7:
         4c:94:09:52:22:de:db:3e:cd:80:6e:94:ec:22:43:f3:4c:aa:
         0b:54:16:dd:ec:d5:ee:b8:be:f2:18:6b:e1:97:eb:d4:31:7e:
         98:1a:d7:04:8e:cb:e9:3a:b5:3c:2c:25:9c:95:ce:ed:9a:aa:
         a3:a0:9b:8a:d7:49:0b:85:b1:67:c0:25:5e:35:fc:c3:66:b7:
         41:34:dd:1a:94:ab:5b:7c:47:7a:ac:d1:6a:8a:00:e8:56:0e:
         9e:ac:9d:c7
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUHt4Wg+Po94o2Bv3hxcdlPAqnEXYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdFRTY3NDI0RTdGQzMxMzY1MzE3NDE2ODlCNTNDREEx
Njc2OURENzAeFw0yNDAzMDUxODE0NTNaFw0yNTAzMDQxODE5NTNaMDMxMTAvBgNV
BAMTKEZERjRGMDAzNTQyMDA3NDA2Q0EyN0U4NDIwNEY0MzM3OTNENDkwQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiyykuq4NaoynM37OnBB7peCfG
Cggqe3ZZ0dM8Mp13//b0CiRALo58ALM2lijIUO1GGKcKAmpi3jGiLhrA2hsLKX5L
YK2j+kM0Tgo2CGRNpX3LBxjQ3zBTxDQDB2ssAn/u8joS3zlWVt2tvLk0+kKBBIGg
gAVTF/xNrLsLzAoYkjNrv94QVGDkzLp+dRzlUotfWv8lGv0vMeSgR00ZQyxMPUmI
Kp0oTReC3bKZJGobdKQMCKfliymYNL5+HDmbBRvb9sdZ0/V3T7J3V8EFs6U3APUs
Leo5DNFjCUEjXIxcp9fPuP/qYhkImBH7eSiTxGjDqSMwFj0F64p1SuiAcNEdAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU/fTwA1QgB0Bson6EIE9DN5PUkMMwHwYDVR0j
BBgwFoAU1+5nQk5/wxNlMXQWibU82hZ2ndcwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GNzlBQjVCRTY2QTk4MDNENTIxOTg0NUEzNzI0ODE5OTk1
OTMyRkM5ODU2NjYzRDQ3RjQyMjI4QjJFRkVBQTMyLzAvRDdFRTY3NDI0RTdGQzMx
MzY1MzE3NDE2ODlCNTNDREExNjc2OURENy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EN0VFNjc0MjRFN0ZDMzEzNjUz
MTc0MTY4OUI1M0NEQTE2NzY5REQ3LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjc5QUI1QkU2NkE5ODAzRDUyMTk4NDVBMzcyNDgxOTk5NTkzMkZDOTg1
NjY2M0Q0N0Y0MjIyOEIyRUZFQUEzMi8wLzMxMzczMDJlMzIzMzMzMmUzMzMxMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM0MzczMzM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqukf
MA0GCSqGSIb3DQEBCwUAA4IBAQBXY6tMxk7Q7z2WVzg+v+DHWRPGnaF2dFu83nXP
1XUJzow7azElTikpzw/z4s5dzJV2e9ch2bOJ5L5wuKsi7Cq1nyKqi2W/QlxhuCaz
QLQfM6MR81EdDEwESpCSrRtQBovn1ssDc7y5eCR1qQVVkqf++inbrBzoIchjjO0A
7DI3rpE+xD/Cz0YLXp7AoFBqR/e+bKjVu4UobsfJ60MdDC/5tedMlAlSIt7bPs2A
bpTsIkPzTKoLVBbd7NXuuL7yGGvhl+vUMX6YGtcEjsvpOrU8LCWclc7tmqqjoJuK
10kLhbFnwCVeNfzDZrdBNN0alKtbfEd6rNFqigDoVg6erJ3H
-----END CERTIFICATE-----
Generated at Sat May 18 15:25:24 2024 by rpki-client on console-fra.rpki-client.org