Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa
File:                     3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa (raw, json)
Hash identifier:          goRaIEnyff6IGAV01nhfCaQzGuUxvXrotbhcV9NEaPs=
Subject key identifier:   3D:E5:38:C8:EB:71:F5:1B:A5:E8:20:03:77:40:0F:88:90:03:C8:2B
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       7571B33FFAA25EAC44A122E650C8E340CBD85834
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa
Signing time:             Tue 05 Mar 2024 17:39:49 +0000
ROA not before:           Tue 05 Mar 2024 17:34:49 +0000
ROA not after:            Tue 04 Mar 2025 17:39:49 +0000
asID:                     396982
IP address blocks:        170.247.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:71:b3:3f:fa:a2:5e:ac:44:a1:22:e6:50:c8:e3:40:cb:d8:58:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:49 2024 GMT
            Not After : Mar  4 17:39:49 2025 GMT
        Subject: CN=3DE538C8EB71F51BA5E8200377400F889003C82B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:95:91:5e:d7:95:c7:63:93:fa:4a:d5:8b:
                    a7:34:7e:a5:63:e0:c9:37:c3:a3:07:be:ab:a1:12:
                    83:78:4e:a2:d4:cd:d4:07:dc:f0:b0:d5:88:52:51:
                    42:a5:c0:63:f5:83:31:32:55:26:25:38:9c:fb:4a:
                    f7:55:d1:d1:b5:79:29:ae:04:75:8c:67:c6:a8:8a:
                    39:b1:32:40:9a:f3:92:01:77:63:0a:d9:2b:6e:08:
                    ba:e3:61:d4:57:67:2c:5c:c6:97:c1:b9:e6:da:b5:
                    10:0f:09:c9:32:98:55:91:a4:61:0a:02:7c:fb:14:
                    f0:af:56:5f:c6:c6:09:cc:3b:6d:37:82:37:b2:ae:
                    d5:6b:f4:6d:84:c6:b3:09:72:1c:ee:5a:72:dd:ad:
                    da:82:87:80:83:ba:57:b1:9f:eb:16:aa:9b:93:e1:
                    f9:11:56:f3:bd:9a:9a:b1:56:6d:4b:cc:67:13:97:
                    b1:a9:dd:7c:bd:56:00:a3:56:df:23:f8:dd:54:23:
                    81:62:be:10:27:ab:f2:55:7e:95:34:a1:1e:bb:61:
                    47:35:6d:d0:0c:df:b5:76:7f:31:a1:d0:50:a2:38:
                    70:3c:1f:95:6a:d0:5d:f0:89:96:47:e9:ef:7d:e8:
                    c6:c3:9b:af:68:2c:44:56:15:b5:ba:86:ed:cf:f1:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:38:C8:EB:71:F5:1B:A5:E8:20:03:77:40:0F:88:90:03:C8:2B
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137312e302f32342d3234203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:b6:6d:cb:23:08:16:df:b8:33:ab:13:47:a6:ae:c4:0d:78:
         36:40:cb:c3:db:73:2e:36:1a:91:b7:01:7c:c8:5a:2b:15:43:
         9a:1c:98:8b:17:6a:42:ce:23:d5:6d:01:a5:33:3e:a8:ec:b5:
         95:5d:56:51:d3:69:1d:cc:c8:af:b6:e4:7e:54:6f:fc:ba:e6:
         4a:b6:76:78:9c:1d:c0:90:47:05:16:cd:39:c4:46:b6:5e:07:
         31:0a:71:db:f0:46:82:c8:f7:17:d1:c4:83:21:05:2d:de:33:
         77:35:b4:e7:04:09:45:90:8c:89:e4:ae:d9:62:21:0e:ee:f6:
         aa:14:37:68:b5:a7:7b:16:d7:03:db:17:d6:07:f5:3f:c1:b4:
         9c:04:c9:eb:31:a5:23:6f:1e:ff:c9:2c:b7:de:bf:40:fb:64:
         54:b7:d0:4f:28:d4:6d:0c:4d:83:b5:55:c2:d8:cb:d0:ad:17:
         68:9a:5a:c4:d6:8d:fd:7f:9f:7f:9c:bc:b9:f3:59:06:60:5f:
         f3:68:be:62:29:3d:6b:40:34:61:88:95:83:25:51:85:08:b8:
         03:c1:88:6b:2e:bd:16:a6:d4:61:f3:46:92:b2:99:ea:7b:cd:
         a1:53:4e:07:b6:a0:97:c1:63:5b:fe:03:8d:51:5f:17:fe:35:
         c6:83:e9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:32:04 2024 by rpki-client on console-fra.rpki-client.org