Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa
File:                     3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa (raw, json)
Hash identifier:          AKSkk5IG5xdGf4JCjfaLKH8wALBmeJQknBtlsATtHG0=
Subject key identifier:   37:0E:01:7C:A9:8D:81:5F:8D:58:35:F3:27:40:F7:5C:76:A5:85:31
Certificate issuer:       /CN=125312172ACB5206FC23726C19566C8F6B3F0B99
Certificate serial:       5C2D722E9985CD01F86F2ACD481ECA14C1456ABC
Authority key identifier: 12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa
Signing time:             Tue 05 Mar 2024 18:22:19 +0000
ROA not before:           Tue 05 Mar 2024 18:17:19 +0000
ROA not after:            Tue 04 Mar 2025 18:22:19 +0000
asID:                     265646
IP address blocks:        170.247.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl
                          rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2d:72:2e:99:85:cd:01:f8:6f:2a:cd:48:1e:ca:14:c1:45:6a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=125312172ACB5206FC23726C19566C8F6B3F0B99
        Validity
            Not Before: Mar  5 18:17:19 2024 GMT
            Not After : Mar  4 18:22:19 2025 GMT
        Subject: CN=370E017CA98D815F8D5835F32740F75C76A58531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:1c:1a:91:4d:8e:18:a8:67:d5:06:b2:fa:af:
                    06:11:44:6d:15:06:98:73:e3:7b:7f:ee:38:78:05:
                    24:3e:7a:a3:ba:04:aa:87:e2:d1:dc:f0:f4:97:94:
                    54:2a:82:a0:10:d7:82:6c:1a:59:4a:cc:27:11:44:
                    98:85:ac:c4:fd:9c:56:8d:43:b1:c9:1c:10:fd:2b:
                    8a:b4:36:81:f1:0b:45:e5:af:d7:58:fc:35:85:17:
                    d3:74:64:cf:c9:92:b1:00:4d:b9:fa:f7:24:cb:67:
                    ac:6e:0b:86:c9:a3:d5:b6:51:7c:fe:35:5e:d1:63:
                    36:4a:d3:07:3c:bc:67:ed:35:89:4d:df:8c:ec:bf:
                    50:fc:7e:78:ef:b9:ad:fa:48:3c:08:36:85:1a:6a:
                    89:4e:89:e3:73:b6:c3:9d:a5:01:39:d4:9c:aa:86:
                    b3:d4:af:d9:ee:13:51:dd:d9:41:72:30:8b:e0:25:
                    d2:00:2b:9b:db:0b:f9:ac:fb:91:2c:1a:8f:32:e2:
                    a3:08:47:40:55:0c:aa:f9:54:61:64:cf:30:a6:a0:
                    3d:d3:0e:6c:b0:24:64:d2:d4:c1:2d:5a:05:cb:e5:
                    4a:a7:07:6f:9e:35:9a:40:1f:94:7e:44:3b:80:a0:
                    a4:91:6b:d2:68:4d:78:fc:95:1a:47:0c:31:7e:36:
                    c9:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:0E:01:7C:A9:8D:81:5F:8D:58:35:F3:27:40:F7:5C:76:A5:85:31
            X509v3 Authority Key Identifier:
                keyid:12:53:12:17:2A:CB:52:06:FC:23:72:6C:19:56:6C:8F:6B:3F:0B:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/125312172ACB5206FC23726C19566C8F6B3F0B99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/125312172ACB5206FC23726C19566C8F6B3F0B99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/09F9E0A0FA6F9AC66A133D8A8EEC5686AF036E3DF09331A90EC1F99B02D94088/0/3137302e3234372e35362e302f32322d3234203d3e20323635363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:df:2c:33:58:f4:43:73:28:5a:bc:6b:8d:73:b7:7d:17:83:
         ef:18:48:75:c6:08:e8:95:c8:5e:60:38:d4:47:e9:71:fd:06:
         cf:11:76:7c:20:ee:19:8d:b1:bb:ff:a0:d7:e0:bd:9d:d4:fe:
         12:7b:33:5c:86:27:6f:da:f1:57:45:77:2d:1b:f9:8f:d3:88:
         81:79:21:46:90:46:77:fc:d4:b0:c9:b4:a2:44:78:8a:9a:11:
         c3:06:70:19:66:81:f2:4b:96:1c:9d:2b:1c:74:ef:f0:32:cc:
         e3:2e:f5:4f:63:8c:99:99:ec:fa:83:f0:79:71:50:b8:0e:da:
         4b:58:71:56:a9:da:0d:0d:df:58:79:dd:69:64:2a:84:d1:07:
         4c:d4:50:79:46:4f:8d:04:1d:bb:16:58:a0:25:77:ad:ec:46:
         b4:a9:ce:37:29:f6:38:94:c1:7a:7a:30:30:5a:be:1d:c7:6a:
         6f:f3:81:a7:ff:ff:69:fd:e2:0c:14:04:4f:cf:12:b1:fe:d2:
         50:ce:9c:d1:3f:8b:2f:15:fb:a8:58:0c:c7:48:3b:b3:06:e2:
         cc:44:58:e1:2c:33:d4:86:53:c0:fd:fc:b0:e3:f8:41:30:f5:
         42:a2:87:ed:22:df:c3:8f:74:c8:1d:16:a3:11:4b:12:13:fc:
         9f:d7:90:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:48 2024 by rpki-client on console-ams.rpki-client.org