Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa
File:                     3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa (raw, json)
Hash identifier:          Ta29OXbn5+Zyv26bzf/oseibW4jTNMpSAkzB34Dw/3s=
Subject key identifier:   28:7D:AB:F0:14:EB:FC:93:78:E4:2F:38:C2:6A:69:82:9B:05:1B:CB
Certificate issuer:       /CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
Certificate serial:       6113F9B9F5F46DD6C670DAE6B5EF0DA71C123E55
Authority key identifier: BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa
Signing time:             Tue 05 Mar 2024 17:55:35 +0000
ROA not before:           Tue 05 Mar 2024 17:50:35 +0000
ROA not after:            Tue 04 Mar 2025 17:55:35 +0000
asID:                     263244
IP address blocks:        170.247.140.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:13:f9:b9:f5:f4:6d:d6:c6:70:da:e6:b5:ef:0d:a7:1c:12:3e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCDD50591AFBE01DD1E89006B709D14B69D79567
        Validity
            Not Before: Mar  5 17:50:35 2024 GMT
            Not After : Mar  4 17:55:35 2025 GMT
        Subject: CN=287DABF014EBFC9378E42F38C26A69829B051BCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c1:42:fd:d5:b0:0d:00:fc:68:58:0b:e5:e7:
                    43:4c:68:d1:26:d0:39:63:db:d9:37:88:a6:8e:2a:
                    35:53:d0:63:88:7b:ab:28:83:3d:e6:4d:70:c2:e8:
                    09:70:87:00:88:6c:ab:83:e2:70:b8:fe:ba:a0:4d:
                    88:e4:7e:7d:99:f8:1f:90:af:c3:74:f6:27:ae:42:
                    17:4e:3b:97:fd:22:12:3b:99:71:fa:02:48:94:3c:
                    93:d4:9a:3a:2e:ac:17:4e:6d:ca:9c:74:dd:6d:69:
                    68:f8:b2:65:97:5e:d2:ae:fb:99:9f:b6:95:b4:52:
                    c0:21:e0:4a:ed:c9:4e:8c:e0:ce:76:a3:b7:6f:d2:
                    cf:92:90:7c:98:3a:0e:75:77:77:3e:a7:73:be:fd:
                    be:ff:00:df:09:3a:04:b9:c5:f4:77:5d:e0:b7:be:
                    33:6b:76:3c:23:d9:92:dc:0c:e5:62:36:94:ff:92:
                    32:ba:24:4d:0a:f6:3d:c4:bb:7f:71:eb:ac:be:6a:
                    99:3e:75:9c:5d:f4:c2:cf:b7:3c:61:6b:7b:46:d8:
                    32:ad:1a:bb:f7:dc:97:af:df:3d:0b:cc:4b:25:ee:
                    62:55:ef:82:05:70:86:a1:24:d8:29:6a:90:82:42:
                    92:9b:ec:d1:d8:54:4a:6e:35:b5:f4:64:86:88:c8:
                    1a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7D:AB:F0:14:EB:FC:93:78:E4:2F:38:C2:6A:69:82:9B:05:1B:CB
            X509v3 Authority Key Identifier:
                keyid:BC:DD:50:59:1A:FB:E0:1D:D1:E8:90:06:B7:09:D1:4B:69:D7:95:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCDD50591AFBE01DD1E89006B709D14B69D79567.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0B542E8C503E74431FD217F5A298A2E53346830CE5559179E9872984FD99DAF3/0/3137302e3234372e3134302e302f32322d3234203d3e20323633323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3f:8b:72:ea:fc:ff:65:22:c2:1e:6d:90:68:ac:3c:bb:19:7c:
         b5:b7:a5:59:f4:34:6a:57:3c:46:9b:7e:0f:d5:40:4a:9e:1a:
         9e:28:03:17:38:d1:65:54:d8:48:d0:48:d0:24:d3:f8:e8:67:
         35:57:fb:6b:90:20:dc:b9:e4:7c:69:52:89:74:0e:98:66:52:
         7a:5a:b3:78:f7:6c:e4:ef:f7:d2:af:e0:fc:b6:c3:c3:3d:dd:
         2b:f1:e2:7f:41:2c:a9:3a:5f:82:07:7d:e4:62:c2:ab:e1:1e:
         62:56:fb:ea:73:26:05:ee:0f:5d:7a:b7:86:c4:80:11:46:81:
         bb:87:4f:f4:fc:8a:a9:52:8b:8b:8a:f2:51:33:5a:78:68:90:
         d9:89:05:60:40:27:c4:5d:01:df:4c:6d:80:3f:12:ac:0b:b0:
         0d:a3:0f:0b:54:50:08:60:d4:36:f3:a3:95:14:35:64:de:6e:
         9e:b5:4e:57:4a:ae:2d:be:d4:fb:74:a7:b8:51:4e:d8:e9:c5:
         c4:fd:4b:97:2d:fa:26:8e:07:13:b4:e7:00:87:54:66:d0:f3:
         b7:f6:0d:33:19:18:9c:bd:5b:eb:5d:b4:c0:19:69:68:9e:ba:
         85:a3:5f:8a:6d:b7:35:37:ff:17:a6:1c:a1:fa:4a:81:9e:bd:
         45:f7:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 12:55:59 2024 by rpki-client on console-fra.rpki-client.org