Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa
File:                     3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa (raw, json)
Hash identifier:          TC09yhiiJH5sj0J9zFJiYqAe5H8/uFQutkzN04Kag5I=
Subject key identifier:   4A:A0:E3:0F:9A:57:67:D2:9C:E8:65:DE:F0:42:3E:35:21:FC:69:8E
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       7104417CB0C4AB410382EAA43799A5E2C40C5687
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa
Signing time:             Tue 05 Mar 2024 17:47:55 +0000
ROA not before:           Tue 05 Mar 2024 17:42:55 +0000
ROA not after:            Tue 04 Mar 2025 17:47:55 +0000
asID:                     394474
IP address blocks:        170.254.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 09 Sep 2024 07:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:04:41:7c:b0:c4:ab:41:03:82:ea:a4:37:99:a5:e2:c4:0c:56:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:55 2024 GMT
            Not After : Mar  4 17:47:55 2025 GMT
        Subject: CN=4AA0E30F9A5767D29CE865DEF0423E3521FC698E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c5:eb:3a:92:96:da:0d:cf:bc:43:b0:b4:a8:
                    59:f3:c2:44:13:8b:78:69:b3:2d:6c:7f:4a:dc:f4:
                    24:a8:13:d4:84:38:61:e0:09:2f:66:14:ab:76:7c:
                    7d:b6:d6:3b:d8:3b:20:1a:6e:ea:c0:28:a7:57:60:
                    08:64:77:14:bf:34:ad:65:c7:d9:19:b9:3b:38:dc:
                    5d:4b:58:e4:ab:15:3a:0f:82:e7:ff:6a:a6:50:d9:
                    38:7c:ec:cc:75:dc:d5:50:5e:7a:62:2a:73:88:d3:
                    96:e1:79:d7:73:ca:36:95:cc:60:98:a7:fe:43:3b:
                    4b:4e:1f:7f:4e:af:58:ec:61:e1:6b:4c:ba:db:44:
                    fe:82:3b:e9:ad:5f:63:bc:bc:18:fc:d7:80:ae:ba:
                    3d:e1:34:88:41:7b:b0:e3:98:e9:5c:d2:00:5a:f8:
                    f2:96:ab:9c:85:ce:18:6a:95:a9:3e:e7:97:ef:7c:
                    1a:48:a0:11:e3:4f:a3:74:71:0f:5f:3b:ba:32:d2:
                    d8:8d:05:e6:87:1c:0b:96:aa:25:91:eb:83:de:a8:
                    39:63:14:58:03:34:a2:45:41:47:1e:da:cb:b1:5d:
                    f1:a0:cb:f7:06:e6:29:af:41:30:07:06:05:68:15:
                    a6:37:53:48:d6:3c:23:c6:52:a4:42:37:d0:8c:ee:
                    0f:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:A0:E3:0F:9A:57:67:D2:9C:E8:65:DE:F0:42:3E:35:21:FC:69:8E
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137302e3235342e3137362e302f32322d3232203d3e20333934343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5a:c3:36:cd:eb:4d:d5:6f:8a:e5:fa:2a:be:eb:49:31:0a:95:
         d1:29:77:2f:57:d5:1b:6c:d7:90:83:30:b5:63:b3:18:6b:f7:
         c4:21:ed:c8:7e:5e:3c:2c:6e:99:b3:e1:40:af:a7:34:85:c3:
         9c:4a:a3:1a:3e:20:70:cb:76:2a:45:cf:fc:cc:a1:04:59:04:
         f7:e3:13:72:f4:58:2a:17:ef:3f:f1:64:96:f4:53:66:0e:58:
         17:d0:a8:ed:a0:6e:9b:eb:53:2f:33:c2:09:1f:82:4a:cf:d3:
         9c:10:4a:c0:0d:e8:ab:aa:99:48:ff:41:82:e2:45:df:3a:85:
         c1:78:3c:b6:db:62:73:55:4c:08:40:5e:dd:5e:74:48:0d:e5:
         b8:41:ad:71:9b:31:11:c7:56:97:f1:8b:49:dc:69:c1:59:df:
         3b:73:f3:4c:23:c2:72:d7:71:92:6b:53:75:69:30:3f:f2:27:
         c5:bb:af:05:b7:ef:6f:d5:d0:1b:72:99:74:0d:cc:c1:15:2e:
         23:70:ca:ee:36:9b:ce:81:c9:fc:71:bb:75:4d:00:d4:c6:61:
         65:6f:12:31:8b:c7:93:d6:e4:31:40:b9:20:c4:61:89:be:c0:
         88:f8:5e:10:02:3c:36:89:b5:a1:98:ec:8c:62:eb:05:a7:a2:
         b6:4f:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 06:32:43 2024 by rpki-client on console-ams.rpki-client.org