Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3135362e302f32322d3234203d3e20323635363331.roa
File:                     3137302e3234342e3135362e302f32322d3234203d3e20323635363331.roa (raw, json)
Hash identifier:          /RbwT8yWJZSrMWCN+l7LuY1qdsX7oPZZyUxeZLzHS9s=
Subject key identifier:   15:D2:29:9B:B1:E9:75:0D:D2:9D:10:A1:0E:DB:54:CC:66:C5:41:F0
Certificate issuer:       /CN=A309E2A48572D6A82E05CA806C7D2108377001D8
Certificate serial:       375BFE80D5047ED22BAD4185F5494EE316C2C6D1
Authority key identifier: A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3135362e302f32322d3234203d3e20323635363331.roa
Signing time:             Tue 05 Mar 2024 18:08:04 +0000
ROA not before:           Tue 05 Mar 2024 18:03:04 +0000
ROA not after:            Tue 04 Mar 2025 18:08:04 +0000
asID:                     265631
IP address blocks:        170.244.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5b:fe:80:d5:04:7e:d2:2b:ad:41:85:f5:49:4e:e3:16:c2:c6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A309E2A48572D6A82E05CA806C7D2108377001D8
        Validity
            Not Before: Mar  5 18:03:04 2024 GMT
            Not After : Mar  4 18:08:04 2025 GMT
        Subject: CN=15D2299BB1E9750DD29D10A10EDB54CC66C541F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7c:20:f5:2e:fd:47:71:07:8e:4b:1e:0f:41:
                    7a:36:c2:26:18:db:80:10:74:c0:12:51:63:7d:68:
                    e7:ca:8d:3b:ec:7a:ee:7a:97:fa:bd:cc:8c:88:9f:
                    1d:85:1e:65:09:33:eb:53:e2:33:45:a5:b6:55:ef:
                    c6:53:11:49:7e:64:68:f5:5a:f1:de:87:e6:c8:23:
                    8c:96:57:af:35:04:92:e2:c1:d5:2a:47:bd:79:1e:
                    8b:94:83:a0:8a:d7:55:0a:57:e6:1c:ca:c6:f2:19:
                    3f:4d:01:8c:bc:9d:dd:a8:df:b3:e8:63:d8:89:67:
                    0c:1d:30:bb:e6:22:07:0e:0e:93:cc:44:ef:bd:e3:
                    ff:64:ca:ae:63:48:2b:d9:1e:61:f0:d1:9f:7d:65:
                    79:6c:5d:9c:cb:00:37:12:db:31:b4:e9:76:48:e8:
                    74:2e:a7:97:c5:b6:b5:9d:0a:d6:e6:48:95:4e:ff:
                    b2:a9:90:b3:1c:94:d5:54:7b:8a:34:06:87:df:7e:
                    7e:2a:ab:4a:02:10:fe:23:0d:e8:51:37:23:c7:ca:
                    c2:7c:a4:17:8d:94:94:4f:10:2f:5c:21:76:a6:d3:
                    ff:00:51:a0:57:c4:bb:22:33:f0:30:06:ae:eb:5c:
                    1a:e8:aa:32:51:f9:35:4a:07:5d:62:18:7c:48:50:
                    4a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:D2:29:9B:B1:E9:75:0D:D2:9D:10:A1:0E:DB:54:CC:66:C5:41:F0
            X509v3 Authority Key Identifier:
                keyid:A3:09:E2:A4:85:72:D6:A8:2E:05:CA:80:6C:7D:21:08:37:70:01:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/A309E2A48572D6A82E05CA806C7D2108377001D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A309E2A48572D6A82E05CA806C7D2108377001D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/178D44243B7EB62CED10BC816A4F79EC3CA6F407C96BE8BF7645BB7B032D390E/0/3137302e3234342e3135362e302f32322d3234203d3e20323635363331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:55:19:5f:61:5f:a3:8f:67:bf:2f:fe:4b:7f:73:2c:8e:7a:
         df:46:e3:a9:e7:21:a8:9b:13:75:d1:5f:c5:77:b0:52:04:43:
         66:ee:03:ce:d2:2c:96:d6:60:3c:8c:70:a6:18:f2:82:91:7e:
         06:1b:6e:6f:0d:ff:2e:2e:99:fe:76:cf:3e:93:29:d6:8d:2b:
         5e:8d:bd:35:2d:dd:1b:c2:7f:52:b9:40:d5:1b:0a:8d:a2:c7:
         f8:b6:e3:53:d9:82:7e:5b:7d:57:23:e9:52:e9:86:10:31:64:
         09:8c:f6:17:df:d4:bb:b4:42:9a:13:85:a4:77:1b:65:ac:5e:
         8a:ae:51:a7:e1:2c:b2:0b:08:3c:c8:83:9a:0b:c3:2f:7a:5c:
         e1:82:b5:61:f3:ab:a7:1e:f0:26:5f:11:ec:56:65:9b:21:9e:
         f4:3a:e0:15:fd:76:91:5c:20:10:0f:e5:e2:6b:31:4b:cb:82:
         de:50:7f:e6:17:78:17:9d:7f:15:1d:d5:3c:cd:96:5f:ee:c1:
         6c:9b:aa:9f:1a:c8:59:32:45:80:1f:b9:6c:d4:3a:1a:10:85:
         c7:7f:eb:74:bf:a1:c6:12:33:35:a4:f7:03:e3:43:d3:6e:4a:
         63:c3:68:86:ea:5e:86:c9:8c:37:51:9d:e6:e5:7f:04:f6:d5:
         17:14:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org