Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3137302e3234362e39322e302f32322d3232203d3e203631333137.roa
File:                     3137302e3234362e39322e302f32322d3232203d3e203631333137.roa (raw, json)
Hash identifier:          AZg8K7bmI2AhutHxv4zgBwYbstg6vAbF8CfhiR44KQY=
Subject key identifier:   CB:BA:53:D7:A6:70:0B:CE:FF:9B:40:78:B7:FA:BE:D0:D1:38:5A:68
Certificate issuer:       /CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
Certificate serial:       29205656CCCE4D2234A29F81D37B3E8775434D44
Authority key identifier: 0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3137302e3234362e39322e302f32322d3232203d3e203631333137.roa
Signing time:             Tue 05 Mar 2024 18:01:30 +0000
ROA not before:           Tue 05 Mar 2024 17:56:30 +0000
ROA not after:            Tue 04 Mar 2025 18:01:30 +0000
asID:                     61317
IP address blocks:        170.246.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl
                          rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:20:56:56:cc:ce:4d:22:34:a2:9f:81:d3:7b:3e:87:75:43:4d:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F5F9A2CF444A9C495532D9BB5295457EA53D556
        Validity
            Not Before: Mar  5 17:56:30 2024 GMT
            Not After : Mar  4 18:01:30 2025 GMT
        Subject: CN=CBBA53D7A6700BCEFF9B4078B7FABED0D1385A68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c8:9d:d0:fb:8c:95:13:25:08:1f:8a:7a:14:
                    ad:66:5d:4b:80:1a:0d:53:ef:f9:e7:2b:5b:68:ae:
                    96:0c:1d:33:d4:eb:a1:f4:5b:51:88:9c:45:b5:6c:
                    7a:fd:75:0a:f9:7e:3b:d5:53:b6:b0:00:61:0a:65:
                    82:87:99:ce:fb:cc:32:f3:c1:38:a0:97:7f:96:39:
                    44:15:d1:eb:cb:78:c5:f5:ac:4e:84:11:b8:1f:df:
                    df:3c:2d:bd:36:f9:7a:1d:57:0a:3a:74:de:a4:53:
                    fc:e9:ac:fe:fc:f0:07:07:11:79:c8:04:68:65:fb:
                    d9:70:cd:4b:3e:dc:dd:e1:ad:6f:5d:ff:1e:12:62:
                    56:bf:2b:47:10:f3:1e:04:a3:9d:b5:9b:8a:61:fc:
                    aa:b4:58:74:1b:87:03:be:83:4c:7c:a0:56:da:64:
                    72:76:12:2b:f2:91:5c:38:9e:57:97:0f:49:85:b8:
                    f4:42:16:13:34:bc:98:fa:60:b3:19:f7:52:fc:3b:
                    27:6a:fd:d9:8e:6b:30:6f:c7:d2:a1:12:1b:f6:83:
                    19:c5:cd:c4:74:2c:87:85:89:bf:5a:ce:84:0b:47:
                    b9:60:86:d1:1e:ba:43:43:40:25:5c:7d:90:e9:cf:
                    b6:a1:ae:36:10:cb:6b:f2:63:4f:9e:e3:1d:71:66:
                    9e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:53:D7:A6:70:0B:CE:FF:9B:40:78:B7:FA:BE:D0:D1:38:5A:68
            X509v3 Authority Key Identifier:
                keyid:0F:5F:9A:2C:F4:44:A9:C4:95:53:2D:9B:B5:29:54:57:EA:53:D5:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0F5F9A2CF444A9C495532D9BB5295457EA53D556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23E617E35A22CB3E302F33F7ED9CCEDE0BC22578206C8E67E93029652F51A7DC/0/3137302e3234362e39322e302f32322d3232203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:93:aa:90:94:63:44:e8:e6:28:59:4e:8a:5d:f4:09:e8:29:
         98:62:00:0a:f6:50:5a:d1:1e:56:c1:a5:34:e0:76:52:f2:2c:
         df:6a:dc:de:81:14:15:94:ef:10:2f:ab:a8:07:98:95:81:9e:
         d6:62:a0:f9:4c:52:cc:98:49:23:c2:ae:ca:54:4b:e2:e6:f8:
         94:46:c9:92:63:61:ca:c4:5a:9f:c4:5e:b2:b5:cc:8e:c8:66:
         c4:50:02:27:6f:5e:04:4b:1d:83:ac:94:2b:cf:11:9a:cf:e8:
         67:8c:be:fd:d0:68:ac:05:46:1f:9c:f2:1b:e6:9b:60:c3:d4:
         3c:ee:cd:a9:bb:00:92:da:8a:2c:f2:a3:7f:05:6d:cc:4a:2b:
         d9:c1:1b:95:77:e2:83:57:55:26:e9:7b:a3:2e:2f:d1:a1:95:
         d0:71:fc:7a:a7:3a:6f:39:05:b9:c3:54:c0:db:be:c7:71:a0:
         9b:53:e1:26:30:c4:9a:a5:a4:fe:6a:85:9a:2e:2a:a5:4a:75:
         60:f5:1a:93:1a:0e:1d:73:38:9f:e2:f0:b1:40:c0:ed:ee:bf:
         0e:d6:06:d6:b6:6b:84:15:d7:dd:9b:fd:d7:90:33:b8:c4:d9:
         85:98:21:c4:c5:82:b6:1e:94:50:98:bd:3e:ba:bb:3c:8c:ee:
         07:37:e8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org