Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa
File:                     3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa (raw, json)
Hash identifier:          cW0OvSG+yHNcJsG9LqxPQeWTcFKn53k5s9vzPwhfKQk=
Subject key identifier:   43:A7:67:DF:17:0E:0B:15:17:FC:00:95:0D:D5:C5:0C:5B:73:A3:5D
Certificate issuer:       /CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
Certificate serial:       0DA8E042C54DDE916F1A0964CF029AFD44AB93E9
Authority key identifier: 16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa
Signing time:             Tue 05 Mar 2024 18:08:35 +0000
ROA not before:           Tue 05 Mar 2024 18:03:35 +0000
ROA not after:            Tue 04 Mar 2025 18:08:35 +0000
asID:                     265648
IP address blocks:        170.246.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a8:e0:42:c5:4d:de:91:6f:1a:09:64:cf:02:9a:fd:44:ab:93:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1655015D0CFFC00B88C76A99B46DC5A567F0A0B0
        Validity
            Not Before: Mar  5 18:03:35 2024 GMT
            Not After : Mar  4 18:08:35 2025 GMT
        Subject: CN=43A767DF170E0B1517FC00950DD5C50C5B73A35D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:5d:d9:e7:c8:18:fe:13:ea:f2:d4:5a:db:
                    07:e7:b4:86:c4:14:14:ef:e2:ed:a2:2b:54:fc:ac:
                    7b:e1:37:44:5c:ad:4b:df:20:72:84:6d:96:92:cb:
                    37:04:a4:e1:5c:cc:64:88:ad:cb:6b:a5:ce:94:54:
                    87:65:89:81:d0:15:f8:89:2a:b0:38:9f:9f:ad:d8:
                    59:74:20:39:ac:05:e5:cd:60:2c:d2:5d:5f:3b:14:
                    6f:9f:a8:0b:5e:54:0e:ff:64:de:be:ab:16:6e:bc:
                    9b:92:b0:47:0e:7c:a8:5b:67:b9:1c:13:0c:01:c9:
                    df:3c:fe:98:d1:23:04:c7:ec:0b:cd:e0:7c:f8:3a:
                    fa:ee:77:78:6e:13:e1:65:45:78:7a:ab:74:ef:fe:
                    a1:5f:f9:85:f0:ef:12:b8:95:8f:f9:a6:cc:4d:7b:
                    96:d0:4d:bc:00:38:9a:90:00:64:b5:92:97:2e:59:
                    46:d3:99:98:42:91:ab:c8:8f:f5:da:df:8e:cc:63:
                    18:0d:30:78:f8:5c:05:40:d6:b9:b0:30:70:82:3d:
                    06:35:fa:98:45:57:b4:72:5a:d3:aa:da:5d:91:34:
                    21:b4:35:9c:71:8a:99:23:38:70:42:c3:7d:da:aa:
                    a8:61:36:42:73:6b:24:99:15:f1:5a:bf:fe:70:07:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A7:67:DF:17:0E:0B:15:17:FC:00:95:0D:D5:C5:0C:5B:73:A3:5D
            X509v3 Authority Key Identifier:
                keyid:16:55:01:5D:0C:FF:C0:0B:88:C7:6A:99:B4:6D:C5:A5:67:F0:A0:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1655015D0CFFC00B88C76A99B46DC5A567F0A0B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3C24DE46ACE7C71DE278B07160A5FB7C11C48EFAB803AB5857518FBE79C7395C/0/3137302e3234362e3137362e302f32322d3232203d3e20323635363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:2a:dc:1a:9d:2a:cd:b9:4c:4d:4b:52:3c:e3:55:99:d0:84:
         1a:95:ae:26:93:62:d1:32:5b:d9:b6:0b:b6:a2:37:ae:a5:3f:
         ac:86:7a:43:50:8a:5a:88:88:95:c2:3b:c9:94:43:15:64:55:
         9f:4a:07:69:40:4b:b9:c2:54:ef:82:10:d1:e2:87:67:67:21:
         5c:59:fa:b6:fe:aa:c5:ed:ce:df:d8:f1:c9:39:f2:1f:39:d7:
         fe:cb:26:26:ec:68:01:4f:97:03:b6:73:69:70:e8:cf:47:2e:
         e6:10:01:84:dc:b6:05:0c:f0:85:fe:44:e0:91:31:5b:cf:c7:
         5a:9b:a3:a5:e2:78:86:cb:6f:54:d3:48:c5:6c:ba:44:44:52:
         31:bc:4c:05:4f:d0:8a:38:e8:7b:b5:c9:db:12:d3:bb:86:09:
         e5:89:d7:e3:92:ce:15:3f:ee:25:63:77:93:0b:66:28:a7:c0:
         38:78:8d:d8:12:05:48:90:f9:31:ba:28:65:fd:75:d7:6b:7d:
         f8:71:e7:14:9c:82:0c:bb:aa:7c:fb:82:fe:98:a5:10:4e:63:
         6e:6e:6f:4b:18:b0:b4:4f:07:d1:ca:a1:77:2c:54:61:92:47:
         e1:c3:15:ee:2d:76:cb:0b:ef:10:73:41:1f:07:8f:42:eb:8f:
         7f:9a:3d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:17 2024 by rpki-client on console-ams.rpki-client.org