Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa
File:                     3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa (raw, json)
Hash identifier:          vrw9sJu+/JuTtvPAYjZP9Te7qTFr1pe33+WUHWXLJfI=
Subject key identifier:   61:8D:68:F0:BC:A8:19:23:0D:AF:08:C3:FF:8F:66:4E:E9:DB:26:5A
Certificate issuer:       /CN=C0F6964EC633B0BAF89882075AF904AE53B0AD07
Certificate serial:       5E4879506EADBA5C7F5DE3DA762FCA7EC68BBD24
Authority key identifier: C0:F6:96:4E:C6:33:B0:BA:F8:98:82:07:5A:F9:04:AE:53:B0:AD:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa
Signing time:             Tue 05 Mar 2024 18:11:44 +0000
ROA not before:           Tue 05 Mar 2024 18:06:44 +0000
ROA not after:            Tue 04 Mar 2025 18:11:44 +0000
asID:                     265653
IP address blocks:        170.246.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:48:79:50:6e:ad:ba:5c:7f:5d:e3:da:76:2f:ca:7e:c6:8b:bd:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0F6964EC633B0BAF89882075AF904AE53B0AD07
        Validity
            Not Before: Mar  5 18:06:44 2024 GMT
            Not After : Mar  4 18:11:44 2025 GMT
        Subject: CN=618D68F0BCA819230DAF08C3FF8F664EE9DB265A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bd:cf:79:8a:2d:cb:7f:21:13:05:ad:3f:80:
                    f8:93:78:c0:3a:0e:dd:95:a1:df:16:0e:d0:00:ac:
                    4d:9f:95:40:a5:84:7e:06:16:aa:c6:9d:03:cb:3d:
                    cb:78:a5:a0:65:c9:00:96:d9:b7:58:2e:b5:29:ca:
                    79:8e:d2:07:98:76:31:28:aa:33:f1:73:6c:cc:70:
                    93:23:60:8c:14:4c:d5:ea:56:a5:e4:3f:74:7b:9b:
                    82:28:93:c4:b2:ed:ef:a4:22:79:5a:04:12:fd:1e:
                    ae:8e:5b:de:7a:6e:49:7b:3a:7d:75:04:0e:89:0e:
                    67:70:2e:5b:9e:91:34:09:cb:c4:12:1c:ca:5b:72:
                    4f:6e:02:84:b5:93:ff:b7:58:e2:ee:11:dd:71:85:
                    0e:c4:c4:c7:a8:ca:50:fe:fe:02:b5:ca:1e:ca:53:
                    68:e1:be:e3:db:9a:70:7a:5f:7c:e8:51:82:17:b5:
                    89:14:67:26:67:89:09:07:4c:ab:63:19:d8:20:fa:
                    8f:39:ae:e8:e1:a8:00:75:89:05:ea:d1:75:79:3e:
                    9b:12:06:7a:32:4f:1f:43:43:cf:bf:53:de:e6:64:
                    b6:8e:3d:1e:05:83:84:58:f7:e6:c0:97:22:f2:35:
                    60:5c:21:22:dd:02:0a:91:00:eb:ba:32:77:fc:8b:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8D:68:F0:BC:A8:19:23:0D:AF:08:C3:FF:8F:66:4E:E9:DB:26:5A
            X509v3 Authority Key Identifier:
                keyid:C0:F6:96:4E:C6:33:B0:BA:F8:98:82:07:5A:F9:04:AE:53:B0:AD:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0F6964EC633B0BAF89882075AF904AE53B0AD07.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3CDDD6ECCAF5CA850AB1E4B433FB47DFAC78429FFC0C61A4E54482609CE9B09D/0/3137302e3234362e33362e302f32322d3232203d3e20323635363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:5d:6d:31:62:c2:72:94:a8:6b:33:4b:08:2e:71:13:ae:78:
         a2:ca:d6:1e:3f:ec:22:f2:fd:71:96:41:65:0f:7e:b9:b8:a5:
         a7:81:8d:65:9a:79:e4:2e:dc:8b:8b:7d:a7:8d:39:ab:09:f1:
         c5:6a:e9:64:68:fe:64:a1:59:6a:5e:26:06:e5:c8:f2:22:94:
         1c:47:6c:57:d9:cb:77:b1:0f:ab:49:1e:54:b6:5f:b7:04:db:
         96:62:ed:a0:7d:90:71:06:5a:27:fe:d8:35:5d:b9:f3:25:fd:
         ef:24:c1:90:ac:11:be:0d:a9:dd:e8:7b:13:a4:41:68:5f:74:
         75:0a:28:77:91:08:43:00:e5:fc:2d:3d:b4:64:d0:4c:bf:03:
         20:64:b1:03:fe:c8:38:6f:ae:29:fc:b4:a1:b5:06:8c:b2:a3:
         bc:a8:75:2b:32:28:62:fd:6f:a1:7c:3b:39:9b:d3:0b:ff:51:
         17:52:19:52:59:79:32:bd:6d:13:97:9b:63:56:11:20:97:ae:
         91:6a:c0:69:67:1a:8f:ec:34:08:92:a6:2e:8b:3b:c7:04:b7:
         49:c1:42:b1:10:89:71:e7:eb:a0:64:2f:60:19:f3:f5:1e:3c:
         53:ea:20:55:26:4a:fd:35:21:0f:b0:89:7a:5b:e9:76:73:84:
         61:74:c2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org