Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
File:                     3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa (raw, json)
Hash identifier:          fUoZUK617qXZrYJP9mglnlaY3jhtvoBeUeOX9qd+D6Y=
Subject key identifier:   F5:5A:6E:93:F5:90:CB:02:C3:C4:1B:ED:F9:AC:78:71:60:7C:77:FC
Certificate issuer:       /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial:       216BFD84F5631393F2EE23D45A16136884C26D39
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa
Signing time:             Tue 05 Mar 2024 17:45:20 +0000
ROA not before:           Tue 05 Mar 2024 17:40:20 +0000
ROA not after:            Tue 04 Mar 2025 17:45:20 +0000
asID:                     265750
IP address blocks:        170.150.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6b:fd:84:f5:63:13:93:f2:ee:23:d4:5a:16:13:68:84:c2:6d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
        Validity
            Not Before: Mar  5 17:40:20 2024 GMT
            Not After : Mar  4 17:45:20 2025 GMT
        Subject: CN=F55A6E93F590CB02C3C41BEDF9AC7871607C77FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:bd:b1:28:10:59:57:64:28:3d:0c:98:27:
                    a4:ad:62:14:ee:be:63:9d:5e:77:dc:17:ae:9e:02:
                    e1:48:5d:ab:fe:2a:53:ae:68:56:14:8c:e4:81:45:
                    cd:15:13:e6:51:39:de:4a:45:85:7e:ed:20:43:b2:
                    83:92:9d:df:e8:08:c2:68:12:68:6a:3b:62:f7:77:
                    df:81:76:5b:53:eb:c2:e5:83:ee:1f:3e:2f:f9:5b:
                    11:fb:59:3a:fc:af:3b:4b:6f:fc:53:d3:98:e9:cc:
                    3c:b3:e4:60:64:05:02:08:24:ba:dc:fd:d2:06:b6:
                    8d:f5:bb:9e:42:5d:35:78:b1:47:99:f2:68:a9:12:
                    3c:6e:92:0d:8b:30:e3:d3:c2:22:ab:b7:f6:93:9f:
                    ed:71:29:a5:00:76:7a:06:7e:70:95:c9:50:d1:40:
                    fb:ef:d8:d6:f5:30:4f:da:e3:96:6f:9d:47:4f:b6:
                    f6:fa:ff:2e:f0:8a:bf:99:14:40:46:d7:40:05:09:
                    04:f1:ab:c0:57:89:5e:a4:6c:3e:4b:47:93:39:1d:
                    57:87:1a:cc:9b:3c:65:b6:61:25:fd:43:53:d6:38:
                    b1:06:79:d4:7f:89:12:c6:55:0c:e9:f5:59:c5:6a:
                    65:5d:20:96:e6:32:da:5b:2d:fc:34:7f:e2:dc:bf:
                    5e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:5A:6E:93:F5:90:CB:02:C3:C4:1B:ED:F9:AC:78:71:60:7C:77:FC
            X509v3 Authority Key Identifier:
                keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36302e302f32332d3233203d3e20323635373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:57:62:81:76:29:12:8f:18:24:2c:7c:00:f7:05:c0:38:14:
         00:41:ea:8d:01:36:2f:a1:c9:11:b8:26:ae:15:52:53:60:2b:
         7c:76:e1:65:61:4c:8e:c6:db:01:46:11:e8:6c:aa:46:5c:36:
         0d:d6:fc:1c:e9:f3:26:4c:a2:f9:2a:ee:17:61:57:45:f4:fe:
         4e:4c:9d:db:54:39:9e:88:b0:00:85:7c:d2:90:3a:db:c6:06:
         19:05:a5:f8:98:38:3e:e4:04:2f:a3:04:96:75:35:2a:52:c3:
         2c:4f:ef:94:d4:bb:50:5e:b5:f8:2a:14:1d:b7:dc:cc:6b:19:
         d9:58:f0:83:bc:06:81:bc:12:9e:e3:ef:78:16:f4:32:38:d4:
         49:77:3f:7b:8d:81:8a:99:f4:a3:d3:2d:eb:93:ce:1b:07:4b:
         89:a4:bd:63:85:ad:2b:6c:96:19:1e:81:50:b4:55:a7:19:cc:
         af:37:67:87:80:bf:ee:24:1d:f8:2a:f5:70:63:29:46:99:bb:
         f2:01:5f:46:7b:4c:9c:19:c1:65:3c:73:1f:c8:5c:a8:36:b9:
         a8:f6:ee:c8:49:96:ac:e9:b0:5c:aa:42:fd:b2:ca:90:b4:f3:
         7e:61:a2:6d:fa:9b:13:d3:58:3b:e7:e7:40:43:04:db:5b:e5:
         05:af:51:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 15:56:09 2024 by rpki-client on console-ams.rpki-client.org