Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa
File:                     3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa (raw, json)
Hash identifier:          cnQZcQmUtDSvpIGCT2mCnPow5Rl4KMpK3lWtxqvw4XY=
Subject key identifier:   3F:11:4C:96:9C:38:0B:6D:63:8F:D6:A4:57:CF:29:17:31:B1:EE:EA
Certificate issuer:       /CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
Certificate serial:       2419F66B06537964B24E7B643A550817EC255771
Authority key identifier: F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa
Signing time:             Tue 05 Mar 2024 17:45:20 +0000
ROA not before:           Tue 05 Mar 2024 17:40:20 +0000
ROA not after:            Tue 04 Mar 2025 17:45:20 +0000
asID:                     265750
IP address blocks:        170.150.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:19:f6:6b:06:53:79:64:b2:4e:7b:64:3a:55:08:17:ec:25:57:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1
        Validity
            Not Before: Mar  5 17:40:20 2024 GMT
            Not After : Mar  4 17:45:20 2025 GMT
        Subject: CN=3F114C969C380B6D638FD6A457CF291731B1EEEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ad:0b:7e:11:aa:83:1a:ca:48:bb:a5:b4:20:
                    6b:d2:2d:e8:00:84:e8:1d:18:fe:ea:61:2d:70:57:
                    44:8b:88:08:fd:bd:9c:ea:6d:e7:dd:64:8c:93:bf:
                    4d:29:4b:66:43:41:61:3c:ac:bf:f1:37:c1:22:e9:
                    3a:5f:a4:2b:7b:de:20:fc:c6:f5:7e:b1:26:48:de:
                    55:ab:dd:b2:8c:5d:c1:e7:89:3f:e3:d7:48:df:39:
                    32:37:4b:e0:2a:f6:3d:41:37:61:ec:3e:2e:27:48:
                    0d:a4:35:2c:13:bb:68:9a:43:a2:94:cc:ac:eb:72:
                    a1:a1:75:ae:7d:8a:2f:1b:5c:e5:9f:f8:72:b2:41:
                    32:22:48:af:0a:50:ec:9e:e5:59:8c:28:a5:39:c4:
                    70:ec:4f:e5:fd:53:af:cf:7a:e9:56:7c:83:b6:5f:
                    2e:cb:b8:12:14:fc:d3:39:fb:cf:6b:bb:b2:bd:2f:
                    78:ef:a5:a0:27:fe:04:16:25:07:e0:5f:aa:f5:f9:
                    c8:c7:72:2c:a5:90:6c:76:6c:e2:32:2b:97:ff:bd:
                    80:db:c8:ce:9b:72:26:5a:10:ba:70:a3:f1:07:d8:
                    7a:39:f0:f7:a1:35:09:47:b1:f5:7b:25:4c:c0:e9:
                    d2:c5:60:ba:06:32:bf:be:74:c2:e1:9b:c7:fd:84:
                    4d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:11:4C:96:9C:38:0B:6D:63:8F:D6:A4:57:CF:29:17:31:B1:EE:EA
            X509v3 Authority Key Identifier:
                keyid:F2:D6:3F:40:F7:83:F7:AA:C7:E0:11:51:9F:FB:0E:4F:8B:F0:5D:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2D63F40F783F7AAC7E011519FFB0E4F8BF05DC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/461D39666B4A0C9E74178CCF414FC2DE34884CF594A12A788F7D2797ADCC25AE/0/3137302e3135302e36322e302f32342d3234203d3e20323635373530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:1c:55:4a:7d:ca:8a:18:e1:75:72:ab:14:ff:eb:0f:74:06:
         c4:99:0c:7a:38:8a:c4:ea:a2:a1:b1:32:db:1c:e5:b7:cf:f9:
         b9:31:28:5f:f0:a4:b6:e1:57:91:b6:bb:9e:84:26:1b:31:fa:
         ae:60:c4:24:c2:8d:66:fc:f6:2e:0c:46:98:36:db:82:16:ed:
         0c:43:35:1d:f8:d1:d1:71:5b:ae:d8:1e:1b:dc:c0:01:ad:a5:
         cd:3d:14:3f:29:26:fd:72:de:42:09:19:63:88:a2:8a:b6:8b:
         a7:71:51:07:11:ed:81:7f:81:e3:6e:7f:71:d3:65:ed:a3:76:
         5c:6d:60:1e:22:02:b9:b3:6f:a8:9e:58:d7:29:74:b7:ea:35:
         4c:a5:b3:db:c6:3f:b7:02:af:e0:7b:d6:24:47:f8:89:52:41:
         05:e9:5a:89:68:b2:85:fc:0c:ea:ff:6e:c0:b9:62:dc:64:da:
         00:35:79:7f:c6:4d:53:83:b8:2d:28:cd:01:12:ca:b9:45:77:
         95:98:9e:eb:53:ab:f7:2a:00:52:2a:79:ab:a6:0e:84:9f:c6:
         29:d2:a0:5e:b6:74:59:0f:69:28:e7:eb:09:34:c9:15:b2:46:
         6a:dd:06:be:a5:ef:23:3d:1f:17:96:9e:a9:10:e8:14:58:95:
         ee:2d:81:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:08:10 2024 by rpki-client on console-fra.rpki-client.org