Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa
File:                     3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          zsRwDVhPRjHqgUVTpi6ZOtQYxKLAEn2ymrXxzMbQOcE=
Subject key identifier:   79:16:25:1D:9C:76:AB:2C:83:14:76:D0:57:11:A0:F7:D9:93:91:F8
Certificate issuer:       /CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
Certificate serial:       28B99FD7158608722E9068696A095E92E0C0DA24
Authority key identifier: 20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa
Signing time:             Tue 05 Mar 2024 17:42:35 +0000
ROA not before:           Tue 05 Mar 2024 17:37:35 +0000
ROA not after:            Tue 04 Mar 2025 17:42:35 +0000
asID:                     264780
IP address blocks:        170.247.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b9:9f:d7:15:86:08:72:2e:90:68:69:6a:09:5e:92:e0:c0:da:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B9C47C5E606454FC314AD7D8CD786FB8049FF1
        Validity
            Not Before: Mar  5 17:37:35 2024 GMT
            Not After : Mar  4 17:42:35 2025 GMT
        Subject: CN=7916251D9C76AB2C831476D05711A0F7D99391F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e9:c2:a9:d6:c5:97:98:9f:11:02:24:12:f3:
                    19:ba:11:d0:76:34:72:24:69:64:99:29:e0:73:f4:
                    33:a0:57:d1:0f:0b:57:e3:8c:bb:e2:99:e3:f1:5a:
                    51:75:2e:46:c2:45:7e:93:e7:64:8b:af:33:ed:d2:
                    32:cc:10:65:79:5e:0c:ce:01:56:db:3e:39:28:a5:
                    b8:1b:a3:2e:bb:40:c9:b1:16:fa:b5:8a:0d:6f:7c:
                    6d:fa:31:ba:b4:fb:2e:7b:05:a6:39:80:8c:38:92:
                    59:ff:d1:08:8b:d4:28:93:27:29:f9:12:5f:b2:29:
                    04:9c:07:21:8b:af:ee:bc:d6:de:aa:ee:d1:3e:a1:
                    6d:b5:ce:db:ab:39:23:64:30:4f:53:39:37:7a:27:
                    ee:ff:ae:79:02:a6:93:82:ec:51:ef:93:93:5d:f8:
                    a0:b7:8f:6e:da:70:b1:42:a8:83:1a:57:5d:30:4c:
                    e0:a0:31:ec:57:ae:75:c0:79:69:37:49:d9:72:e8:
                    60:30:37:6f:2a:87:c6:17:ad:46:1a:31:05:9d:ed:
                    03:0e:57:7a:f5:66:fa:0d:0e:3e:ca:ee:06:2f:fe:
                    04:22:48:4b:73:bb:73:13:d1:14:e8:d0:c5:a4:d5:
                    61:9d:9f:7b:0b:97:13:5e:72:c0:11:0e:7b:11:4e:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:25:1D:9C:76:AB:2C:83:14:76:D0:57:11:A0:F7:D9:93:91:F8
            X509v3 Authority Key Identifier:
                keyid:20:B9:C4:7C:5E:60:64:54:FC:31:4A:D7:D8:CD:78:6F:B8:04:9F:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20B9C47C5E606454FC314AD7D8CD786FB8049FF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46AA70DCBED89305C56286B2D479399AC5133D09597ACEEF8837E4E6ED78BDB5/0/3137302e3234372e3133362e302f32322d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:78:1c:5d:6f:f2:2c:26:d5:c6:01:7b:64:89:8c:52:40:b4:
         ab:e8:87:57:a7:6b:8c:6e:c6:89:cb:6c:36:ed:33:c0:91:7d:
         e9:f9:fc:aa:19:96:8d:65:f1:12:d7:a0:b2:c3:7a:95:0f:23:
         39:08:7c:da:42:2e:21:a8:10:12:7c:dd:82:32:74:39:a5:1a:
         89:64:c5:35:ac:5b:30:64:10:8a:0b:fc:f5:bf:80:ae:42:8c:
         95:46:54:73:3c:24:9c:46:02:ad:eb:51:f2:c0:d4:28:7a:6a:
         d5:34:92:02:20:06:15:44:53:a3:18:04:2c:7b:cf:b8:a2:77:
         87:58:66:89:55:5d:b1:47:5e:df:57:6b:5c:af:a5:7e:d2:f5:
         da:50:ee:22:96:58:b4:cf:88:50:6f:cb:f3:ad:a1:1c:a0:6e:
         0e:ea:5b:6d:4d:48:dd:c0:2f:aa:a4:ed:24:b8:1f:93:5b:74:
         58:99:fb:b6:ec:c1:ea:f5:4e:e4:df:17:86:cd:be:60:13:b4:
         da:aa:6e:fd:c2:5f:64:e7:32:c1:b5:cd:95:19:9d:34:95:90:
         6f:6e:6c:7c:fb:6b:e3:d7:ae:83:9b:b9:00:56:44:ac:02:0d:
         45:19:e7:ec:8d:04:99:c9:c8:cb:6e:cc:bf:1f:ff:08:f7:04:
         7b:81:5a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:15 2024 by rpki-client on console-fra.rpki-client.org