Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
File:                     3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa (raw, json)
Hash identifier:          z/j2R1eUQ4ahz5lPqxG/6u2f1JAvKSwyeEDQ7cnyJO4=
Subject key identifier:   F4:54:AF:9D:0E:B0:63:DA:C2:AE:2F:26:88:5F:A9:D5:9B:9D:1C:89
Certificate issuer:       /CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
Certificate serial:       334C9F7B70D6EF340F59D0D7F1A17476624595FE
Authority key identifier: 00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa
Signing time:             Tue 05 Mar 2024 17:48:56 +0000
ROA not before:           Tue 05 Mar 2024 17:43:56 +0000
ROA not after:            Tue 04 Mar 2025 17:48:56 +0000
asID:                     265694
IP address blocks:        170.78.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl
                          rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 16:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4c:9f:7b:70:d6:ef:34:0f:59:d0:d7:f1:a1:74:76:62:45:95:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004D8C9FCE585D1D2D59E2275E877AC70968F585
        Validity
            Not Before: Mar  5 17:43:56 2024 GMT
            Not After : Mar  4 17:48:56 2025 GMT
        Subject: CN=F454AF9D0EB063DAC2AE2F26885FA9D59B9D1C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:23:4a:9a:12:63:d0:68:50:5c:55:cf:42:
                    12:d6:b8:9e:09:fe:c4:1f:9c:33:0c:9c:c9:58:fc:
                    dc:89:d7:46:2c:23:bb:ad:79:e2:c6:68:fc:8a:57:
                    2a:41:0d:55:c7:2e:c8:6e:41:cb:9b:97:b3:82:34:
                    f1:73:f8:ea:9b:25:fe:70:45:c4:db:b4:87:eb:68:
                    d8:0e:b4:25:e4:bb:dd:f8:0b:99:76:75:8f:66:ed:
                    1e:f1:f3:12:8f:20:a0:87:9c:9c:ea:72:07:3c:b2:
                    8f:77:2d:b9:c9:46:1f:ed:03:a9:20:b0:14:9b:c9:
                    c8:61:98:8c:dd:8a:98:45:8e:1c:6e:12:7b:98:01:
                    c0:b6:76:8c:0b:8d:5e:c9:5e:00:4c:ad:24:f2:ae:
                    be:7c:bd:e3:f3:94:ff:25:ee:0f:6b:44:63:03:f9:
                    f0:29:ce:43:b2:3a:84:c9:e2:87:64:b1:11:01:13:
                    e6:9c:da:82:cb:b1:30:f6:73:0b:cf:96:97:93:6e:
                    50:09:f2:76:e1:d5:c4:0b:5a:55:1a:25:7b:aa:7a:
                    6c:e4:58:d4:0e:74:37:34:e1:3f:fb:2a:d5:9d:b2:
                    5a:b2:3f:8a:e7:0f:76:8a:c4:d4:61:51:a8:04:a5:
                    d5:22:a1:68:99:41:4f:3f:7b:a5:e9:0b:70:94:bd:
                    db:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:54:AF:9D:0E:B0:63:DA:C2:AE:2F:26:88:5F:A9:D5:9B:9D:1C:89
            X509v3 Authority Key Identifier:
                keyid:00:4D:8C:9F:CE:58:5D:1D:2D:59:E2:27:5E:87:7A:C7:09:68:F5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/004D8C9FCE585D1D2D59E2275E877AC70968F585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/46EAEF56481D7CA4586B18E4C1DC82503820ABDC26DA478E8E95FCD11607665D/0/3137302e37382e3133362e302f32322d3234203d3e20323635363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:0f:f3:d3:ec:0d:3e:bc:8c:4c:e8:4d:41:4d:c6:60:57:d4:
         a1:b0:61:89:26:c6:82:25:1e:c8:53:ed:a8:c3:cd:0e:1e:a0:
         df:cd:2f:bf:a6:9a:80:b5:81:02:0d:86:69:cd:8a:03:38:39:
         b9:a1:2a:61:ff:e3:26:6b:93:0c:46:17:07:50:9e:80:cc:be:
         f1:17:17:f1:07:fc:49:e4:bf:1b:f5:8c:e4:e8:86:53:c8:9d:
         d3:9b:6f:d1:a0:a8:0b:89:2d:67:4b:93:01:44:e6:a5:fd:2f:
         37:c7:e9:6c:ec:9d:ac:fb:49:19:86:c5:88:5d:c7:bd:a8:19:
         91:a2:de:f4:4a:73:84:2f:7a:00:70:57:73:0a:c6:e0:d9:3e:
         ac:af:ec:fd:dc:d2:48:aa:a6:b2:7d:5e:89:ed:58:74:d2:4f:
         5a:aa:3d:5e:45:73:6f:35:e4:f6:d7:17:dc:7b:ef:c1:2b:00:
         d7:46:78:64:3d:86:af:25:c2:34:b0:ea:d1:ed:7c:3f:b3:b7:
         14:d9:30:c7:78:3c:ac:ac:a7:fb:59:9d:e2:fa:a6:19:a4:6c:
         46:0a:16:8a:a6:b0:cf:c4:9a:27:4d:8f:d9:01:6c:67:f1:b2:
         ad:45:c6:80:1c:9e:09:65:7d:a1:76:de:6e:fc:fe:b7:b1:96:
         0f:4c:0f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:35 2024 by rpki-client on console-fra.rpki-client.org