Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3137302e38332e3137362e302f32322d3232203d3e20323634383530.roa
File:                     3137302e38332e3137362e302f32322d3232203d3e20323634383530.roa (raw, json)
Hash identifier:          9W/rp3HzowGsyApMlIF8db3E2YvmwGnT2qZrwuoada8=
Subject key identifier:   A6:F1:AC:54:22:02:7A:B5:75:3A:16:61:AC:15:09:01:18:0A:54:77
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       477A9F0A1B08A6D2410E7A0E343CF92E351FD5D5
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3137302e38332e3137362e302f32322d3232203d3e20323634383530.roa
Signing time:             Tue 05 Mar 2024 17:59:10 +0000
ROA not before:           Tue 05 Mar 2024 17:54:10 +0000
ROA not after:            Tue 04 Mar 2025 17:59:10 +0000
asID:                     264850
IP address blocks:        170.83.176.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:7a:9f:0a:1b:08:a6:d2:41:0e:7a:0e:34:3c:f9:2e:35:1f:d5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Mar  5 17:54:10 2024 GMT
            Not After : Mar  4 17:59:10 2025 GMT
        Subject: CN=A6F1AC5422027AB5753A1661AC150901180A5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:33:01:7e:e7:df:c5:70:5a:93:a5:66:32:
                    23:e7:32:8d:64:a4:db:9f:aa:be:6e:d7:e2:03:43:
                    e6:cd:21:a9:be:b6:1f:de:9c:e9:e5:8f:b1:63:e1:
                    28:4f:17:a4:09:a0:f3:49:17:de:99:c1:c2:7c:9e:
                    30:59:33:6a:6d:7d:da:6f:e5:8a:c0:21:09:6e:a4:
                    c3:8c:9d:73:61:bc:81:66:d1:6b:2d:bc:06:56:d7:
                    a8:a9:6e:11:ac:59:3d:a8:56:ff:15:fe:f3:a2:bf:
                    5c:e5:91:d8:09:3d:8f:4e:58:33:1d:45:2a:28:4e:
                    df:2e:d0:5b:66:bd:2d:1e:3c:c9:54:e4:82:42:3a:
                    39:5f:47:ba:d3:ab:ef:83:44:b8:d5:a9:54:a1:0b:
                    f6:52:6c:7d:62:eb:eb:a9:ff:8e:c4:81:1b:37:cd:
                    98:89:13:b8:7f:77:19:bf:2f:02:76:35:0f:c4:47:
                    0e:90:2c:cd:b8:43:47:d6:f6:59:d6:5e:d3:5e:9a:
                    67:38:00:aa:82:6a:a1:e6:b3:27:76:5f:35:a2:6d:
                    66:5a:2c:a0:82:2f:59:e6:d8:2b:6a:15:fd:79:0a:
                    b7:7b:28:85:15:f5:ae:79:b0:e0:cd:41:4f:66:2d:
                    8e:ef:0f:83:99:1c:26:d2:a2:90:5f:14:65:15:d7:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F1:AC:54:22:02:7A:B5:75:3A:16:61:AC:15:09:01:18:0A:54:77
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3137302e38332e3137362e302f32322d3232203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3d:33:6c:f8:c7:c7:bf:14:d7:f1:ad:8f:ad:e7:ad:1c:29:d5:
         66:8b:9c:6a:fe:96:56:13:de:71:0b:28:fb:88:7a:b7:17:9f:
         14:16:a0:16:f0:5b:87:16:9d:fc:48:25:ff:56:41:ba:24:1d:
         6a:e7:96:42:a0:f5:88:72:31:a1:b5:dd:10:a9:82:86:c3:09:
         b4:e0:68:ec:d0:6f:bc:53:0a:46:47:4d:5c:c6:a4:4f:c3:01:
         69:f6:9a:24:87:b9:ca:e4:da:1f:66:d7:46:80:1c:33:85:3f:
         a9:2d:66:97:4e:4a:76:a5:3a:ca:36:c1:3e:e4:23:a5:18:62:
         6f:fd:1f:f5:18:eb:9a:7f:ce:5d:c5:07:16:ab:9f:bd:c9:12:
         c0:56:0c:58:47:1b:1d:2c:1b:39:f9:79:5b:c0:62:f4:a8:79:
         b0:59:7b:b8:1a:fb:0a:bd:de:71:bd:25:db:a8:38:b0:25:d9:
         4e:c4:ea:b9:58:35:02:23:71:bb:4e:78:a8:79:ca:f7:07:bf:
         69:a1:c6:78:5a:38:c5:ce:09:3e:b6:9b:d1:26:8a:af:c9:66:
         48:0b:8d:a3:96:7d:65:95:85:84:af:61:30:7f:60:17:b1:e6:
         cd:10:a8:f0:6d:5a:f7:c4:eb:95:34:53:5e:25:14:b2:5a:8f:
         54:41:06:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org