Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa
File:                     3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          EPPXmvmvcO2562FJLF1p986+jbdKOEGLZI+LjVCMxt8=
Subject key identifier:   BE:A2:F8:A3:BB:EC:9F:13:3D:69:2C:7F:30:EE:65:2E:10:C6:30:A6
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       6A414FC7130F16F033BAAE0C303845C9B5D0D051
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 15 Apr 2024 14:15:01 +0000
ROA not before:           Mon 15 Apr 2024 14:10:01 +0000
ROA not after:            Mon 14 Apr 2025 14:15:01 +0000
asID:                     7777
IP address blocks:        170.247.168.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:41:4f:c7:13:0f:16:f0:33:ba:ae:0c:30:38:45:c9:b5:d0:d0:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr 15 14:10:01 2024 GMT
            Not After : Apr 14 14:15:01 2025 GMT
        Subject: CN=BEA2F8A3BBEC9F133D692C7F30EE652E10C630A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:41:8a:94:ba:8f:5a:d5:85:e4:54:0a:54:
                    20:b7:ac:6d:f8:bd:ac:86:19:eb:2d:26:c1:4a:27:
                    76:2c:b1:ed:49:ee:08:9d:1f:69:38:00:c3:6f:5f:
                    d1:ae:9b:29:ce:c6:2b:dd:63:f7:4b:b6:c5:9b:43:
                    ca:14:2e:30:36:df:f1:e3:f0:b7:f2:c0:3a:66:c1:
                    1d:44:be:06:e3:77:8e:3c:22:9a:90:10:8d:97:56:
                    52:70:c4:99:25:ef:66:c7:de:7d:f8:b8:24:70:21:
                    4a:07:c5:b7:ca:ad:5f:c3:64:a4:0c:1a:47:2b:49:
                    b4:a5:b8:c6:7e:a5:fb:36:96:81:f6:11:a9:bf:93:
                    b9:4f:97:18:42:8d:9b:e6:29:85:71:29:c9:4f:7c:
                    f4:72:7e:ce:3d:8a:49:74:14:7d:e6:3e:c8:ce:88:
                    13:eb:fb:46:3c:6a:c1:14:8c:46:f4:ce:d7:e1:4a:
                    8c:a3:dd:ca:fd:c4:9e:53:c2:14:bf:dc:ea:5f:de:
                    f5:98:7e:30:ca:62:58:6e:43:58:a8:3a:de:4f:8b:
                    45:4e:ba:a0:db:cd:c7:5f:73:88:6e:19:e7:b8:61:
                    9e:34:70:9c:81:03:f9:48:c8:77:c4:b5:22:d7:5b:
                    42:37:0d:93:d4:ea:be:83:9d:9d:81:a4:56:e7:29:
                    93:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A2:F8:A3:BB:EC:9F:13:3D:69:2C:7F:30:EE:65:2E:10:C6:30:A6
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3136382e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:81:23:45:82:b3:bb:07:3c:53:9a:c8:ab:9e:34:75:ae:aa:
         aa:2d:5d:76:61:4b:bf:ac:33:c9:0e:77:14:15:d3:39:a4:0c:
         ab:99:5c:b6:5b:bc:ae:14:c4:30:33:32:2f:3a:68:81:5c:52:
         57:92:92:a6:38:e5:f7:a1:dc:de:f5:0f:c5:f6:2f:d8:5e:a3:
         dc:9a:9d:4e:13:91:ee:89:fc:a8:77:f1:76:ed:54:2e:44:e8:
         6e:fd:f6:66:35:87:13:21:d6:16:6e:31:21:0f:86:73:8a:88:
         9f:8f:e0:68:f9:70:3d:2d:e0:a5:2c:45:ac:d5:86:20:45:de:
         0c:58:ff:75:92:4d:69:11:12:89:2d:8b:96:9e:18:81:95:be:
         6c:77:f2:42:a2:9a:00:81:dc:34:a8:8d:5d:20:73:54:d5:a2:
         44:e7:bc:23:e6:02:54:3b:48:aa:5a:0d:2d:b2:26:92:96:15:
         9d:c9:d9:a5:ee:b1:d9:84:72:41:ff:62:11:14:a7:f2:20:c8:
         92:f8:d6:72:6c:8c:04:2b:f8:03:9d:55:60:1b:90:76:30:4c:
         12:40:da:96:2b:17:e7:36:d9:af:20:03:3e:94:a3:d4:f1:25:
         a5:2c:cf:18:d3:55:90:a7:53:78:64:81:aa:ac:08:0f:6f:5d:
         24:bd:2e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:37 2024 by rpki-client on console-ams.rpki-client.org