Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa
File:                     3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa (raw, json)
Hash identifier:          e5PluRxYNi3wrI1w6dRV58GrgciRgmsEujKTUQ4gvYk=
Subject key identifier:   96:93:20:65:43:E9:41:EB:87:CF:10:59:5B:6A:E3:18:1E:19:D5:80
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       4B7DFE6D2938D07B001351B320F481FF335AA736
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa
Signing time:             Tue 05 Mar 2024 17:39:56 +0000
ROA not before:           Tue 05 Mar 2024 17:34:56 +0000
ROA not after:            Tue 04 Mar 2025 17:39:56 +0000
asID:                     394353
IP address blocks:        170.247.170.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 06:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7d:fe:6d:29:38:d0:7b:00:13:51:b3:20:f4:81:ff:33:5a:a7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Mar  5 17:34:56 2024 GMT
            Not After : Mar  4 17:39:56 2025 GMT
        Subject: CN=9693206543E941EB87CF10595B6AE3181E19D580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:92:05:6f:83:67:95:16:0e:3b:a8:f2:82:cd:
                    b5:15:31:6d:87:db:d4:ed:29:1d:c1:10:25:0c:bb:
                    db:5a:e8:42:d5:7c:be:a0:7c:ec:e6:6e:0e:3a:eb:
                    b0:82:f0:59:81:b1:3a:5a:39:a5:8e:27:69:d5:6e:
                    75:75:87:51:63:6f:e1:07:df:53:6a:93:f1:13:c3:
                    de:cb:ce:05:19:da:aa:05:22:c5:d2:bb:41:44:1c:
                    49:cb:8c:81:ad:e6:a8:29:97:02:4e:d6:c5:58:87:
                    53:1e:07:ca:c1:aa:29:37:11:0c:fa:12:8a:14:e0:
                    ed:97:f8:56:48:7f:65:00:eb:25:5a:da:f4:4f:17:
                    31:9a:37:31:0e:cb:f6:b3:19:76:ba:da:00:ec:5f:
                    b4:7d:5c:ce:d3:13:a0:59:32:57:6c:8d:f7:d4:ba:
                    da:c7:e0:a4:84:eb:9f:0f:4a:63:da:0f:ba:18:31:
                    a2:86:e3:47:f7:9c:a9:0a:47:ec:4b:d8:b8:bc:da:
                    c4:df:09:61:5d:4a:33:2d:4b:5e:94:38:ce:02:1e:
                    fd:89:73:15:be:94:9c:63:21:82:a4:16:b4:3e:3f:
                    8f:3e:b6:df:b1:7c:2a:8d:91:b2:b2:9b:6f:34:c0:
                    cd:af:0a:20:01:a4:b8:06:e8:cf:0e:54:84:02:c6:
                    63:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:93:20:65:43:E9:41:EB:87:CF:10:59:5B:6A:E3:18:1E:19:D5:80
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137302e3234372e3137302e302f32332d3234203d3e20333934333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         aa:65:c2:6d:08:2d:cb:3e:61:76:d0:17:00:a6:52:cf:ef:72:
         1e:b9:6b:61:3c:c8:d6:ef:70:28:c6:e8:2e:2c:a0:d0:60:ee:
         7f:11:9b:d1:32:62:39:35:3d:95:05:9e:a0:35:a5:fa:3f:1a:
         7f:4f:9a:d5:b0:e0:93:46:7f:a8:b6:c0:64:25:0f:5b:7f:b6:
         07:a3:03:c7:a0:ef:63:bb:8b:23:69:df:ed:3a:04:85:56:2b:
         0d:38:c1:e5:02:1b:50:87:cd:42:36:61:18:74:81:c0:29:bc:
         38:6a:ff:d5:15:cd:fb:d9:c3:d8:7a:0f:62:7e:b1:71:af:73:
         da:a7:b5:09:99:7a:0f:4e:22:a9:d6:d6:e9:a6:71:34:b4:de:
         ae:4a:63:c5:13:be:79:b3:27:b6:bd:54:43:ed:8b:25:2a:97:
         5a:97:f7:ad:55:e5:27:da:5c:c9:84:03:db:28:09:ac:3f:fc:
         65:61:da:81:71:a9:8a:ee:ef:7c:ba:f5:80:53:e4:bc:a8:2a:
         11:18:0e:e9:1b:c0:f3:d4:d4:e0:b3:cd:92:c1:2b:53:46:1e:
         35:75:fb:25:6b:4d:5e:77:a1:af:c7:ee:d1:ae:77:fb:e1:ac:
         d6:f0:cc:7c:13:48:91:a4:3f:49:53:36:85:99:52:ef:d8:47:
         f0:1f:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:53 2024 by rpki-client on console-fra.rpki-client.org