Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3137302e3234372e3132302e302f32322d3234203d3e203532333939.roa
File:                     3137302e3234372e3132302e302f32322d3234203d3e203532333939.roa (raw, json)
Hash identifier:          MF2PR7BOysccSI/xq0k8MqMpyAsrZUWL0+UGiTqKoh0=
Subject key identifier:   44:E6:B9:54:AB:20:5C:BE:82:4B:B2:B8:CB:DB:20:ED:15:97:68:4D
Certificate issuer:       /CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
Certificate serial:       5FE98293FD771845150AD3000A7C5BD0824BC7
Authority key identifier: F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3137302e3234372e3132302e302f32322d3234203d3e203532333939.roa
Signing time:             Tue 05 Mar 2024 18:11:48 +0000
ROA not before:           Tue 05 Mar 2024 18:06:48 +0000
ROA not after:            Tue 04 Mar 2025 18:11:48 +0000
asID:                     52399
IP address blocks:        170.247.120.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 03:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:e9:82:93:fd:77:18:45:15:0a:d3:00:0a:7c:5b:d0:82:4b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F78F9E6F642B6485F25A9B2331897573DEED26F6
        Validity
            Not Before: Mar  5 18:06:48 2024 GMT
            Not After : Mar  4 18:11:48 2025 GMT
        Subject: CN=44E6B954AB205CBE824BB2B8CBDB20ED1597684D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d1:4b:c8:8f:35:9a:af:af:e1:c4:4b:a7:91:
                    67:43:dd:62:92:1c:49:44:d8:64:46:00:cc:45:f0:
                    b7:36:75:96:99:a3:e4:6d:eb:7a:1c:9f:54:fa:fd:
                    ab:35:8a:5c:37:b7:ea:7b:8c:c0:38:43:8f:b6:f2:
                    95:cc:61:5b:c7:d5:ec:35:de:3a:d0:25:b4:69:84:
                    da:68:25:91:b1:08:31:4d:d9:93:a2:57:b3:7d:f8:
                    78:30:76:99:7c:96:5a:46:01:7a:96:c6:1c:52:13:
                    15:e1:ef:a3:63:97:60:44:c4:a2:2f:f6:1c:ed:1e:
                    ce:f9:57:a9:17:4c:96:a0:69:2d:7b:f6:4e:e7:3d:
                    17:0b:4f:8e:b7:e1:20:91:03:25:d6:f7:bf:5f:ff:
                    ea:97:ef:2c:0a:d8:0f:9c:b8:cb:4e:ba:4c:a4:a4:
                    f1:70:2b:fc:c3:77:db:ab:77:15:5e:64:cd:a5:f9:
                    00:a5:0e:50:95:57:10:c4:5d:21:da:dc:48:ea:c0:
                    41:16:cd:16:8a:6b:65:8c:20:e9:6c:2e:14:ec:c1:
                    5e:93:32:d0:7c:c9:61:a3:f5:28:14:1c:63:ef:df:
                    70:53:b4:47:7a:db:fe:68:8e:dc:69:d3:6c:fd:91:
                    a5:a0:f9:2a:1b:d0:3f:95:14:af:ed:aa:47:22:63:
                    6d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:E6:B9:54:AB:20:5C:BE:82:4B:B2:B8:CB:DB:20:ED:15:97:68:4D
            X509v3 Authority Key Identifier:
                keyid:F7:8F:9E:6F:64:2B:64:85:F2:5A:9B:23:31:89:75:73:DE:ED:26:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F78F9E6F642B6485F25A9B2331897573DEED26F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DE91B35DA9AC709C34C2BD1A13A688E9A169AE888B92B4E4BBB86F25B77C458/0/3137302e3234372e3132302e302f32322d3234203d3e203532333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3b:81:41:1d:ba:ea:8c:d9:af:ff:89:f8:95:d1:80:f4:3e:46:
         86:64:3c:48:74:92:1f:84:d9:aa:90:4e:ca:a4:b8:7b:9c:c1:
         0a:92:45:ed:33:69:17:03:23:df:5e:ea:cd:bf:1e:9a:8a:52:
         4a:7f:0c:8e:40:21:58:3b:1b:3a:a8:44:23:bc:02:1c:af:6c:
         ef:76:c9:81:b8:84:c8:d9:3d:73:e9:18:72:33:ff:d7:07:fc:
         e7:35:57:20:7d:25:bf:74:15:a3:dc:61:ad:a9:fd:a7:51:14:
         53:9a:ea:c1:9c:3f:75:af:46:b5:22:eb:5d:d5:db:87:cc:3c:
         b6:b4:df:2a:53:b6:fd:5c:9f:13:d9:80:2f:95:14:c4:2a:7f:
         fb:5e:b2:b5:56:3b:b4:9c:af:e5:06:1f:fb:b7:d8:0d:cf:bc:
         ad:8b:c1:1b:ee:4b:31:55:01:7b:53:da:aa:00:bd:0b:37:e9:
         c3:4b:08:cf:9b:39:64:85:25:34:32:f1:9a:b4:4e:1f:8f:61:
         03:e5:29:24:fa:84:db:80:65:35:f7:fb:24:8c:66:8d:14:71:
         f6:c3:14:1e:d1:57:ec:bf:73:53:32:32:25:fa:3a:2b:2b:bd:
         44:11:38:c7:19:ca:3c:79:88:34:de:03:90:39:73:f6:85:13:
         a2:84:99:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 20:35:46 2024 by rpki-client on console-fra.rpki-client.org