Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/3137302e3235342e3137322e302f32322d3332203d3e20323635363431.roa
File:                     3137302e3235342e3137322e302f32322d3332203d3e20323635363431.roa (raw, json)
Hash identifier:          wIMKrKicDwNvaCJFHfKGGMpkEwQttztrvzva9sEg2VM=
Subject key identifier:   DB:D8:6A:A2:3C:F8:C9:D6:C6:45:08:34:C9:E7:5A:C1:CE:8B:24:E1
Certificate issuer:       /CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
Certificate serial:       0FF6C0397CB2034C1B2989AF1AE90D1A04F825C0
Authority key identifier: 34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/3137302e3235342e3137322e302f32322d3332203d3e20323635363431.roa
Signing time:             Tue 05 Mar 2024 17:43:50 +0000
ROA not before:           Tue 05 Mar 2024 17:38:50 +0000
ROA not after:            Tue 04 Mar 2025 17:43:50 +0000
asID:                     265641
IP address blocks:        170.254.172.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f6:c0:39:7c:b2:03:4c:1b:29:89:af:1a:e9:0d:1a:04:f8:25:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34B60C1D393D1C566AD654F41E7ED9865CCE3029
        Validity
            Not Before: Mar  5 17:38:50 2024 GMT
            Not After : Mar  4 17:43:50 2025 GMT
        Subject: CN=DBD86AA23CF8C9D6C6450834C9E75AC1CE8B24E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:b2:4a:c2:c5:b7:c0:37:67:21:c6:e5:1e:
                    3e:ae:2f:be:e1:8f:3f:de:8b:4a:4d:c3:56:20:2d:
                    2e:39:e9:f1:64:7c:f5:8d:5f:76:76:5b:0c:97:0e:
                    54:72:a5:7d:55:ac:5a:0b:4b:4e:1c:f6:5a:28:dc:
                    5f:e4:13:59:67:d5:3c:a5:01:fc:bc:2a:62:3e:e0:
                    70:09:d0:34:94:bb:7d:7b:4c:a6:19:da:20:b4:86:
                    3a:da:71:8f:6a:2e:fa:7d:cc:93:50:f0:a9:93:6b:
                    d8:4e:a6:61:0b:66:cf:c4:ef:6b:35:39:a3:79:b8:
                    85:15:c2:65:47:4a:2d:03:f7:7b:ae:6c:61:43:0a:
                    f8:87:2d:a3:f9:e4:be:35:2e:f6:b1:9a:aa:e4:ce:
                    5f:1d:20:fa:50:e8:89:a5:87:4d:f5:65:dc:1a:c2:
                    47:00:ab:35:14:43:2b:5a:f6:99:f9:32:68:dd:8a:
                    d5:3d:1e:95:ac:e1:24:a2:9a:43:3c:d6:0a:93:2c:
                    2b:3d:d8:57:bb:34:05:2a:fe:a0:67:8b:cb:3e:a1:
                    4a:0e:0a:43:de:03:52:69:eb:05:17:c3:ce:2b:48:
                    79:38:28:92:0b:64:a6:d0:c6:02:2c:8d:6f:96:59:
                    35:46:ae:a4:d5:be:15:e1:44:8f:99:69:b9:23:a3:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:6A:A2:3C:F8:C9:D6:C6:45:08:34:C9:E7:5A:C1:CE:8B:24:E1
            X509v3 Authority Key Identifier:
                keyid:34:B6:0C:1D:39:3D:1C:56:6A:D6:54:F4:1E:7E:D9:86:5C:CE:30:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34B60C1D393D1C566AD654F41E7ED9865CCE3029.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9F469927B0F81FEBAC4A37E099DF3B0B0AB061393553E892480DEF5C4315735/0/3137302e3235342e3137322e302f32322d3332203d3e20323635363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:6b:aa:16:c4:df:e8:a0:56:c0:07:4a:30:86:fa:c6:c5:81:
         40:08:5f:46:c8:25:8c:51:dc:ef:3a:82:3d:ba:99:5d:e9:6c:
         64:ae:94:f8:67:f1:29:c5:dc:f7:c0:11:6f:8c:12:26:ab:e6:
         72:62:a1:fd:f8:12:cd:6e:11:e1:5c:34:1b:7b:d9:a0:38:40:
         b1:42:6e:b4:ff:e5:b6:65:91:3a:4b:f1:5b:ff:7d:5f:9a:a8:
         f5:d2:d7:c7:fd:f4:a8:d0:96:9b:b8:4d:0d:63:e7:0b:39:32:
         bf:bf:bf:ad:f4:fd:97:4e:7e:0d:58:4c:2c:39:8f:fd:3e:97:
         ae:e5:31:51:64:1f:4e:f0:1b:f4:34:a4:a9:08:a2:92:fd:d9:
         71:00:23:ed:b2:f6:b3:92:1f:bf:b4:f2:e6:b5:aa:d4:98:9c:
         32:ae:d8:ec:8b:a3:96:a4:de:65:33:f3:ee:45:61:4a:2d:e1:
         4e:f7:dc:70:6e:1e:1c:78:44:6c:0d:7c:c4:dc:97:c1:d9:ec:
         27:08:fe:ed:22:2e:2d:b8:d4:7e:5a:82:fe:19:ab:21:fd:7b:
         6e:c9:e4:77:70:db:6a:9b:e0:a8:9e:0f:44:a6:2a:f1:c6:d8:
         01:5c:0b:4a:c7:60:7e:90:b8:e8:49:d6:23:5e:fb:9e:0c:39:
         52:a7:9e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:27 2024 by rpki-client on console-ams.rpki-client.org