Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa
File:                     3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa (raw, json)
Hash identifier:          hBqlD+wmuNr2o/gSIZ28Y1sA95ZxdhMVJYqzeLpeWsg=
Subject key identifier:   E0:6E:6E:CB:8F:38:35:0C:2E:72:A2:E9:65:74:10:C9:7E:B4:B2:D8
Certificate issuer:       /CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
Certificate serial:       34CCDFB1D06C4C72AA79EC63FB247EBE806002D6
Authority key identifier: CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa
Signing time:             Tue 05 Mar 2024 18:19:45 +0000
ROA not before:           Tue 05 Mar 2024 18:14:45 +0000
ROA not after:            Tue 04 Mar 2025 18:19:45 +0000
asID:                     52263
IP address blocks:        170.246.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cc:df:b1:d0:6c:4c:72:aa:79:ec:63:fb:24:7e:be:80:60:02:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB4871AA703FA98F663935BFC244CC1B99AD8A49
        Validity
            Not Before: Mar  5 18:14:45 2024 GMT
            Not After : Mar  4 18:19:45 2025 GMT
        Subject: CN=E06E6ECB8F38350C2E72A2E9657410C97EB4B2D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:02:59:f8:03:a9:9e:c2:71:fc:55:b6:42:
                    95:9a:e1:24:27:47:28:3e:7d:e4:da:6e:f8:4a:10:
                    f8:54:63:5e:21:14:aa:23:1c:c3:c0:03:1b:5f:fe:
                    7e:ce:0e:07:83:c1:9c:54:7d:b4:82:a6:b1:b2:7c:
                    5f:2b:88:4d:cb:b1:d2:93:1b:61:f8:07:66:76:20:
                    86:e9:76:7a:6b:bc:df:22:cf:86:24:89:e1:14:18:
                    4f:6c:3c:ce:76:ce:dd:86:9e:d6:75:f5:ec:cb:ec:
                    11:f4:f8:c0:ae:8d:d2:95:ba:3c:c2:f1:df:87:0b:
                    d9:9b:e4:87:4b:ca:26:13:01:0f:08:08:c0:2e:5f:
                    4f:bc:c7:35:26:88:36:40:7f:79:69:d3:bc:51:8f:
                    f7:1a:db:09:c7:8d:18:59:85:7c:2f:26:38:28:61:
                    f0:ba:d9:fc:9d:4a:29:f2:ad:4e:40:05:da:c2:13:
                    ec:a0:b5:41:45:7e:89:7d:a2:13:f8:ba:b8:7a:8e:
                    15:22:23:8f:76:39:4c:72:95:46:08:79:78:e8:e5:
                    fa:03:ce:72:51:05:9f:59:3a:64:9e:16:34:cd:2a:
                    7b:2e:5a:fd:1a:c7:40:8f:a6:56:38:63:d2:0f:20:
                    4e:81:3e:63:b5:69:51:d7:99:3a:ca:53:c4:f0:29:
                    a3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6E:6E:CB:8F:38:35:0C:2E:72:A2:E9:65:74:10:C9:7E:B4:B2:D8
            X509v3 Authority Key Identifier:
                keyid:CB:48:71:AA:70:3F:A9:8F:66:39:35:BF:C2:44:CC:1B:99:AD:8A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB4871AA703FA98F663935BFC244CC1B99AD8A49.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ACDD7EF4C8C160B5340801B7839D6A868E4DD3486793AD6038376550443D01F2/0/3137302e3234362e3135362e302f32322d3234203d3e203532323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:d4:0b:52:ce:e6:4e:27:d9:9c:42:a1:06:4e:3c:5b:ac:1d:
         e0:49:dc:82:fb:1c:db:3f:2b:2e:0b:6d:43:80:25:0d:0c:2a:
         a5:21:44:5e:e7:d4:72:fc:02:0c:e3:67:3d:91:8d:a4:ec:6d:
         86:0d:96:7b:c8:fc:c5:88:08:83:d4:93:d3:61:9a:bf:9f:9d:
         58:05:d4:10:f6:f7:c6:32:2d:2c:ed:08:81:c4:97:82:3e:26:
         c9:71:c0:ab:a4:59:fc:04:b1:ed:30:43:b3:2c:69:98:35:66:
         13:ab:01:a8:a5:60:7c:e0:96:0e:10:26:07:a3:93:a1:f8:81:
         95:14:b3:5d:16:11:3d:e2:f4:ce:f2:d6:d8:b3:e1:fc:77:da:
         ac:4a:3a:33:c7:9f:8f:23:e0:3d:53:cb:55:a2:50:4e:01:ae:
         9d:ca:e2:a8:c3:10:5a:05:6a:97:8b:ae:7e:0d:b8:bc:cb:74:
         c4:a1:51:48:10:1a:0b:31:93:0e:26:62:97:bd:e9:ac:f8:48:
         46:a7:4e:c8:62:f0:86:40:d0:be:d0:fa:91:75:49:e3:f0:e1:
         31:f1:60:3e:61:07:98:8f:f8:c5:53:31:87:dd:57:54:23:75:
         37:4f:c5:fb:83:e6:b7:83:07:91:8b:18:3c:fa:45:76:ed:6d:
         88:a7:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 10:24:16 2024 by rpki-client on console-fra.rpki-client.org