Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
File:                     3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          txU6rbbWPn9j7I45LVxrldHxWEjVpE4GvBgLuGkQ4es=
Subject key identifier:   8C:C5:99:9F:D0:64:DD:FF:AC:65:57:3C:18:97:67:E2:1A:B0:2F:7C
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       7F3CA3402F36203CDDFDEB5EB513D6E5BA0E6AAE
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     265639
IP address blocks:        170.246.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:3c:a3:40:2f:36:20:3c:dd:fd:eb:5e:b5:13:d6:e5:ba:0e:6a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=8CC5999FD064DDFFAC65573C189767E21AB02F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f7:df:f8:d3:bf:b5:9f:48:d8:da:df:49:38:
                    91:bf:7a:10:74:0d:e1:22:78:24:10:98:e7:ac:06:
                    bd:61:bd:b8:c8:9c:f1:ba:87:74:1c:2f:7f:ad:2a:
                    fe:20:4a:4c:a7:fd:12:22:07:df:67:31:ec:7d:77:
                    cd:e9:13:ba:66:9f:e9:00:e1:37:42:ed:b3:67:20:
                    f8:3c:02:c9:09:dd:7f:00:e0:68:df:d8:69:a2:04:
                    64:8e:6c:ad:1c:74:b0:6c:ad:b5:12:8f:1d:23:42:
                    b6:56:f4:60:e9:35:25:38:b2:59:5c:a1:eb:a8:68:
                    2e:07:73:b2:af:82:bc:a6:89:d4:42:d4:60:4a:b8:
                    dc:3f:d2:c3:c1:dc:c0:10:4d:32:af:90:51:26:07:
                    19:c3:38:39:22:2e:cb:76:21:01:f0:46:bd:4d:21:
                    48:4b:11:40:00:ec:df:90:b7:98:c0:89:d8:75:81:
                    14:7a:17:c0:0b:8b:75:cd:e3:28:7c:81:73:cd:b0:
                    13:b3:fe:9d:b6:3a:f2:e2:3d:96:7a:4d:59:4e:9d:
                    42:7d:e0:81:0b:9b:9b:65:ee:b2:23:5d:5a:f3:9a:
                    09:86:0a:a0:cd:13:70:d9:f7:dd:0f:3b:2d:32:1d:
                    96:f4:c2:64:b2:ec:32:e8:89:d7:7d:2d:64:01:55:
                    3a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C5:99:9F:D0:64:DD:FF:AC:65:57:3C:18:97:67:E2:1A:B0:2F:7C
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32322d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:6e:6b:b7:80:f2:4d:81:d4:e5:60:0d:c5:6d:f6:1c:97:03:
         51:f1:2d:d5:43:db:a7:8b:12:ed:1e:91:2b:9b:33:c7:1a:c2:
         3f:55:9d:8d:de:81:0b:6a:bf:7f:d4:f9:a8:29:1e:e7:47:f8:
         78:00:61:6f:cc:3f:21:e6:73:99:09:54:62:6e:10:a5:82:f9:
         c6:59:0e:ef:0a:2a:d5:0a:1b:99:bc:d5:e8:d9:5d:08:4d:30:
         17:7c:22:2e:8d:a6:be:d8:e6:4c:77:67:7b:f8:f9:ae:5f:2d:
         7d:fe:cb:aa:4e:f0:e5:08:de:4f:43:bf:7a:5d:ac:9c:28:38:
         70:3b:a4:b7:1f:f2:96:f1:75:68:78:79:97:97:95:84:d4:94:
         cf:16:94:44:79:fd:8a:8a:73:3d:b2:df:41:bb:a0:25:c6:5f:
         03:38:4c:19:07:ec:bc:ef:74:81:19:6f:34:c3:ba:43:84:b3:
         58:d4:f4:4d:b6:fa:61:36:19:11:48:a6:d8:6b:3e:1f:d9:39:
         65:d5:80:37:7d:43:7a:2f:c4:31:c3:bd:1f:6d:56:b5:ec:a1:
         aa:33:11:c7:04:3a:0b:96:b1:78:4e:15:9a:2f:fc:21:8c:ce:
         8f:7b:cd:60:a9:eb:f3:98:2b:d8:7d:5a:f1:c7:11:56:da:63:
         44:3d:7a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:52 2024 by rpki-client on console-ams.rpki-client.org