Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32342d3234203d3e20323635363339.roa
File:                     3137302e3234362e38382e302f32342d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          h9fu0WV27TR628P9AiX/VluytHYAgxUxZJD8+M9PUPE=
Subject key identifier:   FB:AD:2A:C5:C0:88:DF:EA:28:02:BD:71:D7:33:CD:CF:B4:81:B0:18
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       7F04ABF0E391252C419F651E2F3191A4A15912C4
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32342d3234203d3e20323635363339.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     265639
IP address blocks:        170.246.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:04:ab:f0:e3:91:25:2c:41:9f:65:1e:2f:31:91:a4:a1:59:12:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=FBAD2AC5C088DFEA2802BD71D733CDCFB481B018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:e9:54:e9:3a:e0:83:ce:82:da:06:68:dd:
                    fa:35:9a:92:5b:4e:0f:81:16:3d:70:29:3f:c3:cc:
                    a1:35:f8:38:66:90:72:c4:6b:43:6b:b0:03:44:96:
                    e4:29:a0:e3:55:38:15:62:b3:55:92:e7:29:77:24:
                    ec:09:9a:d1:a3:dc:5d:8e:de:53:a3:f0:d4:06:8d:
                    cc:4f:39:9d:7d:cb:d5:38:2e:39:52:5f:18:89:d9:
                    9a:a8:06:e7:1a:3e:42:ff:d7:ec:7e:68:92:76:8e:
                    dd:b2:2b:38:44:5e:10:26:53:15:6d:26:32:51:2d:
                    a2:da:69:d8:15:ac:08:7d:0f:e4:d3:cd:00:ab:c1:
                    07:70:0a:35:ad:33:fb:57:76:7f:b8:f4:c7:8a:ad:
                    4b:76:3c:0a:48:06:98:08:d1:47:dc:e1:3a:b8:c6:
                    d5:a3:41:25:72:d2:58:fe:45:09:d9:f7:32:5f:90:
                    0e:70:b7:48:cb:53:59:9b:3a:bc:e2:e6:43:e4:1b:
                    72:ba:00:e6:45:35:2f:34:b1:80:3e:f5:b4:0d:c9:
                    76:1f:41:82:e2:03:76:81:44:99:32:a6:d1:39:da:
                    8c:05:c4:e1:33:63:9d:f1:7f:b8:92:30:a5:72:57:
                    a9:43:df:46:a7:26:23:b4:5a:66:9a:17:6f:b0:b8:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AD:2A:C5:C0:88:DF:EA:28:02:BD:71:D7:33:CD:CF:B4:81:B0:18
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38382e302f32342d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:3f:48:d4:00:ae:1a:2e:aa:19:f0:f2:0d:44:95:e6:60:
         45:dd:4e:ef:1a:cc:0c:1f:c9:2a:71:2d:f5:b3:40:05:f5:e5:
         8d:a9:e8:81:2d:56:c1:15:74:7f:0f:8c:a1:5d:15:b6:89:28:
         e6:a1:af:93:25:55:f0:05:56:58:93:fd:c0:c2:41:12:0a:3e:
         f0:dc:52:18:bd:bb:0b:54:96:88:05:f1:79:47:4c:2a:61:1a:
         e0:3c:b9:af:c2:d7:09:bf:f7:4f:6a:e1:9c:f8:28:3d:1c:45:
         65:fc:ee:74:50:46:f1:01:6f:99:c2:99:03:69:e6:5e:8d:09:
         f4:04:c4:8d:45:e0:b6:6b:f3:93:23:51:2d:57:98:ef:e5:18:
         db:d6:a4:53:dc:da:1a:d3:c9:05:34:c4:36:18:8a:f9:c3:07:
         8b:54:e4:99:68:05:30:d9:7c:86:2c:a9:e6:cd:32:bb:05:6e:
         2b:9a:31:c9:f6:29:b1:61:8a:9b:b9:03:40:22:28:96:4f:0e:
         a7:89:eb:0a:0a:f7:92:2f:3c:eb:73:84:b6:f3:1a:ab:c3:0b:
         d7:6b:86:87:69:5d:4c:91:07:1b:f8:8c:2e:d7:a0:08:fd:86:
         58:ef:e4:2d:3f:f4:cc:80:b3:4e:27:c6:30:28:29:a0:e4:32:
         22:d1:db:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org