Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38392e302f32342d3234203d3e20323635363339.roa
File:                     3137302e3234362e38392e302f32342d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          75WGQQg4AY+z3VSy6VEr3YocSwG1VTXE03o9SZfkaOU=
Subject key identifier:   73:18:B9:C4:28:FF:4B:29:79:F9:11:C5:8C:EC:8E:61:3E:5C:4C:FC
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       225C997190AD3AC63B6B4CC5424A9F485D17BD10
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38392e302f32342d3234203d3e20323635363339.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     265639
IP address blocks:        170.246.89.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:5c:99:71:90:ad:3a:c6:3b:6b:4c:c5:42:4a:9f:48:5d:17:bd:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=7318B9C428FF4B2979F911C58CEC8E613E5C4CFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a0:c8:90:18:11:dc:84:33:65:25:85:c1:58:
                    34:62:ff:a6:87:7b:48:d0:de:6b:ac:e6:64:04:13:
                    5a:21:37:ac:cb:1a:7e:31:79:20:6d:17:f0:31:ec:
                    89:88:a6:63:6c:e5:6e:c4:c2:7a:58:86:4f:72:b1:
                    38:46:3e:8f:dd:5c:b7:46:8b:bb:a3:bc:6f:12:2c:
                    6f:4e:e5:01:98:eb:72:7a:d8:b5:19:6f:d0:83:2f:
                    99:53:07:6d:49:27:86:ea:61:e9:d7:62:b0:9c:8c:
                    a2:d9:b2:d1:98:19:f9:e1:2e:6c:a3:78:3d:fc:94:
                    38:38:eb:2d:c9:c3:1a:14:51:df:9d:e0:cc:4c:fe:
                    c6:01:60:82:94:6c:e8:72:39:da:ad:ee:df:db:c5:
                    e6:48:07:33:87:de:52:7d:8a:75:ba:f3:53:e3:71:
                    51:6b:6f:42:75:51:0d:6e:c0:c2:2a:a6:78:0a:73:
                    2a:f2:b5:18:4d:e5:5f:fd:2b:c8:e7:38:6d:b9:80:
                    b1:13:72:8f:b3:3b:59:9a:6c:62:b8:e7:fa:46:f6:
                    75:96:1d:87:3e:5b:82:7a:07:2c:e9:fc:4b:35:37:
                    f5:f2:ec:6b:fa:b7:51:6c:b3:76:ca:c6:71:25:83:
                    df:e0:d3:a1:6b:58:89:1a:f9:99:93:9f:90:2f:ff:
                    99:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:18:B9:C4:28:FF:4B:29:79:F9:11:C5:8C:EC:8E:61:3E:5C:4C:FC
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e38392e302f32342d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:72:03:a6:3d:2f:64:24:63:56:9d:11:59:6a:d1:37:92:00:
         a9:8d:15:5a:f6:df:5b:54:f9:3e:25:72:98:4d:fe:f5:1b:45:
         27:1b:30:3a:f9:59:d1:00:f2:54:58:38:2c:04:e5:83:c4:e9:
         3b:77:39:cf:30:2c:aa:1b:76:9e:dd:ff:41:9c:7a:a4:c6:ac:
         6d:77:dd:0d:ca:7f:2f:8f:bf:12:82:83:1b:75:24:fe:2c:b0:
         97:17:bb:84:cf:f0:14:15:73:bf:b9:f5:e8:81:bf:75:13:79:
         36:75:f9:fb:fe:69:4b:81:7a:87:20:22:8b:26:1f:66:5b:74:
         87:d1:36:b9:dc:ed:ef:d0:25:2f:15:00:43:dc:03:a2:01:19:
         24:b7:38:31:19:ac:71:2f:ff:37:58:21:e6:3e:f7:46:f9:57:
         45:5f:ed:f8:bf:1c:55:61:c1:97:b3:f2:c4:40:03:35:18:b6:
         37:63:e5:2c:97:29:10:0a:d1:11:62:59:ce:16:ea:97:56:cd:
         3b:d3:69:7d:01:4c:c9:3f:bb:84:14:6b:31:e9:f4:bd:d0:19:
         18:8f:3a:1a:31:a7:91:58:ad:d5:44:a9:34:92:6a:e4:e0:e4:
         96:1b:3d:5f:51:3a:42:33:40:66:a3:95:0b:0b:c8:2c:0c:4c:
         bc:47:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org