Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa
File:                     3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          3tJkTZTQUKcH8K/NW0jJ6D/GxaXwZ6/4wbnfDiB8oNk=
Subject key identifier:   97:98:B3:E3:24:93:FA:1E:10:AF:24:61:C5:2E:E1:EB:DD:9C:41:8C
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       11389884A50FA14E6E9F06B7464387802E6F37EC
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     265639
IP address blocks:        170.246.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:38:98:84:a5:0f:a1:4e:6e:9f:06:b7:46:43:87:80:2e:6f:37:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=9798B3E32493FA1E10AF2461C52EE1EBDD9C418C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:5c:fd:fc:d4:51:16:e1:64:bc:c7:6b:dd:4d:
                    4e:79:9e:c4:94:05:e7:13:e5:aa:c6:07:85:40:75:
                    71:d1:ff:f5:de:e3:28:17:0a:ed:62:a3:28:a6:22:
                    1c:79:b9:4d:bb:ba:f5:d9:c9:bd:44:18:a0:eb:d5:
                    07:6e:59:fd:06:97:42:54:9d:53:f6:c2:dc:32:a8:
                    c2:21:f4:bd:6a:a2:95:0e:9a:62:be:2c:e2:de:01:
                    1e:19:e4:8d:78:db:11:65:40:f1:00:f2:76:ed:a2:
                    98:2c:40:93:ec:43:45:7a:b0:d6:b8:80:ce:8c:ec:
                    0c:4f:14:21:c1:0e:a4:e4:0a:fe:65:36:f7:39:4c:
                    bf:7d:79:d3:b5:41:78:e3:2e:4f:4b:b5:e1:3f:78:
                    2f:84:46:7a:4b:43:35:9f:d4:43:bf:74:48:8d:c3:
                    65:eb:4c:3c:65:9e:39:0e:7b:b1:79:60:77:38:7a:
                    d7:59:df:1f:87:da:55:02:65:97:bf:e0:19:2f:2f:
                    7b:68:96:ac:b9:93:67:fe:00:74:67:19:0a:20:75:
                    5c:3e:d4:1a:b0:92:e7:9c:2c:c9:24:26:af:0d:65:
                    4a:d1:62:cb:03:ca:4a:0a:0c:be:29:00:44:fc:dc:
                    e7:c4:7a:6c:70:39:ab:af:b0:7c:d6:86:c2:c8:fb:
                    0b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:98:B3:E3:24:93:FA:1E:10:AF:24:61:C5:2E:E1:EB:DD:9C:41:8C
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39302e302f32342d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:25:de:f7:f5:07:4c:94:d1:eb:b7:48:03:83:5f:ed:97:85:
         c9:e1:02:c2:2d:e1:f8:b9:bb:81:7f:2a:30:67:d4:a9:35:ab:
         ee:53:e7:2f:67:b4:c4:07:41:96:c8:bb:c4:31:74:f0:f9:21:
         23:8f:b3:d2:52:3c:23:87:95:89:04:e2:73:7b:26:01:49:fd:
         65:71:d8:84:7c:73:c0:b1:d2:19:7d:10:8d:36:b5:4f:69:0a:
         ba:87:ec:65:92:af:2f:7c:f6:e8:f1:19:ef:7c:04:31:b0:6d:
         fa:d4:8e:48:cf:e0:7d:13:c7:e0:78:df:c7:7a:d3:c3:9a:43:
         48:d5:3b:4a:bc:6d:63:00:96:fa:e2:48:a1:fc:a1:d0:53:ac:
         d6:7b:1a:c9:82:89:3c:8f:42:08:a6:bf:96:28:75:d8:ef:50:
         48:dd:2a:19:f0:d1:77:75:da:20:46:51:c7:e2:52:d3:f5:06:
         39:13:4d:bd:bd:ed:c6:e5:92:b0:24:fd:7e:4f:91:f4:02:a6:
         8e:df:06:c7:3a:b2:07:99:11:bb:93:e7:fd:67:d2:13:0a:19:
         20:cf:9b:f8:bd:08:30:ec:cf:92:86:de:7e:4f:2f:2f:c4:d0:
         58:82:5d:ec:5c:9d:c0:9f:74:86:45:a6:cb:e1:28:95:7a:3b:
         d9:3c:4d:09
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUETiYhKUPoU5unwa3RkOHgC5vN+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3REFCMEVDN0E5NTRDMDhBRjA5NjAyRkExRUE1MkQ1
OTEyNTQxQjAeFw0yNDAzMDUxNzQ5MjdaFw0yNTAzMDQxNzU0MjdaMDMxMTAvBgNV
BAMTKDk3OThCM0UzMjQ5M0ZBMUUxMEFGMjQ2MUM1MkVFMUVCREQ5QzQxOEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6XP381FEW4WS8x2vdTU55nsSU
BecT5arGB4VAdXHR//Xe4ygXCu1ioyimIhx5uU27uvXZyb1EGKDr1QduWf0Gl0JU
nVP2wtwyqMIh9L1qopUOmmK+LOLeAR4Z5I142xFlQPEA8nbtopgsQJPsQ0V6sNa4
gM6M7AxPFCHBDqTkCv5lNvc5TL99edO1QXjjLk9LteE/eC+ERnpLQzWf1EO/dEiN
w2XrTDxlnjkOe7F5YHc4etdZ3x+H2lUCZZe/4BkvL3tolqy5k2f+AHRnGQogdVw+
1BqwkuecLMkkJq8NZUrRYssDykoKDL4pAET83OfEemxwOauvsHzWhsLI+wu9AgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUl5iz4yST+h4QryRhxS7h692cQYwwHwYDVR0j
BBgwFoAUl32rDsepVMCK8JYC+h6lLVkSVBswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CRkM2RUE0MTRCRjlCMTU3MDU5NEIyRDREQURCMzQ2NTM1
OEIzNDEwQzlERDFGMjJCMDAzODYyMzMwQzA5MEY5LzAvOTc3REFCMEVDN0E5NTRD
MDhBRjA5NjAyRkExRUE1MkQ1OTEyNTQxQi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85NzdEQUIwRUM3QTk1NEMwOEFG
MDk2MDJGQTFFQTUyRDU5MTI1NDFCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQkZDNkVBNDE0QkY5QjE1NzA1OTRCMkQ0REFEQjM0NjUzNThCMzQxMEM5
REQxRjIyQjAwMzg2MjMzMEMwOTBGOS8wLzMxMzczMDJlMzIzNDM2MmUzOTMwMmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM1MzYzMzM5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvZa
MA0GCSqGSIb3DQEBCwUAA4IBAQC3Jd739QdMlNHrt0gDg1/tl4XJ4QLCLeH4ubuB
fyowZ9SpNavuU+cvZ7TEB0GWyLvEMXTw+SEjj7PSUjwjh5WJBOJzeyYBSf1lcdiE
fHPAsdIZfRCNNrVPaQq6h+xlkq8vfPbo8RnvfAQxsG361I5Iz+B9E8fgeN/HetPD
mkNI1TtKvG1jAJb64kih/KHQU6zWexrJgok8j0IIpr+WKHXY71BI3SoZ8NF3ddog
RlHH4lLT9QY5E029ve3G5ZKwJP1+T5H0AqaO3wbHOrIHmRG7k+f9Z9ITChkgz5v4
vQgw7M+Sht5+Ty8vxNBYgl3sXJ3An3SGRabL4SiVejvZPE0J
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org