Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39312e302f32342d3234203d3e20323635363339.roa
File:                     3137302e3234362e39312e302f32342d3234203d3e20323635363339.roa (raw, json)
Hash identifier:          6BCfFu2n7konNvVR43rY/0XVgfG5Z3hULT8hTZfXrr8=
Subject key identifier:   B5:B6:49:5D:7E:05:5E:6E:F0:68:6E:4F:9A:03:05:51:4A:07:AC:8C
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       05F7F175239B54EF1FED43CB49454DF5CE561AD2
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39312e302f32342d3234203d3e20323635363339.roa
Signing time:             Tue 05 Mar 2024 17:54:27 +0000
ROA not before:           Tue 05 Mar 2024 17:49:27 +0000
ROA not after:            Tue 04 Mar 2025 17:54:27 +0000
asID:                     265639
IP address blocks:        170.246.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:f7:f1:75:23:9b:54:ef:1f:ed:43:cb:49:45:4d:f5:ce:56:1a:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Mar  5 17:49:27 2024 GMT
            Not After : Mar  4 17:54:27 2025 GMT
        Subject: CN=B5B6495D7E055E6EF0686E4F9A0305514A07AC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4b:9f:ed:9e:d5:99:e4:4e:a1:ea:90:11:08:
                    1a:c3:50:60:e0:b1:c3:cc:8b:fe:46:c2:f3:a3:85:
                    45:39:3d:7f:03:31:2a:c9:4a:f7:7c:df:fc:32:19:
                    09:70:94:1a:d3:bf:2e:6e:b6:9f:44:0b:9c:42:f9:
                    8c:a0:56:0e:37:f1:0c:0e:19:61:91:6c:80:57:ff:
                    ac:11:be:66:c8:bd:22:ff:73:fb:77:6c:bc:1e:73:
                    3d:05:60:60:e0:53:28:e8:1e:58:2c:86:24:f1:73:
                    68:34:2f:39:fd:42:34:1a:e3:3b:a2:85:dd:39:aa:
                    bc:2f:11:83:b7:82:45:23:8f:af:f1:a6:81:98:6e:
                    9d:61:f1:90:f8:54:26:fd:f2:d0:40:5b:fc:df:c9:
                    59:47:3d:16:3c:be:d4:de:ba:db:a5:dc:1c:06:28:
                    48:68:70:7a:40:db:05:54:16:74:59:2f:1a:8c:85:
                    96:46:88:12:5e:c8:26:fd:13:1d:87:a3:1e:f1:0b:
                    f3:3f:37:70:38:5a:14:60:e0:8a:d1:04:19:b1:9d:
                    cb:e5:9f:a5:f2:75:28:0f:46:5c:12:4b:7b:a7:4e:
                    64:64:dc:ad:25:15:fb:79:9f:67:44:8c:0a:7f:9f:
                    64:54:b1:6c:8d:c0:3d:76:d7:4d:2e:59:f6:bd:f3:
                    40:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:B6:49:5D:7E:05:5E:6E:F0:68:6E:4F:9A:03:05:51:4A:07:AC:8C
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/3137302e3234362e39312e302f32342d3234203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:c2:94:2e:54:d4:14:f9:4b:95:6e:c4:58:8e:8e:43:03:
         54:90:d7:eb:52:4a:2c:bf:62:ac:25:1e:0a:4c:0d:e8:60:7d:
         e8:e8:2c:54:4c:9b:9c:31:98:9c:0f:86:c6:40:43:1e:3a:75:
         84:d1:a2:14:31:35:4c:01:58:12:18:86:97:e5:6e:f7:3c:59:
         ed:4e:f0:6c:34:a7:10:72:b8:0f:f6:42:8a:0b:31:75:b1:4f:
         29:66:9a:4a:87:ec:f7:1f:e6:d5:ad:9e:d8:9c:74:52:b8:75:
         0a:a8:f4:11:5c:c9:a8:bb:e3:21:ea:c6:7e:4f:d8:99:59:e9:
         ad:fe:4f:e6:3e:84:a8:ce:45:68:61:3e:da:1e:57:24:19:79:
         37:3f:d4:56:6d:8d:e0:38:1d:a6:4a:54:07:0d:d4:19:6c:92:
         fa:b9:4a:57:d4:fc:db:b3:c7:b7:98:7c:09:44:4a:05:64:48:
         ec:6d:18:ff:8b:f1:c1:95:2c:41:d6:65:fe:89:06:24:5a:d0:
         78:ea:67:ab:1c:ad:34:96:e5:ad:7d:3a:c0:d3:be:c6:be:2e:
         64:a7:b5:b9:ca:64:22:a5:71:e6:d9:af:1b:87:73:28:48:82:
         52:b3:15:22:58:0f:a0:24:c7:66:f8:51:64:35:6a:ce:98:14:
         5b:7b:88:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:42 2024 by rpki-client on console-fra.rpki-client.org