Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
File:                     3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa (raw, json)
Hash identifier:          TgYBVHTT4ZogmQos3bFcKLmWBN3yrcfMoIApYG36qUQ=
Subject key identifier:   EC:D8:C5:54:DA:CB:C4:6F:E5:A5:42:55:90:98:26:11:02:8A:BA:90
Certificate issuer:       /CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
Certificate serial:       30C443A40422051B9D445C22E69766521215F60F
Authority key identifier: 07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa
Signing time:             Tue 05 Mar 2024 18:09:32 +0000
ROA not before:           Tue 05 Mar 2024 18:04:32 +0000
ROA not after:            Tue 04 Mar 2025 18:09:32 +0000
asID:                     265656
IP address blocks:        170.246.172.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c4:43:a4:04:22:05:1b:9d:44:5c:22:e6:97:66:52:12:15:f6:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8
        Validity
            Not Before: Mar  5 18:04:32 2024 GMT
            Not After : Mar  4 18:09:32 2025 GMT
        Subject: CN=ECD8C554DACBC46FE5A5425590982611028ABA90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:d2:ae:0c:6d:68:50:3b:d6:7a:63:7e:77:
                    39:12:f4:93:27:33:e9:ca:5b:2a:c3:10:44:62:15:
                    45:5d:db:d6:b0:70:a4:b9:c9:c0:3f:55:3c:68:a8:
                    06:ef:dd:44:6f:eb:b0:cc:fb:8a:5c:ae:fc:ba:82:
                    bc:8c:b3:90:06:78:1a:5f:cf:bb:65:37:81:ac:f5:
                    6a:9a:d1:9e:3d:a3:5e:65:04:f0:d3:e3:27:5b:20:
                    0a:08:7a:7f:ca:38:f9:7d:d5:64:46:bd:f9:b4:2c:
                    bd:82:34:d4:5c:41:ff:53:19:70:b7:b3:00:7b:19:
                    1c:fd:79:4a:5c:1c:bf:a3:fa:72:e5:aa:eb:79:44:
                    ab:c5:2c:5d:a5:43:f5:5c:c8:d6:56:d0:20:e2:f5:
                    e5:19:b6:f2:eb:06:34:32:6a:5f:5a:87:34:7a:4e:
                    22:18:d2:7d:c0:ff:db:c4:03:9c:3b:08:42:8d:41:
                    a7:f4:aa:7e:02:2c:c3:82:18:4d:b7:63:1c:46:87:
                    1f:d7:34:44:f6:71:0f:02:e1:bd:31:82:6a:e8:71:
                    7e:75:ef:7d:3f:9e:22:7c:4b:52:d6:f7:87:53:e9:
                    f6:b0:b6:75:d1:99:ab:4a:52:d0:cf:88:ba:43:ff:
                    45:03:3f:c4:3d:cd:fa:55:85:bb:51:2c:86:55:9d:
                    7c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D8:C5:54:DA:CB:C4:6F:E5:A5:42:55:90:98:26:11:02:8A:BA:90
            X509v3 Authority Key Identifier:
                keyid:07:49:F0:C9:F9:8B:68:39:2E:2D:B0:F3:EC:25:B9:E2:2E:89:BB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0749F0C9F98B68392E2DB0F3EC25B9E22E89BBB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E78FD6B6A858673C99D871E9FAD469FCAFED37032FBF43C0F3CDD4BA37C86602/0/3137302e3234362e3137322e302f32322d3232203d3e20323635363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         32:e4:c1:14:48:e6:20:d2:a4:0c:9c:7c:18:cc:4d:cc:01:42:
         c6:fc:b9:c6:c0:65:c4:89:94:a6:f1:65:2a:a0:dd:94:b2:67:
         2d:72:0b:68:7f:ef:3c:4e:37:7d:0e:d6:e1:61:a1:9f:ce:9b:
         37:ef:f4:b0:72:02:c9:8e:13:6e:c8:aa:68:24:48:26:8d:44:
         f6:df:c8:a5:38:0e:bd:ee:ca:7e:52:01:b2:17:58:e4:56:30:
         1a:53:c4:61:80:04:89:3c:6b:df:1e:69:ed:8c:6b:fd:f9:11:
         18:16:28:14:28:48:6f:ba:cd:e2:60:e1:74:18:d1:da:e2:7e:
         f0:80:34:ab:0f:ff:30:8d:c7:84:6e:32:28:85:82:69:50:1c:
         ec:fb:22:ac:9c:58:a6:36:cb:4b:c2:53:54:81:77:83:8e:ba:
         4c:13:31:02:57:06:8d:c8:55:1d:55:52:93:53:0b:26:2c:a9:
         6c:21:16:f5:b7:c6:f1:69:e0:8e:11:b3:4a:75:d1:36:17:5e:
         2d:e4:34:28:ea:2a:9a:3f:37:71:71:43:c1:a7:58:70:f0:e9:
         6d:7b:cb:83:d6:14:05:7d:e3:8c:14:ef:f9:43:b9:e1:cc:22:
         89:c0:e1:7b:cd:55:3b:c8:02:5f:1e:27:4d:30:8c:53:ef:b2:
         0a:bf:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:55 2024 by rpki-client on console-fra.rpki-client.org