Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
File:                     3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa (raw, json)
Hash identifier:          LMzGFNh+XDC6d7ypN2w7nF1pgyogq4pf8GJRkKDWsr4=
Subject key identifier:   00:32:83:3D:F8:DC:42:37:90:14:3F:24:D1:EC:1B:12:CB:5C:F3:FE
Certificate issuer:       /CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
Certificate serial:       187FA6940643924A6B0F9683BE9EE677D19DBFF1
Authority key identifier: B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa
Signing time:             Tue 05 Mar 2024 18:17:34 +0000
ROA not before:           Tue 05 Mar 2024 18:12:34 +0000
ROA not after:            Tue 04 Mar 2025 18:17:34 +0000
asID:                     265638
IP address blocks:        170.246.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7f:a6:94:06:43:92:4a:6b:0f:96:83:be:9e:e6:77:d1:9d:bf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2
        Validity
            Not Before: Mar  5 18:12:34 2024 GMT
            Not After : Mar  4 18:17:34 2025 GMT
        Subject: CN=0032833DF8DC423790143F24D1EC1B12CB5CF3FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:fb:36:d2:f5:82:32:8e:b8:13:4f:c9:b5:
                    a2:7e:dc:25:e6:21:01:50:ef:e8:fa:9f:e1:77:9c:
                    66:a7:16:66:26:81:e3:b0:b4:46:0e:a2:db:b5:45:
                    95:4d:8d:6c:ab:58:37:49:03:25:cc:fe:91:b1:2a:
                    3b:d6:0e:5f:c8:96:7a:94:94:e9:10:97:11:25:ed:
                    03:00:cd:0f:33:04:6d:8c:fd:b0:20:ed:5e:12:65:
                    ef:c6:83:ff:ee:8f:88:cf:ca:8a:86:fb:cc:57:ab:
                    97:3e:76:e1:0c:21:f9:83:d0:1e:eb:b4:cd:d6:3a:
                    58:da:4c:2f:de:78:91:5b:48:85:ea:8b:62:6f:7c:
                    37:94:03:98:57:ab:c6:26:cf:ad:2b:ea:3d:c9:ce:
                    2b:da:d4:fe:64:27:5d:4e:d5:cc:be:06:93:0d:6d:
                    e3:dc:ff:3c:bb:d6:ea:30:29:87:3e:06:e8:99:91:
                    58:a3:1b:ec:b0:d9:d5:c1:37:ea:9d:4f:fc:30:57:
                    02:5f:5c:0e:5c:81:d5:dd:d5:84:f7:0e:9e:c2:49:
                    40:73:bc:06:36:a0:ff:ca:a6:7b:e8:18:b2:5e:5c:
                    eb:2d:23:d3:f2:62:30:85:2b:f9:e2:0f:34:5a:7f:
                    a4:4a:f2:51:fa:84:6f:af:13:c0:46:a9:e4:67:f4:
                    c4:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:32:83:3D:F8:DC:42:37:90:14:3F:24:D1:EC:1B:12:CB:5C:F3:FE
            X509v3 Authority Key Identifier:
                keyid:B0:F4:9E:E9:CC:97:82:F6:D3:2C:63:D1:3D:1D:07:69:A3:0E:44:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B0F49EE9CC9782F6D32C63D13D1D0769A30E44F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F78E98627D3C1882C5496C7BECF3865FE0EE22DEAE3807ADE40608A2A006275F/0/3137302e3234362e34302e302f32322d3234203d3e20323635363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:df:6d:bb:be:a6:4d:9f:64:dc:48:24:7b:c6:5a:71:6a:e8:
         22:c3:ab:2e:cb:81:58:a7:99:a2:99:55:a9:ab:07:21:76:40:
         4b:6c:78:bd:fa:c8:86:3e:70:da:bb:66:ad:74:ce:7f:c5:c6:
         c5:bc:fe:24:ce:33:31:e3:67:cc:e4:e5:4b:e6:e1:53:a5:d1:
         0c:3f:ec:a4:c0:0c:c7:87:2d:5b:26:5c:c6:88:b7:34:67:81:
         89:ee:65:ef:0a:97:5d:73:a7:fd:96:4b:1c:7b:51:9e:c2:d7:
         4c:62:06:9e:b8:e1:51:bc:0f:40:6e:9a:41:9b:a7:26:9d:fc:
         41:60:71:6a:40:98:60:7f:92:98:49:38:b5:90:3d:aa:05:a8:
         49:7d:45:21:fa:9c:ed:25:13:3e:97:74:22:a6:fb:f1:33:ba:
         bd:e3:7e:44:5d:2f:dd:d4:5e:81:80:19:64:6d:7b:45:d2:1f:
         a5:0e:0e:17:73:46:92:90:9e:fa:1e:b4:bb:77:32:18:38:be:
         fc:81:92:fc:c4:53:2a:5a:19:16:a5:cf:9d:dd:dd:5e:6c:c3:
         d0:5e:c5:fe:21:3f:1d:64:ad:7e:80:48:70:e5:6d:02:79:02:
         e2:0f:f2:eb:b0:89:00:eb:2c:9b:56:4c:11:91:ae:5e:f5:2e:
         42:df:c7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:00:02 2024 by rpki-client on console-ams.rpki-client.org