Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2037333033.roa
File:                     3137392e302e31342e302f32342d3234203d3e2037333033.roa (raw, json)
Hash identifier:          NiF9B/k7Rvl5TfhPGSxqIMq27f5E9zOs/LAUVqRc8tw=
Subject key identifier:   08:59:0A:8A:97:1B:17:F3:82:C7:79:20:DA:E4:E7:19:61:56:BC:D5
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       30C6F5A002CB828063D28D6A9B04F0DF4C925432
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2037333033.roa
Signing time:             Tue 05 Mar 2024 17:41:36 +0000
ROA not before:           Tue 05 Mar 2024 17:36:36 +0000
ROA not after:            Tue 04 Mar 2025 17:41:36 +0000
asID:                     7303
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 01 Oct 2024 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c6:f5:a0:02:cb:82:80:63:d2:8d:6a:9b:04:f0:df:4c:92:54:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:36 2024 GMT
            Not After : Mar  4 17:41:36 2025 GMT
        Subject: CN=08590A8A971B17F382C77920DAE4E7196156BCD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:3d:2a:1f:8c:cd:8e:1c:96:ef:30:8a:36:
                    cd:22:af:1e:4a:7b:d0:b0:e9:59:f0:40:98:9c:f1:
                    48:ee:08:05:26:c4:d6:1e:60:c6:1a:bf:32:d2:d7:
                    88:b8:d5:ea:af:b5:87:e5:e2:92:59:04:03:23:e1:
                    62:35:39:9a:41:3a:c3:ab:00:ac:6b:f7:59:99:55:
                    c6:f7:ff:40:86:f9:24:b8:05:06:9f:0e:52:47:91:
                    db:1b:7a:9b:9b:81:b9:e8:2e:1a:de:2d:73:af:11:
                    27:3e:0b:f5:9d:40:40:49:20:40:18:32:f4:e4:54:
                    d6:74:5e:a9:f5:06:16:ae:ae:fa:35:5e:64:4e:40:
                    0c:2e:fc:de:bb:56:49:c5:6c:e1:c2:9c:5c:32:aa:
                    83:cc:b5:e2:d6:92:48:b8:8c:4e:bc:59:8d:03:0e:
                    b6:6b:39:fb:2c:47:3c:5b:62:39:45:5a:87:d2:df:
                    7f:b9:9a:8a:9f:81:4b:34:62:01:c8:1d:96:0f:87:
                    54:21:d4:a5:1c:f1:51:ae:b9:c8:b4:83:79:80:24:
                    23:9a:b3:ea:84:cc:9d:cf:80:96:3e:ca:99:72:7d:
                    af:97:45:1d:80:e8:7b:34:20:20:c5:c0:36:15:f8:
                    19:e4:fd:93:3d:df:ab:34:ae:0f:d7:f8:36:18:c2:
                    1e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:59:0A:8A:97:1B:17:F3:82:C7:79:20:DA:E4:E7:19:61:56:BC:D5
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e2037333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:ce:2d:05:c0:6c:55:bc:68:0d:d3:88:92:4f:f0:fe:09:60:
         86:d6:4d:71:44:81:c3:4d:36:04:da:27:83:64:59:6f:dc:af:
         bb:91:9a:0c:18:de:50:2a:f6:7f:94:2d:00:3c:43:87:bd:9c:
         ac:3c:4b:8c:b4:63:06:8c:10:cf:d1:4a:09:e3:6a:2c:89:ba:
         6d:a1:ab:cc:f9:7d:00:a4:54:f9:ef:2e:bc:16:29:98:80:f5:
         a9:25:fd:37:09:d3:06:ed:f3:46:9b:1d:b9:53:eb:59:cd:8a:
         6b:5e:c7:1b:60:59:4b:77:aa:02:6c:e6:a4:bb:1e:f3:cf:a0:
         4a:17:11:aa:d8:67:0c:d5:1a:8e:e8:4a:31:2d:45:82:75:08:
         94:c9:f0:e2:8c:9e:bd:b5:0b:36:73:f8:f5:70:71:52:b1:2f:
         7d:89:22:8c:65:8b:e6:d2:32:1d:36:5f:d4:21:62:47:62:2b:
         42:00:d0:82:58:30:60:4f:e0:5c:1e:e2:1c:24:3a:59:10:2a:
         b4:fe:2d:da:0a:31:b8:72:c7:2c:ed:3c:0f:f4:b4:64:1c:70:
         63:a8:e6:65:7f:f5:0e:67:f4:26:28:bf:0c:25:0d:32:b2:9c:
         6f:2c:e4:8d:c7:38:87:00:48:91:d8:65:22:63:dd:8a:45:26:
         f6:9c:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 08:31:41 2024 by rpki-client on console-ams.rpki-client.org