Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32302d3234203d3e203237383233.roa
File:                     3137392e34332e3131322e302f32302d3234203d3e203237383233.roa (raw, json)
Hash identifier:          VLcYQKbvceaKHaSyyq5pxUAfj3GXE07TKLZhdmDfyPA=
Subject key identifier:   F5:7C:0D:36:9F:A4:5C:A1:AB:D7:71:E5:97:8D:51:58:84:50:F7:56
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       309A006CBCDCE409F4D5FAFDAECBF89E37E9EE9A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32302d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:14 +0000
ROA not before:           Tue 05 Mar 2024 17:35:14 +0000
ROA not after:            Tue 04 Mar 2025 17:40:14 +0000
asID:                     27823
IP address blocks:        179.43.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 22:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9a:00:6c:bc:dc:e4:09:f4:d5:fa:fd:ae:cb:f8:9e:37:e9:ee:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:14 2024 GMT
            Not After : Mar  4 17:40:14 2025 GMT
        Subject: CN=F57C0D369FA45CA1ABD771E5978D51588450F756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:20:16:f4:55:7c:fb:ea:f0:66:24:40:5c:
                    84:a8:79:ec:7e:cc:d2:d0:f1:e4:c6:2e:8c:13:b6:
                    f8:13:4d:05:f1:32:84:f8:dd:54:25:c0:2f:aa:f5:
                    f0:23:59:8a:c8:77:ab:37:85:c9:99:c4:01:c7:48:
                    db:4c:26:0d:85:c5:5a:85:c9:ff:f1:cb:04:e6:ca:
                    3d:7e:40:85:38:ba:c4:ff:c5:f8:02:6a:86:14:bd:
                    64:29:c5:fd:73:e6:ce:7b:78:81:8e:45:0a:46:61:
                    9b:c7:ba:82:13:e5:e4:2d:6c:4d:8e:f2:f9:a3:c9:
                    11:df:76:80:c9:96:91:63:91:3b:8c:45:81:21:fc:
                    8d:25:03:20:de:f0:fb:69:2b:3e:3a:5a:b4:2e:a0:
                    5c:f1:24:4a:16:81:d5:f5:2e:6c:04:30:0b:ad:5f:
                    15:c7:e5:ad:00:1f:5c:4d:03:ab:ed:3f:81:15:fb:
                    41:ca:d1:c8:e8:38:3b:51:c1:a9:42:67:8b:1a:d3:
                    47:1b:ab:43:22:75:8d:21:05:e6:4c:6e:88:ac:52:
                    ae:04:60:ad:11:bf:06:6e:80:6f:48:9d:b7:2f:42:
                    7a:33:2b:0b:d4:4d:df:b0:61:6d:d7:7b:11:1a:eb:
                    cf:a0:73:1e:c4:87:0a:51:10:94:ef:d0:03:f4:3b:
                    b8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:0D:36:9F:A4:5C:A1:AB:D7:71:E5:97:8D:51:58:84:50:F7:56
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131322e302f32302d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:d9:ac:98:7e:a1:dc:5f:55:35:24:af:70:ff:87:66:2d:d1:
         7c:c7:93:9b:fe:1f:5b:d5:b2:6c:f5:03:39:f0:12:b5:00:dc:
         2e:10:b9:dc:c6:6a:da:02:3a:e2:be:a2:e8:32:d1:df:27:f0:
         2b:1c:c3:30:5f:82:aa:da:01:90:b5:b9:04:e2:45:5a:35:e2:
         74:a5:80:fd:83:64:6c:b4:8b:8d:fd:ce:37:37:c1:89:3a:4e:
         f0:c4:6d:bd:19:7e:fa:07:14:db:f6:d4:ab:12:be:b2:18:4e:
         32:1c:e2:46:5b:33:f1:19:fa:51:be:1d:01:08:68:57:bd:2d:
         5c:aa:ae:ac:9d:4a:a4:dc:6d:f7:40:28:ab:5e:f0:90:bd:57:
         58:c7:9b:93:c7:3f:97:1f:cb:ac:27:56:0c:c1:fa:05:31:d4:
         7d:a2:b2:6e:5c:a2:01:54:53:82:ca:8b:58:35:5c:db:09:ef:
         97:16:df:9f:bc:2c:21:cb:2a:ee:74:b6:15:b9:02:1e:de:1a:
         70:e1:09:5b:5f:33:6c:8c:c8:94:8d:da:b9:67:32:9a:11:2d:
         10:55:ea:5c:16:56:1b:42:0c:47:4f:27:3a:49:bf:0d:dd:85:
         b9:33:a6:fc:f7:4a:8a:a0:76:0a:b5:67:8c:64:1f:b1:ee:f9:
         75:60:41:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:34 2024 by rpki-client on console-fra.rpki-client.org