Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131352e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          bUdhl/uBfgOJhO6menKKfsTju6qys2XRBixeT5NHuto=
Subject key identifier:   A3:66:9A:F2:40:65:43:05:67:92:27:78:A8:40:A7:B6:EB:F9:53:8C
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       0C9713C413F7D7DF9BC95CBA43177BDB27A1815E
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:16 +0000
ROA not before:           Tue 05 Mar 2024 17:35:16 +0000
ROA not after:            Tue 04 Mar 2025 17:40:16 +0000
asID:                     27823
IP address blocks:        179.43.115.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:97:13:c4:13:f7:d7:df:9b:c9:5c:ba:43:17:7b:db:27:a1:81:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:16 2024 GMT
            Not After : Mar  4 17:40:16 2025 GMT
        Subject: CN=A3669AF24065430567922778A840A7B6EBF9538C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3d:39:a8:ed:25:ff:13:41:de:2c:b1:71:26:
                    37:fe:3e:a9:10:36:ed:03:a8:7f:3f:c4:f1:e6:7f:
                    85:94:e4:29:3a:8b:70:a3:e9:9a:71:e6:65:d8:63:
                    9b:e1:b0:50:af:f0:86:8b:1f:63:60:9f:d9:d0:72:
                    ab:b4:05:5e:95:ff:25:8e:22:68:d0:6a:96:ad:ca:
                    c7:c8:19:bb:ee:e1:02:c4:b2:d7:50:05:6f:41:1a:
                    07:fc:80:d1:32:b0:af:d2:bd:fd:e8:4f:dd:d4:95:
                    e3:3a:98:e0:59:c2:7d:bc:92:3c:68:b1:9f:9e:8c:
                    19:f7:1c:0c:dd:d6:8e:42:53:c7:73:e0:1f:99:24:
                    35:3d:ec:21:27:5b:c2:0e:ea:04:d1:7d:02:b9:f9:
                    7e:05:99:59:2f:af:67:ab:6e:9f:5c:b4:04:b9:bc:
                    97:9e:f0:79:96:07:03:86:9e:df:7c:d1:06:0e:23:
                    cd:c9:36:7b:5b:17:b9:ef:0d:d6:b6:2c:53:32:7c:
                    21:85:09:88:ea:5e:5c:55:a0:6b:b6:d7:87:e2:41:
                    2a:d2:27:61:7d:08:26:1b:8a:97:64:24:b2:a3:93:
                    19:ca:12:3c:4a:e8:4d:ca:cd:33:65:88:d7:1d:01:
                    81:80:08:0c:fb:d8:2a:d8:c7:0c:52:75:76:a0:28:
                    80:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:66:9A:F2:40:65:43:05:67:92:27:78:A8:40:A7:B6:EB:F9:53:8C
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131352e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:36:a5:a0:b7:64:70:34:29:d5:57:9f:9e:78:4d:cb:10:9b:
         d4:f4:11:e9:e5:81:7c:e0:94:e6:0c:c1:fc:97:ff:23:36:32:
         49:36:09:ca:3e:bd:25:a5:f2:5e:ae:d9:11:67:11:61:5f:ba:
         70:c7:d6:11:65:68:29:74:89:46:e1:91:67:24:a9:c9:ec:da:
         ac:9f:26:8e:15:2e:15:a4:66:fe:9f:1c:23:27:fe:f1:59:87:
         22:fd:2d:85:2e:5a:40:bf:27:67:be:c5:cb:ee:dd:89:1f:a2:
         28:f8:eb:dd:ed:fe:59:eb:68:d1:0d:0b:c4:b3:8c:67:e1:37:
         cd:5a:c4:96:49:e9:3e:83:9b:2b:31:bb:1e:f0:74:30:91:8a:
         4b:fd:d8:fe:79:e7:2a:1b:03:6e:35:08:ba:78:b4:fb:2d:c7:
         e6:67:43:ee:84:06:96:7f:b6:59:fa:de:f8:f9:84:59:9a:8d:
         11:ff:51:40:e7:49:b6:12:80:46:6c:39:9f:80:e7:af:d5:19:
         16:16:b7:43:25:57:16:7c:89:29:6c:b4:e8:f5:eb:5d:d1:94:
         c3:a4:ae:7d:05:c6:0d:c0:7e:ee:fd:2e:38:9b:d8:a5:82:2a:
         fa:05:4e:d8:53:13:fe:08:d4:8a:e3:73:ba:06:bf:82:72:3a:
         8b:b9:bd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org