Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131372e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131372e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          e7Lp1T0Q+AydkuLsayWxUjhIbASdrTc1U2le+gebqKQ=
Subject key identifier:   D2:D8:29:A1:47:88:27:03:44:A0:DA:36:C7:CE:04:31:4E:9C:DB:76
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       43F72412827D18AAA1F82593A34D98CEADDF8A7F
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131372e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     27823
IP address blocks:        179.43.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:f7:24:12:82:7d:18:aa:a1:f8:25:93:a3:4d:98:ce:ad:df:8a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=D2D829A14788270344A0DA36C7CE04314E9CDB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:d4:75:bb:b7:ed:23:20:b6:5f:c4:08:09:
                    44:d7:55:98:45:56:3e:44:61:7b:b1:9c:f1:bd:ba:
                    ac:b2:72:63:07:72:6a:d3:43:99:c2:7c:df:cf:41:
                    2f:93:d6:d0:5a:1a:e7:75:ad:ce:fc:c8:f0:61:e6:
                    a1:6d:6e:68:c7:d6:79:c7:a2:80:73:5a:d0:ab:bc:
                    64:41:ff:46:b3:bc:a5:c9:3c:78:59:b2:2f:3f:af:
                    a3:3c:8a:d6:95:e9:8d:61:89:e0:96:fa:00:ea:9d:
                    74:d5:c0:90:bf:bf:e7:cf:b5:bc:82:f0:4d:58:c5:
                    9d:89:70:e4:c7:45:e8:81:2f:de:e2:7a:19:cd:d4:
                    9c:3f:1f:42:ee:84:25:96:d8:35:3b:f1:c1:42:f3:
                    ef:19:96:25:82:67:aa:48:7d:51:83:64:5a:cd:61:
                    c1:a2:ee:07:b5:d7:25:96:08:87:04:04:68:b5:41:
                    89:c5:d2:3b:32:ac:d7:8d:79:7d:76:0f:e1:ab:08:
                    97:df:06:08:64:61:0e:42:93:bb:06:22:11:76:1f:
                    c2:24:f5:02:85:9c:49:28:5a:cc:a4:92:d5:b5:0a:
                    1a:fb:a2:75:d2:e9:ac:3f:0c:36:05:45:6e:ed:f9:
                    ad:d1:23:3d:25:08:d6:4f:41:ab:99:60:3c:c7:25:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D8:29:A1:47:88:27:03:44:A0:DA:36:C7:CE:04:31:4E:9C:DB:76
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131372e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:7f:84:e9:cf:0a:38:03:e9:e9:7b:a2:2a:f2:14:e2:84:c4:
         5a:29:3c:ec:db:2b:ce:5f:6a:24:78:b4:ba:7a:b3:e6:36:ef:
         53:b5:75:f3:5b:da:12:e4:9a:83:96:24:9d:71:b5:c8:69:36:
         92:86:7d:44:46:13:21:80:a4:62:ce:26:fd:9f:4a:b5:7c:5d:
         6c:84:1a:b1:77:72:df:51:89:6c:55:c1:bc:ea:9b:0c:43:eb:
         f5:7e:0c:7d:a4:f3:06:ff:48:49:4d:64:8a:5d:42:d5:94:5b:
         a0:7b:a2:1a:a5:e8:d2:04:77:c0:7e:02:a7:1b:26:69:bd:56:
         ce:b5:42:7a:53:3a:a2:65:07:d2:0c:4f:90:a9:2e:17:6c:cc:
         76:1e:80:94:f4:0e:03:4c:ab:a4:09:d9:09:1a:db:c3:62:2b:
         97:76:5b:70:d0:90:3a:3d:2b:8a:86:a3:3a:31:3a:1b:8d:7e:
         cc:c1:66:0c:b1:f5:9c:b5:52:48:57:69:b7:57:8d:17:35:da:
         5a:a6:68:e2:87:8f:d2:49:5e:99:d7:80:41:bb:03:33:de:62:
         5d:df:81:d6:6c:38:d2:36:34:db:8f:88:dd:c2:e8:90:f4:73:
         4b:b8:68:f0:a2:0b:b8:2e:09:e0:c9:03:86:24:83:7f:3d:d6:
         f1:16:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org