Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131392e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3131392e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          9rrfKXK4LxjzTsmtaUrKwdxryctmsu3m2yMTuKcnYiM=
Subject key identifier:   AB:D5:7C:B2:6D:BE:E6:5E:A0:65:35:FD:7F:FA:70:06:8E:90:8E:61
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       6C752ED817E40F839D961E5A7294505A5AE69370
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131392e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:05 +0000
ROA not before:           Tue 05 Mar 2024 17:35:05 +0000
ROA not after:            Tue 04 Mar 2025 17:40:05 +0000
asID:                     27823
IP address blocks:        179.43.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:75:2e:d8:17:e4:0f:83:9d:96:1e:5a:72:94:50:5a:5a:e6:93:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:05 2024 GMT
            Not After : Mar  4 17:40:05 2025 GMT
        Subject: CN=ABD57CB26DBEE65EA06535FD7FFA70068E908E61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5e:cc:9a:f7:b3:f0:a2:f1:54:2c:85:3c:36:
                    7c:38:a8:9a:30:82:0b:66:ae:e9:cd:71:c4:fd:2b:
                    2d:bb:91:43:78:06:7f:e1:ed:8f:00:35:2a:6d:a7:
                    f0:3e:3b:61:60:ba:cd:f3:30:b9:c4:72:e0:db:16:
                    a1:d9:15:c2:01:99:d5:c9:35:f3:d4:ba:a1:a7:33:
                    98:20:c9:a7:b1:d1:53:6f:c6:94:d1:ac:ac:cd:f2:
                    d8:92:26:cf:ce:bf:a8:44:63:ab:aa:ea:99:1a:fe:
                    b6:5a:80:7e:2d:35:20:50:b3:6c:2e:35:33:a3:c5:
                    01:ee:aa:10:25:06:dd:2d:0b:71:b0:c5:d5:af:68:
                    ea:a2:56:bc:b3:28:7c:24:81:8c:13:56:27:98:29:
                    67:d7:f5:2e:68:ad:d8:7b:f5:bf:2b:05:60:b2:9a:
                    61:4c:ad:2b:15:e3:c9:a8:02:75:85:6c:a0:d1:80:
                    62:9e:bb:04:4c:2d:95:71:11:cf:0c:ab:d5:d3:a4:
                    1f:17:5b:c6:48:f3:1f:27:35:46:7f:9a:11:29:60:
                    83:b1:f6:de:62:00:ab:b9:e5:66:8c:b3:7e:16:d7:
                    5e:e2:cc:1f:4a:de:d1:32:fa:77:ea:0f:20:47:cd:
                    d1:3b:78:24:34:8a:5a:cf:71:e1:57:de:98:e3:b2:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:D5:7C:B2:6D:BE:E6:5E:A0:65:35:FD:7F:FA:70:06:8E:90:8E:61
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3131392e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:1f:70:86:83:11:3f:39:b8:fb:93:ef:15:2c:ce:0d:fe:db:
         bd:3d:87:c2:60:2b:81:6b:20:b4:28:7d:9b:0e:a9:94:ac:da:
         9f:02:07:0b:c2:74:b6:2d:47:36:6c:d6:ad:70:b3:8e:ca:26:
         59:b5:cf:e7:de:8f:ed:6b:32:ad:11:62:36:b8:5e:2c:28:74:
         91:4b:f3:f6:59:06:8f:1e:8a:d1:ee:b5:5d:50:e0:08:d6:29:
         40:c2:3e:9b:bb:27:34:4a:ef:30:5d:1a:b1:64:aa:17:63:e9:
         7f:12:73:f2:b6:d2:f2:44:a1:fe:db:78:7f:ac:89:f6:86:0d:
         77:40:3f:31:94:46:d9:de:b0:b8:dc:6f:60:e4:9e:b5:f3:cf:
         50:9c:dc:eb:04:1f:ac:67:ae:09:2e:14:76:23:ac:74:dd:5c:
         ea:55:e0:36:7b:74:48:4b:ec:cb:9f:d1:5e:2d:df:b6:26:20:
         f3:3e:3c:44:5d:f5:f1:e3:30:45:7b:47:1a:24:9f:18:c5:2b:
         40:f2:84:a9:b2:29:db:82:50:15:3d:1a:dc:27:6e:a7:75:1b:
         ca:6e:8a:e6:5b:39:d5:e5:b7:0f:5c:49:9a:5a:50:ea:2d:ea:
         59:29:77:c1:81:ab:d6:c4:4a:8a:74:0d:dc:23:e4:8e:95:d0:
         0c:f6:9f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org