Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132302e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          eKf83VG+J1t1JygqN4ywAjIPzTV/LTvCiTDkMNefXOE=
Subject key identifier:   46:1A:60:87:F1:27:77:0C:27:74:D7:B8:73:2D:C3:A2:35:23:EF:E1
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       124B5CBC1D028E49B29C1590030216011929BBF3
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:11 +0000
ROA not before:           Tue 05 Mar 2024 17:35:11 +0000
ROA not after:            Tue 04 Mar 2025 17:40:11 +0000
asID:                     27823
IP address blocks:        179.43.120.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:5c:bc:1d:02:8e:49:b2:9c:15:90:03:02:16:01:19:29:bb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:11 2024 GMT
            Not After : Mar  4 17:40:11 2025 GMT
        Subject: CN=461A6087F127770C2774D7B8732DC3A23523EFE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:8c:74:b0:62:61:93:a9:82:51:6e:11:4c:83:
                    76:dc:cb:8d:ea:78:d1:52:3e:8a:8c:8f:0c:c8:9d:
                    5f:65:a8:65:29:3b:7a:e0:19:96:19:73:89:ff:14:
                    50:6e:2a:88:2b:78:ef:23:48:59:7b:37:95:d4:0a:
                    ba:6e:ec:e9:57:da:00:5c:11:01:5d:3c:65:7b:43:
                    a0:11:c5:8c:89:21:0a:e4:d8:0e:93:1e:03:f2:9b:
                    53:f1:5d:be:43:ac:f9:6b:fc:93:f9:cd:38:c8:08:
                    ec:a6:86:64:cd:82:ba:80:9c:80:f6:ea:2f:fe:24:
                    e2:ec:cf:19:03:ca:48:a3:00:11:0c:49:46:59:b2:
                    90:0e:91:78:8c:81:55:96:ea:1a:52:82:43:af:ad:
                    1e:50:c0:9a:7e:5e:73:1b:bd:87:6b:58:70:df:07:
                    7a:57:af:ef:ce:12:7a:b2:6b:42:8e:de:55:ae:71:
                    0e:3b:9a:de:18:d4:5e:3f:44:28:b0:92:50:74:82:
                    17:17:3c:ec:11:db:17:bc:43:58:61:91:f8:9b:38:
                    04:88:e4:42:5c:3d:fa:47:3d:55:04:70:3c:5f:29:
                    81:bb:51:a9:97:eb:5b:ab:c1:22:fb:b4:0b:6a:c3:
                    03:02:71:e9:eb:5a:7a:5f:c8:a1:58:2c:e8:65:0e:
                    e4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1A:60:87:F1:27:77:0C:27:74:D7:B8:73:2D:C3:A2:35:23:EF:E1
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132302e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:f4:f4:d4:87:90:1f:ed:e6:46:ac:1a:5a:90:2d:9e:e7:
         34:2b:79:d7:4b:6a:4a:e6:fa:bc:b9:f4:e7:ff:cd:cc:99:03:
         f0:71:c9:b2:79:3a:e9:c0:56:96:73:c5:54:fd:b3:67:60:2e:
         03:7b:b4:4e:7a:ca:5d:b9:7a:38:b4:eb:89:c1:27:8f:e9:0d:
         4c:c0:7c:65:58:47:79:a5:b1:43:ae:f5:5c:5e:53:ef:02:14:
         e7:66:41:5f:9e:51:46:41:11:5d:dc:61:4a:31:6e:35:8b:e0:
         b6:aa:dc:03:ba:32:bd:25:05:ad:27:d1:a9:2e:c1:8d:ff:e5:
         5a:51:e1:5c:71:4a:57:ca:1f:ac:e4:b6:5f:48:4d:3c:d1:99:
         3a:52:da:19:6d:5e:a8:50:b5:b8:76:f1:8a:41:07:16:53:cb:
         9b:a6:af:9e:49:bd:df:8c:25:5d:2f:3b:70:e1:6e:28:ec:70:
         a9:b1:e8:15:a4:6c:4f:50:14:f4:70:2e:a0:5b:a4:bc:b0:84:
         3b:a8:22:3d:13:8f:40:4c:58:17:0d:13:32:25:24:9b:d5:d5:
         31:44:71:7a:87:c3:e0:5e:27:1d:68:c5:1c:57:bc:4b:75:df:
         86:8d:35:b5:d2:d6:00:94:35:22:23:a7:b7:b3:9c:97:01:26:
         9e:0a:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org