Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132342e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132342e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          3f9sLU3o9M0spxXBl5qSfvG3lrtHg593hhiBKthgbaI=
Subject key identifier:   5B:38:40:3D:B9:8F:D3:D7:D6:68:F9:D8:D0:B7:37:4A:0C:56:9D:55
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       0FA9040D73B72EFF7FE21B27B154CF5943200A33
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132342e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:13 +0000
ROA not before:           Tue 05 Mar 2024 17:35:13 +0000
ROA not after:            Tue 04 Mar 2025 17:40:13 +0000
asID:                     27823
IP address blocks:        179.43.124.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a9:04:0d:73:b7:2e:ff:7f:e2:1b:27:b1:54:cf:59:43:20:0a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:13 2024 GMT
            Not After : Mar  4 17:40:13 2025 GMT
        Subject: CN=5B38403DB98FD3D7D668F9D8D0B7374A0C569D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:bf:c0:66:0c:a5:96:a1:ed:10:66:65:9d:e8:
                    c0:fe:56:ed:f6:47:07:63:91:39:09:55:81:c1:6f:
                    1b:86:f7:77:1e:8d:22:f2:c6:8b:72:04:c3:e0:bb:
                    5c:26:0c:9d:48:0a:4f:79:08:c7:9a:2d:09:09:c8:
                    0c:a1:4e:27:38:79:de:51:89:dc:a3:6c:4a:6d:ce:
                    32:58:6b:88:da:5c:39:7e:c7:19:60:70:76:f8:dc:
                    8b:42:7f:5a:c8:0b:d3:cb:6c:a1:c8:e8:ef:a1:07:
                    fc:49:28:94:44:1d:ee:ef:cd:0a:13:29:88:c7:6d:
                    9e:19:fb:73:f7:0c:ba:6e:31:21:d0:ff:b8:1b:e8:
                    57:5c:dd:92:58:24:38:8d:5e:64:25:91:fa:d9:c3:
                    c1:d5:8a:06:31:2e:a9:2e:64:f2:08:7a:c6:fe:bc:
                    0e:e7:09:15:19:61:14:3e:e4:72:f1:10:c4:5e:31:
                    02:54:a0:14:d0:ae:89:67:72:e2:6e:04:32:d3:52:
                    ae:8b:06:cc:f4:52:b2:72:07:63:3e:cd:72:87:9e:
                    27:be:60:f4:3d:c1:b2:45:4f:bc:6f:ee:4f:80:af:
                    8c:76:44:17:b6:de:3c:55:72:0c:8d:a3:a1:3a:76:
                    59:b4:d6:5b:d1:6f:0c:67:c6:34:fa:48:fb:30:7f:
                    9b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:38:40:3D:B9:8F:D3:D7:D6:68:F9:D8:D0:B7:37:4A:0C:56:9D:55
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132342e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:f3:de:6a:f9:7e:f8:6d:5b:6c:ad:d1:e6:46:0b:a1:6d:89:
         82:1b:b4:8f:b2:b7:65:32:bd:4c:a5:e1:e3:04:61:21:bb:3e:
         47:58:e5:82:d7:59:cb:50:ed:90:35:9f:3d:23:59:b2:89:10:
         96:a5:1e:22:7b:9f:c8:83:da:9b:ec:7f:46:36:c8:30:b5:23:
         92:d4:61:8f:f9:c6:b8:94:e2:02:37:e7:8d:99:1f:82:65:ae:
         e2:2c:f3:f5:c9:71:60:89:0d:7c:e2:73:a8:d7:b6:7a:5b:0a:
         f6:c8:aa:78:45:ee:4c:be:ea:1e:e4:0e:22:4c:e7:d2:5b:ed:
         03:ee:75:0e:08:a1:80:cd:b1:94:eb:ab:c2:5a:44:9c:78:49:
         16:c4:0a:76:f3:83:fd:58:62:3a:92:94:c9:c6:14:1a:43:82:
         21:ca:08:3a:b2:04:7b:7d:1b:0d:77:a3:df:bc:de:ed:3e:b5:
         85:bf:0c:c9:c4:f7:23:5e:40:f0:83:f6:07:69:37:91:99:ab:
         ee:c2:7c:a5:31:70:83:09:07:fb:74:55:96:07:16:87:95:91:
         8b:81:07:15:90:cb:58:ec:b6:1e:8a:c6:f3:c4:76:ea:79:97:
         26:c0:e3:93:24:01:04:d1:70:e5:29:28:d1:88:b6:63:fe:9f:
         6e:e2:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org