Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132352e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132352e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          t0VwCEuSqwpj99B8MrHwdnFf0xEkY82kw7WTka9cr28=
Subject key identifier:   C2:12:7B:51:0C:D9:CC:80:AB:1E:47:07:43:EA:5D:58:B6:F8:70:D9
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       7B244100D571EA1C7DCF8F33459D40D51E73C1F8
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132352e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:05 +0000
ROA not before:           Tue 05 Mar 2024 17:35:05 +0000
ROA not after:            Tue 04 Mar 2025 17:40:05 +0000
asID:                     27823
IP address blocks:        179.43.125.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:24:41:00:d5:71:ea:1c:7d:cf:8f:33:45:9d:40:d5:1e:73:c1:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:05 2024 GMT
            Not After : Mar  4 17:40:05 2025 GMT
        Subject: CN=C2127B510CD9CC80AB1E470743EA5D58B6F870D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ec:05:25:fb:b3:60:54:c1:f5:f6:b7:ac:09:
                    9e:75:e6:24:92:27:05:9d:88:ee:dc:5a:22:46:c0:
                    1c:fd:c7:88:97:ee:50:60:04:6d:39:33:06:de:53:
                    8d:b5:24:33:68:ea:4a:02:0d:34:5b:8e:5d:30:13:
                    40:b8:52:13:de:7e:e8:24:83:be:74:fc:9d:b9:5a:
                    fb:c8:1c:47:e5:97:2e:76:10:db:7d:dd:8d:70:33:
                    10:a0:7a:11:69:41:cd:96:cc:f7:78:f5:79:fc:29:
                    51:4d:af:26:bf:55:6c:d2:f7:47:42:63:e7:c1:f2:
                    f5:05:25:11:59:85:7b:50:93:82:72:10:17:14:13:
                    bc:cb:8a:cd:f4:73:43:df:bd:de:3f:a4:fc:d5:17:
                    43:c7:1f:2d:44:ca:d4:3e:69:c6:21:f5:22:de:39:
                    5d:d0:60:6f:e9:22:9b:01:29:b0:5c:ee:ef:ae:d3:
                    81:5d:d0:22:4c:58:ac:a6:58:e3:a7:fb:de:f5:98:
                    fa:f7:71:7a:78:72:62:de:cc:c4:7f:8c:5b:c6:7d:
                    c7:f1:ea:2d:74:3b:98:35:de:68:c5:22:f1:f1:c4:
                    d9:02:80:8a:e9:5f:07:de:31:20:0b:4f:ad:ec:95:
                    d6:db:96:57:a8:0e:21:be:55:07:78:04:52:b0:f7:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:7B:51:0C:D9:CC:80:AB:1E:47:07:43:EA:5D:58:B6:F8:70:D9
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132352e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:d4:75:67:61:02:f3:fe:3a:53:51:8d:5f:f3:a5:db:a7:e9:
         a2:18:e0:d5:72:54:ea:48:c9:98:55:fe:83:f6:95:bd:9e:aa:
         31:ed:b5:c0:02:f5:6b:c5:2d:e4:f9:cf:4a:50:ca:0a:e3:c2:
         5e:32:01:1d:24:78:7d:96:b1:0f:0d:c7:d7:68:bd:92:7e:1c:
         e5:0c:30:43:4b:17:6a:cb:ce:8b:d1:e8:9a:cc:2b:b8:5b:d1:
         f5:ca:b6:3d:80:8a:0e:0a:bc:6d:17:6e:9e:df:77:4d:50:7d:
         bd:1c:eb:cf:1f:58:db:e4:82:e0:28:01:3b:54:bf:69:34:44:
         fd:9c:00:7b:80:1e:fb:fc:ed:05:97:1b:55:b2:8a:62:d3:3b:
         bd:c2:f6:3d:13:bb:52:5c:9f:f3:18:97:0a:0b:34:01:04:ab:
         7f:c9:30:c1:49:ad:f9:7c:98:2a:d8:c7:c7:95:07:97:f5:4f:
         1b:99:f1:fa:4d:9e:a4:21:20:90:72:92:06:e7:50:14:c7:53:
         91:95:b9:af:97:c6:12:5f:fc:5f:69:a2:54:68:bd:17:e1:19:
         9b:a8:1a:21:56:be:ef:75:67:89:b3:9c:43:17:16:fc:96:62:
         2d:b8:5f:ae:e5:28:aa:5f:ea:2c:b1:0a:dd:94:b4:ab:45:37:
         6d:25:6b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org