Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa
File:                     3137392e34332e3132362e302f32342d3234203d3e203237383233.roa (raw, json)
Hash identifier:          KnSYhHKkOBVawBsu2dJC6FFlBvb8aDtg3zOD+YmbgtY=
Subject key identifier:   61:07:B0:64:D4:7D:39:06:22:0E:A0:C6:5B:F8:73:90:2E:8F:FF:A2
Certificate issuer:       /CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
Certificate serial:       135031F56B009BD70236D41CE98F93B7151C736A
Authority key identifier: A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa
Signing time:             Tue 05 Mar 2024 17:40:15 +0000
ROA not before:           Tue 05 Mar 2024 17:35:15 +0000
ROA not after:            Tue 04 Mar 2025 17:40:15 +0000
asID:                     27823
IP address blocks:        179.43.126.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:50:31:f5:6b:00:9b:d7:02:36:d4:1c:e9:8f:93:b7:15:1c:73:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5C31DCA4062FBA8FF4175C518EF2246CF570D80
        Validity
            Not Before: Mar  5 17:35:15 2024 GMT
            Not After : Mar  4 17:40:15 2025 GMT
        Subject: CN=6107B064D47D3906220EA0C65BF873902E8FFFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ea:40:a7:90:36:ce:a6:5f:38:81:02:18:b1:
                    eb:bc:6c:8c:85:2a:a6:14:f6:08:03:49:f0:1b:dc:
                    c4:61:c0:06:7e:11:89:40:dd:47:fb:cf:5b:2d:46:
                    40:f8:86:49:45:32:bd:d7:f3:fa:9e:f1:d7:8e:d9:
                    16:16:8d:50:2e:cb:b4:c0:65:cf:3a:41:bd:25:74:
                    76:fe:80:b2:d3:1d:16:5e:db:45:92:9d:3e:57:6d:
                    39:d2:b4:b4:f1:c0:ed:09:a4:5c:1a:05:66:02:d3:
                    c0:dc:7c:0d:05:eb:38:79:52:b5:4b:f5:2a:af:39:
                    40:53:49:e8:da:a3:2c:ee:a7:48:b4:ac:7d:4a:8a:
                    ed:ba:70:8f:43:2d:b9:61:52:21:65:16:ce:94:90:
                    63:0c:8f:19:72:a3:9c:12:7d:ec:78:08:ad:d5:4a:
                    d7:54:6f:bb:f6:64:38:ef:01:bf:b8:e2:58:6d:48:
                    b8:31:d4:fb:1a:03:8f:4d:32:2f:aa:2b:33:d2:38:
                    1c:42:1e:11:50:00:42:8a:07:22:01:62:74:10:fa:
                    13:bd:cb:f4:11:a0:d1:41:e5:3c:0d:0b:1c:d5:3c:
                    ad:e7:39:4d:04:d8:84:8f:87:65:b5:3c:78:09:07:
                    e8:61:f9:76:78:89:01:3c:cf:fa:e8:46:0f:7a:15:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:B0:64:D4:7D:39:06:22:0E:A0:C6:5B:F8:73:90:2E:8F:FF:A2
            X509v3 Authority Key Identifier:
                keyid:A5:C3:1D:CA:40:62:FB:A8:FF:41:75:C5:18:EF:22:46:CF:57:0D:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5C31DCA4062FBA8FF4175C518EF2246CF570D80.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16B1B57B19B743C1E0B67DC5020E769FF697D5D8FE67645443C0170A59A628F4/0/3137392e34332e3132362e302f32342d3234203d3e203237383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:b5:e7:d8:62:d5:c6:0f:80:10:37:93:be:f7:24:b9:8f:86:
         6b:57:be:42:f2:d1:d1:98:a8:6c:6d:f8:d6:e1:69:ce:99:be:
         99:3f:15:88:20:03:e1:94:7a:77:77:99:2d:71:c9:28:fb:a6:
         4b:07:f1:c5:7d:4c:95:d7:99:d9:bf:b5:30:4c:ac:4d:08:0f:
         e1:c7:3d:1d:96:0e:be:de:2b:71:42:4d:1f:b3:a7:3b:93:05:
         97:d2:7a:88:5d:e3:4a:24:f2:db:a9:34:2b:15:6b:11:18:9d:
         c5:9d:70:89:ad:94:41:56:4c:86:af:fb:da:5c:78:9e:21:71:
         76:c5:c9:b1:2c:67:ef:1b:8b:0e:4f:16:41:a1:93:ec:55:10:
         71:90:ea:3f:4e:b2:05:db:40:29:5c:8b:08:49:df:21:ce:9e:
         33:63:9a:56:37:1a:f8:e9:9b:f2:37:49:a0:1c:b6:1e:2d:bc:
         28:5f:35:88:1c:f0:ed:79:a9:13:80:42:92:7a:3e:77:65:84:
         bf:9b:10:ad:ba:d1:3a:56:0d:3f:82:e0:3f:fb:aa:f2:d7:b5:
         68:19:9a:91:72:ff:e3:bc:cd:a3:15:2d:4c:89:ea:34:f8:f0:
         68:e8:1a:1b:64:c6:6e:2b:df:3e:3f:43:a9:11:54:51:69:d6:
         db:a7:86:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 05:50:23 2024 by rpki-client on console-fra.rpki-client.org