Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32332d3233203d3e20323730303831.roa
File:                     3137392e34392e3135362e302f32332d3233203d3e20323730303831.roa (raw, json)
Hash identifier:          7DCJ8zgKvTArSAuy+z0S7P42bh/aWr7WePTH25tM+xE=
Subject key identifier:   24:91:E8:68:66:24:CB:9E:9A:A8:90:05:1F:41:8C:2F:14:C6:F5:AC
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       0688391F5CEE0124B70FF92916B57C217C59C75C
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32332d3233203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:19 +0000
ROA not before:           Tue 05 Mar 2024 17:42:19 +0000
ROA not after:            Tue 04 Mar 2025 17:47:19 +0000
asID:                     270081
IP address blocks:        179.49.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:88:39:1f:5c:ee:01:24:b7:0f:f9:29:16:b5:7c:21:7c:59:c7:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:19 2024 GMT
            Not After : Mar  4 17:47:19 2025 GMT
        Subject: CN=2491E8686624CB9E9AA890051F418C2F14C6F5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:70:b5:0d:fa:d0:d7:dd:5b:3e:0c:50:aa:a4:
                    13:1a:8b:62:a3:68:3c:36:e8:6e:db:76:0a:65:b9:
                    dc:0d:91:b2:8c:d6:16:a6:e5:73:81:03:9e:44:c9:
                    c0:01:33:38:47:40:a4:64:d7:ff:c1:5f:a9:5d:d8:
                    21:8d:ac:59:90:cf:7c:e0:c3:9c:65:0b:8c:c0:6e:
                    bd:3a:97:0e:fd:65:f9:47:ae:25:c6:95:a3:30:16:
                    ca:79:b1:67:e2:8a:dd:ec:04:3c:27:b2:1a:9a:36:
                    49:7e:f9:ef:78:51:da:76:9a:73:e6:cb:56:b7:56:
                    d9:98:c5:01:a0:b8:95:4f:ec:c8:71:72:a6:3a:21:
                    4d:58:48:5b:e6:03:cc:c7:01:26:74:4f:27:bf:6e:
                    a4:fb:c7:79:a3:56:c6:7c:c0:c0:df:c1:04:33:74:
                    b5:5c:44:c2:45:b2:a1:3c:6a:08:f4:5a:48:ae:61:
                    82:04:be:85:2b:7c:3c:ea:42:dd:3e:76:b0:4e:85:
                    3a:38:24:fb:09:fb:ea:90:1e:71:42:ed:0e:61:24:
                    55:64:63:c8:b0:5c:1e:4f:42:8e:bb:cb:16:e0:f1:
                    33:81:e7:e9:57:e5:65:c0:5e:c3:7c:ad:37:c4:bd:
                    0a:cf:eb:bc:3b:f4:a3:6c:6c:7e:44:58:11:f8:58:
                    de:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:91:E8:68:66:24:CB:9E:9A:A8:90:05:1F:41:8C:2F:14:C6:F5:AC
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32332d3233203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:70:db:0b:fe:53:2f:a0:5a:e1:5c:a7:0c:31:8e:d3:06:
         71:00:17:79:95:f0:2c:a3:87:a7:d0:fc:a9:d1:f4:a7:5a:a5:
         47:b2:53:22:01:4f:18:1b:04:67:cc:13:c8:4d:a7:0c:a9:5c:
         ec:06:3d:7e:95:54:d4:e6:09:f8:31:63:d4:85:9f:2b:ed:fb:
         6c:5f:e8:99:09:58:9d:2c:74:77:72:d7:3d:4d:6d:38:48:26:
         82:60:4b:8f:d7:d6:c1:ee:ee:75:af:fa:78:84:58:c9:6b:23:
         cc:14:0d:9b:5d:68:f5:6d:a7:6e:52:86:7b:ed:51:57:67:6f:
         85:dd:20:3d:8f:84:1b:86:c2:95:f1:92:ca:e0:eb:65:93:9d:
         a9:7f:c5:1a:67:8b:5f:ac:04:d7:52:18:df:e5:a3:46:77:7e:
         b8:8b:b2:92:d7:2b:2b:d9:95:da:48:d7:73:2a:f2:64:14:af:
         2f:68:23:a5:e3:ea:11:45:52:5b:a7:88:f1:9c:40:58:2f:55:
         c4:31:dd:90:06:fc:3d:90:20:8c:d0:4a:84:eb:b0:c4:ab:a5:
         72:16:26:fb:41:1c:8a:5d:46:59:2d:c4:b2:f7:a7:8f:4f:6a:
         6c:4c:24:9d:bf:7d:7d:d3:2f:54:08:e8:b4:48:45:d7:0b:27:
         a5:b7:26:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org