Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          EiPF1Z9YJlBh/76QSks6lB6QjBMrIvPwPUg/7vsJHrQ=
Subject key identifier:   69:7B:70:D7:76:94:11:2C:FD:6F:A2:B6:89:C3:B6:36:E2:33:7A:55
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       49A286302A3685527F1B4AED548EBD35E90FD4A1
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:19 +0000
ROA not before:           Tue 05 Mar 2024 17:42:19 +0000
ROA not after:            Tue 04 Mar 2025 17:47:19 +0000
asID:                     270081
IP address blocks:        179.49.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a2:86:30:2a:36:85:52:7f:1b:4a:ed:54:8e:bd:35:e9:0f:d4:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:19 2024 GMT
            Not After : Mar  4 17:47:19 2025 GMT
        Subject: CN=697B70D77694112CFD6FA2B689C3B636E2337A55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:13:d7:4d:db:fe:55:3f:40:17:80:cb:d2:7d:
                    b9:e7:07:6c:52:2b:74:b8:ee:9a:6c:97:db:85:7c:
                    d2:a8:c2:aa:78:19:60:22:b3:31:f3:0f:d5:7a:7b:
                    49:24:64:1e:a9:68:2e:55:1d:19:14:8a:34:52:0e:
                    54:4e:4d:47:f6:d1:b1:1f:7a:93:e5:88:59:f3:b4:
                    03:25:33:2f:93:11:f9:77:2c:6f:b3:a8:26:39:eb:
                    e1:24:ea:aa:a7:9c:29:b3:66:0b:5c:37:83:59:ec:
                    61:29:22:c2:7f:8b:92:7d:cd:2f:48:b2:f2:99:2f:
                    55:33:12:29:d1:be:b7:e5:dd:78:0f:55:1b:f8:b0:
                    38:a8:6f:a8:35:35:a0:cf:3b:0b:bd:a8:e6:41:82:
                    99:41:24:98:ea:2a:2b:3e:9f:3d:cd:a9:45:6f:0a:
                    66:97:11:1a:12:d4:7d:fc:ac:78:1c:4f:f9:9f:92:
                    4a:dd:40:e1:20:fd:a4:69:c7:e4:77:ff:5a:2c:d9:
                    83:b9:fe:d2:29:a6:bc:c2:42:88:da:17:bb:38:c0:
                    2e:db:9d:8a:c6:ed:39:fb:da:c6:3c:09:95:b8:92:
                    01:4d:41:40:55:0f:77:2c:7e:72:81:db:dc:90:12:
                    62:9b:b9:50:db:d6:4e:91:c8:8a:1c:28:05:cb:e4:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7B:70:D7:76:94:11:2C:FD:6F:A2:B6:89:C3:B6:36:E2:33:7A:55
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135362e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d5:39:6e:5f:40:d3:91:eb:5a:4a:1a:6e:c6:c8:a1:9c:f5:
         0b:93:cf:cc:03:f8:f8:db:9c:dc:c1:c1:de:0e:0e:e6:7c:81:
         c8:37:6a:ef:8f:a4:1b:36:92:54:84:cb:84:36:c2:93:23:98:
         d5:ae:de:0e:2a:5d:e8:78:49:b6:1c:fe:e4:f2:e9:b0:e0:19:
         c7:04:cb:51:8b:7f:78:c2:9d:a3:a3:9d:73:33:96:f2:6e:88:
         cf:3c:7c:c7:f9:da:76:98:52:1b:ae:3d:2a:11:7b:9a:2d:86:
         5d:b1:19:bf:89:a2:3c:87:b6:c1:71:d4:e2:b6:70:85:46:14:
         66:dc:fa:46:62:b7:29:e2:5d:69:23:dd:bf:b6:91:1a:97:b7:
         83:d2:83:03:54:8f:3e:0d:05:bb:0b:23:59:47:cc:8e:7f:57:
         f2:df:2e:34:19:e3:e6:12:84:30:c2:79:70:e8:e3:bf:d5:0f:
         be:3c:a5:8f:f7:d5:f2:a7:ea:ac:4d:03:64:75:db:81:1c:f5:
         ce:28:c6:33:97:33:e0:f8:fd:2f:f3:ae:f8:69:95:f5:e6:04:
         0f:50:8a:63:4a:b2:1e:ad:21:58:96:e8:79:0f:ea:53:e1:d0:
         b9:a6:2f:60:88:43:81:41:78:c0:6f:33:d6:fb:8f:3c:58:60:
         08:82:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org