Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa
File:                     3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa (raw, json)
Hash identifier:          8C+ijHWCBlOoisQ5yulrQvN0U12OoLKPoiD+0FGaPx8=
Subject key identifier:   47:A2:A7:CD:F2:DE:F3:20:65:79:66:26:B2:51:3F:B8:4C:16:11:36
Certificate issuer:       /CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
Certificate serial:       5E6F94D2217DE296737CDA760D92DEA0163128BD
Authority key identifier: 0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa
Signing time:             Tue 05 Mar 2024 17:47:17 +0000
ROA not before:           Tue 05 Mar 2024 17:42:17 +0000
ROA not after:            Tue 04 Mar 2025 17:47:17 +0000
asID:                     270081
IP address blocks:        179.49.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl
                          rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:6f:94:d2:21:7d:e2:96:73:7c:da:76:0d:92:de:a0:16:31:28:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B1C628987A31BE87F63D8B3617E91E32E3908C3
        Validity
            Not Before: Mar  5 17:42:17 2024 GMT
            Not After : Mar  4 17:47:17 2025 GMT
        Subject: CN=47A2A7CDF2DEF32065796626B2513FB84C161136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:ac:b5:90:64:d6:26:b0:30:01:1f:19:ce:
                    c9:23:b8:8b:d8:8a:f4:39:97:02:0e:a1:9c:83:e0:
                    bc:7e:b5:15:b7:4a:14:73:6d:d5:48:c9:43:75:51:
                    ba:97:c8:4f:53:81:ec:a5:a4:9a:da:65:0f:11:f5:
                    d0:0f:12:16:fe:b6:82:45:3d:19:81:c9:20:a0:2e:
                    f9:6a:a6:7c:ce:e7:c3:d0:78:8a:ea:99:6a:8e:d4:
                    06:c9:8a:12:68:13:22:d4:58:64:b1:8d:ad:10:35:
                    a4:5e:7f:11:58:72:c9:ad:31:4b:b2:ee:4d:c8:0c:
                    04:6f:04:dd:5c:0a:a4:1e:c1:22:32:92:73:5f:1c:
                    a7:d5:d8:78:ea:90:f0:bd:cc:09:f8:d4:1c:98:b6:
                    de:d4:dd:bd:7d:0c:a7:f2:a4:b7:ef:40:c1:a8:24:
                    9a:50:5b:6b:88:06:6f:a6:97:36:7c:a7:40:70:05:
                    cb:36:95:66:f2:15:7c:4f:a0:43:38:52:a4:47:7c:
                    39:06:01:09:30:e5:d5:c7:4c:c6:64:ab:f7:c1:f3:
                    34:61:1f:c3:c3:55:13:16:44:60:11:46:fd:c0:0e:
                    ff:36:76:1f:5c:8e:8a:a5:56:e6:de:53:c6:fd:95:
                    00:af:a2:3d:cb:30:bd:12:54:d9:ec:08:30:71:80:
                    d1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A2:A7:CD:F2:DE:F3:20:65:79:66:26:B2:51:3F:B8:4C:16:11:36
            X509v3 Authority Key Identifier:
                keyid:0B:1C:62:89:87:A3:1B:E8:7F:63:D8:B3:61:7E:91:E3:2E:39:08:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B1C628987A31BE87F63D8B3617E91E32E3908C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17A9C74DF00F547107AC06B2F7E743243B3EB80301914038D5E7A33AFC3CD0F3/0/3137392e34392e3135372e302f32342d3234203d3e20323730303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:e8:81:15:c3:88:1d:e5:9a:8f:16:54:a7:55:f9:37:36:1f:
         c2:f6:b3:40:b5:7c:34:34:49:fd:75:28:e4:e6:d7:68:cd:f2:
         fe:48:63:ab:e8:c6:ab:b5:82:c4:08:4f:54:98:2c:fc:71:8e:
         4b:17:20:f5:24:8d:b5:56:f0:3d:17:8f:88:61:77:33:3b:ba:
         88:c3:dc:7d:62:d6:5d:cb:d8:16:f3:c7:d2:80:f5:78:9f:4f:
         cf:f0:7a:85:75:fa:90:2d:a5:e3:d2:26:25:ec:0c:56:27:8b:
         c3:f8:46:40:6a:03:eb:46:f2:a3:18:2d:c4:7f:be:07:ff:19:
         78:25:cd:4a:24:24:c8:2a:5e:60:41:5b:ca:31:87:b1:7b:54:
         fb:75:24:2e:d5:b2:30:35:93:93:a6:b0:b1:c1:5e:d8:7c:8d:
         7e:74:c6:ea:af:4e:ef:df:c6:43:47:46:80:6f:ef:14:5d:c5:
         2c:03:6a:69:db:c8:3a:9d:d9:e0:b6:47:96:31:eb:d4:34:84:
         c2:43:61:03:db:20:da:c8:d4:96:44:06:25:f3:c9:eb:a6:0a:
         93:df:6d:3a:0e:c3:0b:4b:a2:01:20:a6:a1:a6:42:50:80:71:
         ef:2c:a0:87:1a:68:cc:2a:1c:ac:6d:9e:d7:ab:b8:19:e0:73:
         58:61:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org