Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e203237393839.roa
File:                     3137392e302e32372e302f32342d3234203d3e203237393839.roa (raw, json)
Hash identifier:          grf5QXzI/OYGr+BvGKusnuL7PR4da7t6IBQRX1BtBvM=
Subject key identifier:   8E:53:A3:CC:B2:03:03:7E:94:CA:C0:CD:55:36:C7:4A:6F:F7:73:E9
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       5191F7CF9D726859915BEE98FCB854F9A22AFBE6
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e203237393839.roa
Signing time:             Tue 05 Mar 2024 17:54:19 +0000
ROA not before:           Tue 05 Mar 2024 17:49:19 +0000
ROA not after:            Tue 04 Mar 2025 17:54:19 +0000
asID:                     27989
IP address blocks:        179.0.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:91:f7:cf:9d:72:68:59:91:5b:ee:98:fc:b8:54:f9:a2:2a:fb:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:19 2024 GMT
            Not After : Mar  4 17:54:19 2025 GMT
        Subject: CN=8E53A3CCB203037E94CAC0CD5536C74A6FF773E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1e:b8:4b:67:9f:a6:c9:8c:cd:c2:08:4d:86:
                    77:e2:88:bf:31:88:e6:2e:cd:b2:21:d8:7a:24:c8:
                    3a:3c:b4:90:e0:41:6b:4c:f6:41:a0:34:4b:fc:63:
                    58:ff:d9:47:a1:3c:33:61:e4:1f:78:c0:4b:6b:99:
                    0b:15:96:9f:34:35:3d:ec:56:d7:5a:2b:16:91:eb:
                    6c:92:ae:e5:bf:28:ac:ee:63:0d:12:2c:6b:47:cf:
                    76:ff:8d:98:8f:ed:4b:79:83:16:1a:83:ad:8d:66:
                    99:c8:bb:fd:b3:4a:45:12:8a:60:30:37:30:33:79:
                    43:11:08:60:ff:6f:6b:2f:64:a3:90:36:04:36:d0:
                    80:dc:05:df:3c:67:ac:1a:5d:10:81:c5:be:ef:69:
                    03:c5:7c:47:2d:e5:22:b7:64:d6:89:04:32:94:2c:
                    b1:19:f0:da:d0:26:02:04:03:96:7d:be:cb:78:d7:
                    bb:f3:d6:85:08:71:96:6c:25:75:20:04:3d:02:21:
                    7c:0d:ec:dd:a5:4c:8d:b6:32:de:dd:c4:81:c6:a0:
                    f4:18:b3:f4:b2:02:a1:27:5e:b7:19:d9:51:eb:49:
                    ec:b6:57:c6:9a:53:40:a2:e4:f9:2b:2b:f9:28:15:
                    85:fb:4f:c5:2c:b0:4f:3b:7b:43:1b:c2:7f:4f:26:
                    42:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:A3:CC:B2:03:03:7E:94:CA:C0:CD:55:36:C7:4A:6F:F7:73:E9
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:c3:5f:a5:6b:22:f3:59:47:e1:20:02:dc:b8:27:e3:62:
         b5:24:72:83:14:7b:d2:09:e1:b2:76:36:4b:3f:d9:59:3b:dd:
         ad:a8:12:8c:7a:42:fc:bf:0e:bb:94:00:1d:b4:a5:7c:11:b7:
         5f:86:00:3c:16:10:ca:8c:c8:2c:a6:37:6c:45:7b:9e:4b:df:
         46:12:b3:40:6b:2f:ff:41:dc:48:55:6f:10:d2:78:41:3b:b8:
         67:26:e7:4d:95:00:a0:8d:60:0b:ab:02:d6:4c:22:a2:80:f1:
         d7:15:64:8e:62:78:54:85:59:08:c5:60:e6:14:9f:d2:32:7b:
         40:e7:8b:39:80:04:c0:20:be:9d:84:9d:25:a1:19:ed:85:b2:
         d6:85:6f:84:bb:5b:e8:fd:81:1e:64:fd:3c:56:57:5a:c3:b8:
         11:aa:73:d1:7a:8e:cb:3a:87:30:d2:40:ea:f4:7f:df:1f:c7:
         00:aa:af:2f:2f:dd:00:46:df:05:f0:38:3d:c3:6e:88:75:6c:
         55:b0:86:58:6c:a2:18:a7:3d:69:eb:fa:0e:b2:bb:8a:fb:48:
         c4:f7:51:f4:41:c3:84:2d:84:54:de:5e:f9:d3:18:e3:a2:b4:
         b8:f2:22:a7:29:fe:5e:89:5f:22:9f:3c:d7:6b:76:a8:64:fc:
         b1:22:47:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org