Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa
File:                     3137392e302e32372e302f32342d3234203d3e2033333536.roa (raw, json)
Hash identifier:          krDa079IYFOErViYFtPZDcPj9hTC9MfPLMtI741l4CQ=
Subject key identifier:   A4:86:D6:99:21:83:3A:23:3B:30:7D:49:B8:1C:47:6D:C4:3F:30:98
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       CC5F0CBCAC5931A2EBC221318B6731F74EF4C6
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa
Signing time:             Tue 05 Mar 2024 17:54:18 +0000
ROA not before:           Tue 05 Mar 2024 17:49:18 +0000
ROA not after:            Tue 04 Mar 2025 17:54:18 +0000
asID:                     3356
IP address blocks:        179.0.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cc:5f:0c:bc:ac:59:31:a2:eb:c2:21:31:8b:67:31:f7:4e:f4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Mar  5 17:49:18 2024 GMT
            Not After : Mar  4 17:54:18 2025 GMT
        Subject: CN=A486D69921833A233B307D49B81C476DC43F3098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:68:56:93:ac:bd:69:92:1d:0c:78:24:b0:
                    0a:d1:2e:ed:f5:44:c0:f4:b1:4d:d8:15:c5:c3:26:
                    98:13:4f:ef:64:72:b8:fb:b8:5c:8a:d5:46:54:04:
                    47:f3:af:a3:22:a9:85:0d:d5:87:2e:9d:08:ff:d1:
                    73:86:eb:c4:9d:a5:09:2c:1d:f2:90:e8:3c:1b:36:
                    a1:3f:12:c4:56:67:55:da:f6:75:85:39:05:da:37:
                    f6:2b:32:13:52:a4:f5:b1:12:bc:91:aa:c9:41:c3:
                    74:9c:7e:2f:cd:c3:3a:c0:6e:e0:65:8d:9d:31:4d:
                    f5:86:f6:ff:c0:67:36:2f:d6:fc:29:59:d9:2c:0c:
                    85:ec:08:2a:9a:1b:dd:da:00:a0:49:f7:1c:59:83:
                    40:8f:d6:5a:62:37:63:ec:7c:9d:37:5b:b4:13:f6:
                    48:32:8e:e0:ff:4e:e2:51:69:0c:73:68:a0:56:b2:
                    92:82:9e:5c:0c:34:25:cb:c4:fc:5c:81:1f:e4:2d:
                    7a:d9:c2:d6:fc:93:ce:9b:e9:67:3e:5a:c3:7b:b1:
                    15:e3:5e:c5:60:79:a5:b8:f7:8d:ba:81:f7:52:0b:
                    0b:72:c9:5d:94:21:d9:cd:e6:1c:0a:b4:49:c3:94:
                    ac:61:c6:b8:2f:61:c5:aa:93:2f:4a:8d:76:3f:f3:
                    74:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:86:D6:99:21:83:3A:23:3B:30:7D:49:B8:1C:47:6D:C4:3F:30:98
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/3137392e302e32372e302f32342d3234203d3e2033333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:40:b4:1d:95:7b:28:ca:e7:9b:06:5b:a0:9f:82:3b:76:d7:
         79:54:ab:96:f4:81:42:90:bc:cb:0a:08:25:21:67:3b:71:9b:
         b6:a9:86:3f:4b:1b:b2:f4:52:7c:ac:cb:71:a5:b0:87:12:41:
         b5:07:13:e7:00:41:43:2a:ec:70:89:6f:99:f4:4e:88:2f:64:
         99:91:c3:3f:18:4a:01:3c:d4:a7:ca:3b:ce:4a:f1:d5:b0:8a:
         e9:01:34:14:d1:82:cf:06:9c:61:84:9b:52:8f:d2:3b:15:59:
         8c:f1:8b:2a:c8:80:fd:c7:7b:c8:d4:5b:90:b4:12:81:bb:3b:
         cc:a9:ea:26:64:8b:b7:c2:2c:45:61:90:c0:6f:09:5b:2f:96:
         72:7e:f1:0f:bc:66:21:c9:3e:18:76:9e:31:c2:b9:66:c7:ac:
         67:a1:79:3a:db:6d:60:93:cb:5e:55:3a:c9:f9:52:29:ab:b1:
         ff:bd:18:04:3b:f4:57:ab:c3:b9:bf:c6:54:54:df:9a:fc:95:
         88:2c:d0:0c:0a:5f:5d:c4:d0:9b:ef:7f:d8:17:e1:bc:b0:70:
         48:61:3c:c9:1c:aa:d0:b6:8c:ed:a9:96:b4:1c:a2:6f:90:ef:
         61:9c:da:7a:15:6e:e7:82:33:a0:35:6b:20:7b:b3:8c:23:99:
         97:8a:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:55 2024 by rpki-client on console-fra.rpki-client.org