Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32312d3234203d3e203237393736.roa
File:                     3137392e36332e3230382e302f32312d3234203d3e203237393736.roa (raw, json)
Hash identifier:          B0JtH0jtiVEuiRKpMiru+ctpAWh2Y7xrG1dgJLQStXo=
Subject key identifier:   6C:FF:22:6D:11:C9:C9:83:EC:1C:41:8D:EB:15:31:16:93:E7:54:29
Certificate issuer:       /CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
Certificate serial:       391945D5A7FAAF027F528AD5ADC096525A9C71CC
Authority key identifier: C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32312d3234203d3e203237393736.roa
Signing time:             Tue 05 Mar 2024 17:49:30 +0000
ROA not before:           Tue 05 Mar 2024 17:44:30 +0000
ROA not after:            Tue 04 Mar 2025 17:49:30 +0000
asID:                     27976
IP address blocks:        179.63.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:19:45:d5:a7:fa:af:02:7f:52:8a:d5:ad:c0:96:52:5a:9c:71:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39
        Validity
            Not Before: Mar  5 17:44:30 2024 GMT
            Not After : Mar  4 17:49:30 2025 GMT
        Subject: CN=6CFF226D11C9C983EC1C418DEB15311693E75429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:57:ba:8a:e9:09:df:89:a0:88:3d:dc:59:5e:
                    af:4d:64:34:79:4a:42:0c:00:7d:48:63:ff:97:18:
                    83:9c:6a:75:96:57:6f:0c:a1:8d:6d:81:34:35:5f:
                    63:19:25:71:85:97:d5:26:22:7b:33:e7:e4:5a:db:
                    ef:d7:ba:56:5f:35:c3:b6:69:ab:21:d5:d0:66:28:
                    b8:f9:2e:35:1d:65:8c:c9:82:6a:30:dc:7c:70:69:
                    ed:a8:6b:a9:ec:1b:28:74:da:b8:fb:5c:eb:cf:49:
                    0e:fb:17:53:62:ff:09:59:4a:6a:0f:34:e9:f6:d5:
                    e3:63:cb:18:fb:fb:41:ec:82:15:b8:29:ac:0d:68:
                    44:17:78:f5:35:1c:3c:43:9c:8e:96:80:bc:ba:7c:
                    34:cf:88:af:dc:1f:80:86:5a:41:88:89:a3:f2:e6:
                    05:e7:37:d4:16:b7:25:dc:cd:ff:c8:62:17:5e:73:
                    27:02:69:a9:c4:31:d3:8d:c4:2f:20:58:bd:0f:aa:
                    1e:f6:c9:03:80:52:15:a2:32:e8:38:b3:13:c4:5e:
                    4b:64:7a:d4:01:b2:13:a9:62:48:fc:7e:81:51:57:
                    16:31:73:a3:4b:3a:09:bf:8c:0f:69:b7:8a:45:9e:
                    cb:c2:a5:47:09:a5:dc:62:d3:02:57:2d:8f:02:47:
                    35:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:FF:22:6D:11:C9:C9:83:EC:1C:41:8D:EB:15:31:16:93:E7:54:29
            X509v3 Authority Key Identifier:
                keyid:C4:E4:73:26:7C:7E:D8:DB:FC:CD:20:9A:C0:9A:1C:A7:B8:4A:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C4E473267C7ED8DBFCCD209AC09A1CA7B84A7C39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C2D9B1E616BFC6030F3DA1D6F20B6B414319A8CDD44EE6420B6FFE70D65C5B9/0/3137392e36332e3230382e302f32312d3234203d3e203237393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ad:27:2c:ab:66:e3:89:c3:f9:4f:15:6e:e3:ba:77:b5:2f:21:
         0a:4d:36:19:62:3e:5b:82:50:a5:14:80:76:11:ae:1e:95:c9:
         26:e8:11:da:8e:76:7a:c0:ab:77:53:b2:17:95:4d:52:c1:fd:
         56:2c:27:e8:ac:cf:7e:06:af:76:0c:c5:3c:1d:bc:ca:84:1e:
         8c:21:64:40:93:78:c5:c3:b3:1b:a5:44:be:a3:75:35:15:ad:
         a2:f6:d6:1d:cb:79:96:64:f2:97:99:c9:68:ef:9b:57:21:16:
         4f:a1:fe:00:4f:96:1f:cf:88:ff:f5:47:24:38:d8:db:7a:01:
         83:4d:f7:fa:0e:24:14:03:ec:2d:ec:be:37:43:37:31:26:c6:
         ce:0d:eb:bb:9e:73:fa:1e:12:60:f3:22:f9:3b:e8:f8:a1:72:
         90:e5:a9:9e:9b:44:ff:30:64:6c:08:99:42:49:6f:fe:fc:ce:
         47:e9:29:9f:f3:06:3e:53:d4:f0:0a:14:c3:c4:98:7d:af:d0:
         d9:42:44:dd:87:80:95:75:e2:57:15:47:21:5f:a4:97:b6:3b:
         3e:0f:9f:26:f3:76:f6:07:48:18:5f:06:b5:48:06:56:c3:6e:
         89:89:16:90:b9:32:7e:cd:2f:03:77:aa:26:8f:32:90:de:03:
         20:74:89:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:50 2024 by rpki-client on console-fra.rpki-client.org