Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
File:                     3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa (raw, json)
Hash identifier:          VSMEE62XQamc5FpUjcbrJug/QA5Cbit4phBsw9WukMY=
Subject key identifier:   60:98:68:5A:54:34:D2:39:29:C7:A2:52:07:C0:CA:09:02:98:42:B5
Certificate issuer:       /CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
Certificate serial:       3B1D6268FECA82EFDF479A52EFFD173967FFE128
Authority key identifier: 1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa
Signing time:             Wed 04 Dec 2024 21:55:01 +0000
ROA not before:           Wed 04 Dec 2024 21:50:01 +0000
ROA not after:            Wed 03 Dec 2025 21:55:01 +0000
asID:                     269927
IP address blocks:        207.191.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 31 Dec 2024 22:45:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:62:68:fe:ca:82:ef:df:47:9a:52:ef:fd:17:39:67:ff:e1:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C300E1C35A0F03DB25E99766CF3DB44DA6783C4
        Validity
            Not Before: Dec  4 21:50:01 2024 GMT
            Not After : Dec  3 21:55:01 2025 GMT
        Subject: CN=6098685A5434D23929C7A25207C0CA09029842B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:d6:ab:ad:aa:06:9c:ca:1a:ee:b3:37:6b:
                    43:f3:a5:52:94:a0:00:27:44:9a:c1:fb:b1:c2:08:
                    fb:71:34:99:31:c3:67:8b:31:8e:d3:f2:24:0a:6a:
                    12:5f:52:af:74:2c:83:e8:4c:23:a0:d3:ee:c3:c9:
                    ff:98:e7:d2:ef:89:5f:9a:c1:fb:f3:d6:ff:6a:84:
                    a3:7e:72:89:c9:05:c2:fc:5b:7c:7c:3f:07:b5:fd:
                    50:c7:26:bd:21:8e:37:a3:68:e1:04:46:8f:20:18:
                    33:68:dc:b5:81:15:f9:99:b6:69:e3:f1:35:2e:d6:
                    5f:55:da:92:c4:22:89:03:ed:ca:73:eb:42:ee:08:
                    8b:0e:41:a6:3f:8c:2a:bb:2a:9c:99:58:a5:48:45:
                    f0:54:9c:58:14:f8:0d:f1:4d:c6:f8:dc:90:92:5f:
                    12:7d:ec:cc:53:2e:19:54:9a:30:38:79:65:d0:da:
                    c6:cd:30:3d:da:16:11:29:79:1e:12:46:20:3d:5a:
                    a5:35:52:08:b4:fc:42:ec:7b:d0:bc:d0:0a:d6:41:
                    25:6e:bb:4d:01:96:b6:24:14:b4:24:b3:c5:52:60:
                    4a:99:ce:4b:eb:8a:76:7b:97:28:2f:df:03:03:14:
                    5c:a2:3e:2c:8c:69:d1:28:97:aa:e6:5f:07:c8:ad:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:98:68:5A:54:34:D2:39:29:C7:A2:52:07:C0:CA:09:02:98:42:B5
            X509v3 Authority Key Identifier:
                keyid:1C:30:0E:1C:35:A0:F0:3D:B2:5E:99:76:6C:F3:DB:44:DA:67:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1C300E1C35A0F03DB25E99766CF3DB44DA6783C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1DA1B251A5AC65CE3FF4424A1DE44D319A1EB9303B549C7514E808292E869FD7/0/3230372e3139312e3137332e302f32342d3234203d3e20323639393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:25:f1:e2:f5:89:97:d6:dd:95:40:f3:fe:9f:b6:c0:76:7e:
         cd:13:5d:0d:59:35:f0:7b:77:ad:95:e2:33:92:bc:4a:d2:55:
         f5:08:85:c0:44:a5:80:f2:9d:80:24:10:27:67:0a:6e:a6:b1:
         81:f9:21:3c:86:f3:6c:bd:95:7e:10:f4:5e:58:b6:07:ca:46:
         bd:00:1d:55:45:ec:ed:c8:ea:dd:e9:71:08:6c:3d:c4:b8:0e:
         09:75:20:62:9c:76:42:79:1e:02:43:93:59:67:55:d1:62:fb:
         2a:7a:38:75:ff:a8:14:b6:e3:3c:ab:a8:db:c6:74:1a:73:10:
         7d:8a:41:13:24:0c:1e:5c:53:b3:fc:c8:c7:10:45:42:cf:3b:
         d4:0a:46:98:81:82:f3:1e:b7:97:62:f4:6c:69:6a:53:8c:16:
         64:2a:35:b8:0f:90:f8:dc:6a:0b:98:67:32:79:e4:59:bc:5c:
         6d:20:16:64:19:5b:ac:e4:f1:a7:10:16:56:d1:38:1b:d2:d8:
         e5:29:6e:f7:a8:a3:c8:68:01:f0:3e:6d:5a:27:7f:bf:fb:cf:
         68:dc:fe:3a:cf:5e:9a:cd:00:2f:61:51:64:df:25:83:dd:44:
         50:cd:85:f1:dd:6a:ff:3c:c5:eb:b4:30:d7:a3:ee:0a:a0:21:
         af:dd:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 16:16:40 2024 by rpki-client on console-fra.rpki-client.org