Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa
File:                     3137392e312e3132382e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          D5nEFm+4Y6YyMM5HMHtR6b25R/JiB6K3M/KY9aQ4kPA=
Subject key identifier:   A6:DD:E2:22:E4:A3:30:29:D6:DA:30:18:7C:97:A4:F6:FF:E7:42:63
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       206C2C098764CEB1B27654D8EB9390D596CD6EBC
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:43 +0000
ROA not before:           Tue 05 Mar 2024 17:55:43 +0000
ROA not after:            Tue 04 Mar 2025 18:00:43 +0000
asID:                     262589
IP address blocks:        179.1.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:6c:2c:09:87:64:ce:b1:b2:76:54:d8:eb:93:90:d5:96:cd:6e:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:43 2024 GMT
            Not After : Mar  4 18:00:43 2025 GMT
        Subject: CN=A6DDE222E4A33029D6DA30187C97A4F6FFE74263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b2:5a:4e:3d:9e:3b:56:f6:d4:24:03:9f:87:
                    f5:2f:8f:70:2a:3d:95:8e:d4:c1:a2:14:4e:4f:6c:
                    ff:1b:0f:2b:fa:dd:32:40:c6:2a:3e:4e:b5:00:ec:
                    ac:04:53:03:89:d5:44:72:6b:eb:1f:1a:51:44:88:
                    f7:fe:04:3c:e2:4d:03:09:6f:bf:4a:4e:ce:ec:8b:
                    7f:50:1a:37:37:0b:ed:db:80:f9:80:b3:ab:fc:06:
                    08:01:3e:bb:8c:d8:df:8a:31:be:c6:79:5e:0a:87:
                    17:e9:39:ce:99:6c:f4:7f:82:73:92:0d:be:1f:f9:
                    0c:05:2b:ea:9c:2d:ad:c9:9c:ba:7f:e8:1f:4f:e2:
                    46:29:7e:bc:6d:5a:dd:f2:70:34:ba:6f:8e:f6:c8:
                    89:5f:8f:2f:25:bc:b2:47:46:55:b3:be:d2:a2:c1:
                    a3:6e:d6:36:e9:39:ab:11:7e:69:36:06:aa:e2:b4:
                    61:a7:fa:d7:b2:b4:ad:d8:12:92:64:32:04:dd:3b:
                    9f:18:bc:66:0e:37:32:7f:c2:95:7e:fd:f2:75:51:
                    07:c7:77:99:78:6c:8c:ae:75:a0:17:8a:71:4a:cb:
                    6e:4a:15:17:3f:dc:ec:fd:79:08:1a:ee:c6:3f:6f:
                    f8:40:86:6d:23:7b:16:0a:b7:4f:b9:a0:20:6d:45:
                    57:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DD:E2:22:E4:A3:30:29:D6:DA:30:18:7C:97:A4:F6:FF:E7:42:63
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3132382e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:b2:38:d4:a6:97:e3:f9:f1:42:e0:57:b4:bc:13:3b:e8:95:
         8b:9a:8b:d2:32:9a:94:3d:b8:de:f0:b2:c1:9f:ae:b0:25:ad:
         e5:c0:43:2d:df:17:ac:38:4c:81:01:a6:ff:42:e2:db:c9:b3:
         c8:60:74:67:36:b0:e7:5c:79:f9:75:fb:9c:9d:86:74:71:23:
         92:ca:85:f0:b5:e6:0b:9c:15:e9:51:3a:89:62:05:c4:2b:7e:
         34:d2:34:30:67:c2:c6:2b:21:75:3f:7f:e7:d1:91:be:b7:ea:
         3d:da:77:aa:b4:30:37:41:15:ce:93:ae:ae:3a:ad:04:74:e1:
         06:c2:76:4c:bf:8c:1b:74:c6:dc:46:4e:60:b5:df:8a:da:90:
         e9:0b:8d:5b:69:03:49:df:3b:95:61:80:77:6c:4c:41:8e:f7:
         99:d5:fc:98:66:99:33:f4:fe:2b:bd:f9:3f:a6:f6:01:7b:f9:
         e3:f4:58:71:55:9a:b1:65:6b:00:6c:db:85:79:d4:25:6b:63:
         fd:b7:49:a3:88:f3:c0:0d:9a:8c:09:4a:5e:d3:e8:dd:f7:94:
         ba:18:89:fd:af:ae:a9:05:4b:69:ac:3f:bb:58:15:a8:d5:aa:
         89:69:8c:b3:eb:e6:aa:3a:dd:10:49:0b:e5:2a:c7:58:49:ce:
         4a:2b:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 08:14:59 2024 by rpki-client on console-fra.rpki-client.org