Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e20323632353839.roa
File:                     3137392e312e3137362e302f32302d3234203d3e20323632353839.roa (raw, json)
Hash identifier:          cC0NabbRTa9+f+9kYpMya0oDbeivMBi+EkPtoeh0dew=
Subject key identifier:   F2:6E:CA:A0:AF:6D:CF:D5:F8:5E:BE:F5:E1:D8:EC:64:59:35:0A:F7
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       611ED1ACE9226046F292EDC4825AFEF00E8A2C69
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e20323632353839.roa
Signing time:             Tue 05 Mar 2024 18:00:38 +0000
ROA not before:           Tue 05 Mar 2024 17:55:38 +0000
ROA not after:            Tue 04 Mar 2025 18:00:38 +0000
asID:                     262589
IP address blocks:        179.1.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Oct 2024 04:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:1e:d1:ac:e9:22:60:46:f2:92:ed:c4:82:5a:fe:f0:0e:8a:2c:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Mar  5 17:55:38 2024 GMT
            Not After : Mar  4 18:00:38 2025 GMT
        Subject: CN=F26ECAA0AF6DCFD5F85EBEF5E1D8EC6459350AF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3f:fe:da:d9:96:cd:41:60:00:d3:a5:0b:a6:
                    c8:ed:df:23:58:1c:d8:a9:00:fd:46:ce:f1:1e:c4:
                    d9:9a:a4:9e:98:e3:71:09:62:b5:a4:24:18:54:8b:
                    3d:e9:e6:e0:06:05:44:57:fc:e8:96:b6:98:83:e8:
                    b8:af:18:52:fe:ec:4d:07:9d:42:4b:55:9d:19:2d:
                    a5:a4:7a:e6:13:cd:f6:b9:44:38:20:43:45:fc:ca:
                    56:f9:d5:19:21:9e:a8:21:40:50:ff:ca:74:b1:7f:
                    4a:3b:fd:ff:3f:41:a5:0a:4e:82:b8:1e:25:28:54:
                    22:2c:a4:35:f7:45:81:fc:85:3f:9d:b1:1d:0d:50:
                    e9:3b:2d:b9:c8:bd:b5:92:fe:be:c6:bc:33:f0:f9:
                    b5:05:89:43:15:0f:83:68:f4:a8:a8:5e:2c:e9:c6:
                    2a:eb:b3:65:1c:c3:f8:86:93:da:ac:21:32:a3:2f:
                    22:8f:41:d9:97:a0:da:71:1e:3e:50:95:63:49:87:
                    5b:d5:64:35:9c:7a:12:22:02:df:8a:9f:be:a9:f8:
                    73:e1:88:43:e9:d6:a0:1c:25:e0:69:42:a3:a3:18:
                    cc:63:f4:24:81:2e:bf:3e:d7:d6:1b:68:9b:ee:86:
                    6f:16:7b:e2:51:8a:2f:84:cf:f9:50:58:3d:80:80:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:CA:A0:AF:6D:CF:D5:F8:5E:BE:F5:E1:D8:EC:64:59:35:0A:F7
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/3137392e312e3137362e302f32302d3234203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:6a:92:23:46:b9:43:ea:af:e9:11:69:07:c4:aa:7a:fb:70:
         40:37:24:01:75:13:87:3c:83:38:06:c5:1d:43:a9:4c:76:4c:
         84:97:29:94:cd:59:a1:6e:ba:be:22:37:dd:66:0d:7b:94:e1:
         f5:16:a7:75:b3:f5:3f:0e:4f:32:16:eb:f2:2c:97:ba:56:b2:
         ed:fd:52:01:2f:06:2f:00:82:99:bc:23:83:11:83:a6:08:91:
         49:e8:a7:36:60:d0:a9:4a:0c:fa:86:c5:be:99:e5:d9:d6:f5:
         5b:e6:07:cf:7a:ae:2a:e6:b1:fb:84:70:2a:2b:5a:27:72:ae:
         9c:14:17:99:55:9c:1f:16:8d:2e:e0:35:19:a4:45:f0:2d:99:
         ee:f3:2a:f4:f0:0d:4e:48:62:26:59:03:e5:63:11:0d:bc:ae:
         a6:18:4c:8f:6a:99:14:2e:76:ed:63:a9:cb:9a:58:e0:26:93:
         3b:76:42:6e:67:15:51:8e:ce:f0:22:04:0d:18:57:62:a7:65:
         0f:b9:35:a6:be:0c:12:54:19:39:20:a2:a5:0b:23:d1:a3:8a:
         96:b5:ed:2f:32:05:93:b5:1f:6d:47:ca:20:64:e4:96:60:6b:
         f4:ac:86:29:2d:c3:60:89:d4:fc:8a:a5:3a:cc:0d:02:d0:f3:
         e4:13:0a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 08:14:59 2024 by rpki-client on console-fra.rpki-client.org