Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/0de6b4ff5e2904e9d834e0e0c981c8f4d0ad1eec.roa
File:                     0de6b4ff5e2904e9d834e0e0c981c8f4d0ad1eec.roa (raw, json)
Hash identifier:          PP6fv36g61udj8dPcSAB7OOETtwaoum9oSPoUKpwUyA=
Subject key identifier:   B8:34:DB:59:91:33:A2:92:FA:18:A8:AB:BB:D7:49:F1:6D:78:CD:4F
Certificate issuer:       /CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
Certificate serial:       1BDEAA
Authority key identifier: 19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/0de6b4ff5e2904e9d834e0e0c981c8f4d0ad1eec.roa
Signing time:             Mon 30 Oct 2023 14:42:01 +0000
ROA not before:           Mon 30 Oct 2023 14:42:01 +0000
ROA not after:            Thu 30 Oct 2025 14:42:01 +0000
asID:                     270095
IP address blocks:        179.51.139.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
                          rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
                          rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 27 Feb 2024 12:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1826474 (0x1bdeaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
        Validity
            Not Before: Oct 30 14:42:01 2023 GMT
            Not After : Oct 30 14:42:01 2025 GMT
        Subject: CN=0de6b4ff5e2904e9d834e0e0c981c8f4d0ad1eec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d8:2f:ba:6e:88:59:47:79:14:77:3c:0a:bd:
                    2e:a6:77:34:af:3a:d1:38:06:aa:b7:90:cf:3d:3b:
                    a3:5c:a8:b2:76:f7:ba:78:b7:89:00:58:1c:7f:4c:
                    31:98:62:33:21:64:a4:f5:5a:31:9c:88:1e:fc:d6:
                    2d:14:5f:0e:0a:c4:00:e8:41:7c:e7:ce:36:63:a3:
                    6e:6e:63:61:f5:60:45:f6:6e:f7:e1:6c:2c:57:4a:
                    d8:b8:2b:aa:75:7e:c3:35:c1:dc:5f:1f:98:30:52:
                    e1:28:e5:0c:76:6c:fa:04:71:3e:1b:63:9b:39:81:
                    16:0d:8e:0c:8f:c7:22:b6:63:5f:6e:6f:2f:f3:cb:
                    94:01:fb:c9:96:97:ff:b5:36:51:07:af:53:59:cb:
                    69:ab:0b:64:b4:19:0e:e0:c5:91:2c:79:1f:63:32:
                    05:c6:a3:76:ac:bf:5b:59:9a:58:06:5e:d3:7c:c9:
                    5a:ce:3c:e3:a3:e2:f0:81:d0:98:ea:c4:37:5c:0f:
                    25:76:59:51:f0:df:ce:c9:17:16:02:d3:df:1d:69:
                    e8:25:bb:33:e5:1c:55:19:a6:6f:15:79:bd:33:48:
                    25:13:9a:8c:50:c4:b6:ee:17:cf:d8:61:f8:19:06:
                    02:0c:af:f6:ca:f2:89:53:db:e5:60:d8:15:d4:02:
                    fd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:34:DB:59:91:33:A2:92:FA:18:A8:AB:BB:D7:49:F1:6D:78:CD:4F
            X509v3 Authority Key Identifier:
                keyid:19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/0de6b4ff5e2904e9d834e0e0c981c8f4d0ad1eec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:14:d9:f4:2d:ee:24:d8:a7:b3:76:06:c8:d8:f6:d4:b3:9b:
         e2:22:af:59:64:68:29:b1:68:16:77:fe:9e:b5:68:6b:09:d0:
         fa:c4:9b:e7:e3:2d:cc:28:1d:67:f3:33:47:25:aa:b7:69:17:
         da:2b:05:2c:00:c8:be:60:ff:79:b2:34:de:63:1f:6c:59:83:
         ea:d3:ab:13:cd:83:7a:9b:86:ea:ea:fa:30:68:b7:dd:1d:dc:
         6d:cc:04:ae:9e:c3:0f:6a:5e:f4:c4:13:84:ee:ae:f8:33:f4:
         cd:6c:dc:9b:25:06:6d:7d:c8:3b:84:f3:1f:ac:3d:35:e8:59:
         ba:bf:55:2b:f8:24:73:a1:ee:9d:e2:7a:3a:eb:f1:3d:6d:ec:
         a6:25:e3:b9:5a:3e:c0:6d:82:b3:07:ab:3c:aa:a7:20:89:05:
         4d:72:f1:1c:31:42:6a:5a:d8:67:63:a5:eb:58:d7:89:f5:ce:
         7b:1b:1f:04:df:9e:fb:9c:e8:8f:3a:66:b5:69:ab:58:fd:fc:
         7a:d5:11:2c:ed:48:f7:96:be:16:be:b7:9f:a6:38:fe:7d:fd:
         c7:aa:5e:ab:e2:1c:03:cb:33:71:54:a5:96:70:d8:f3:9f:38:
         15:07:56:96:c1:96:7e:92:40:30:14:64:e1:c6:c4:98:d2:c3:
         33:90:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 21:41:49 2024 by rpki-client on console-fra.rpki-client.org