Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa
File:                     3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa (raw, json)
Hash identifier:          ldQ7t4DAowGhhyNyD/ucQ7Zo4I4P79VRguXcj+Gp8gw=
Subject key identifier:   27:81:16:0E:85:95:95:0B:FA:9B:AA:34:6D:03:A1:64:0D:1C:56:4D
Certificate issuer:       /CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
Certificate serial:       274C1D8DBFA0DD5C6BD448CCC87F0095E2F7593A
Authority key identifier: 68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa
Signing time:             Tue 05 Mar 2024 18:11:06 +0000
ROA not before:           Tue 05 Mar 2024 18:06:06 +0000
ROA not after:            Tue 04 Mar 2025 18:11:06 +0000
asID:                     264856
IP address blocks:        179.48.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 04 May 2024 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:4c:1d:8d:bf:a0:dd:5c:6b:d4:48:cc:c8:7f:00:95:e2:f7:59:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688F0BB166D14E7DD25FA78C786B917D2642A8E6
        Validity
            Not Before: Mar  5 18:06:06 2024 GMT
            Not After : Mar  4 18:11:06 2025 GMT
        Subject: CN=2781160E8595950BFA9BAA346D03A1640D1C564D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:b9:b0:fd:71:c3:7b:89:3b:7d:6b:e0:7d:
                    77:e8:76:5d:a2:0e:78:a4:28:8c:01:0b:a7:d4:68:
                    8e:04:52:13:4f:7c:43:32:c8:9a:21:6d:e5:25:58:
                    cd:69:80:b5:3e:1c:bc:a5:e9:85:68:79:6a:fe:8f:
                    be:ae:29:e5:a4:34:23:c2:56:b4:54:b6:a2:af:1f:
                    25:78:ac:9b:e7:87:be:f8:41:a3:92:00:85:91:4f:
                    6f:57:27:d0:2b:1c:fd:e1:54:c5:f2:a1:8d:27:76:
                    f0:7d:d6:a2:d2:62:d3:c2:5a:9a:56:d9:d1:8e:fd:
                    09:00:35:ed:0e:8e:4f:f1:87:e3:76:06:90:60:5f:
                    c9:cb:de:df:ed:9e:d4:ec:65:89:c0:81:72:37:55:
                    c7:04:a9:55:2a:d5:6a:d7:5e:d6:d5:26:45:36:da:
                    46:a0:b3:16:18:c4:90:f0:cd:0b:49:e5:2c:09:12:
                    5a:24:db:1e:21:1f:de:9a:3d:2c:e5:50:9e:03:7b:
                    00:54:84:f9:47:7c:1b:5a:94:68:9c:95:a4:4c:ed:
                    26:75:56:bc:bc:a9:20:b1:7e:e0:b8:55:81:a7:b9:
                    6f:14:7a:e9:ac:d6:52:a0:38:1d:28:94:4f:5b:08:
                    e1:2e:a2:ed:c4:64:2a:27:53:50:c7:03:16:b8:f0:
                    a4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:81:16:0E:85:95:95:0B:FA:9B:AA:34:6D:03:A1:64:0D:1C:56:4D
            X509v3 Authority Key Identifier:
                keyid:68:8F:0B:B1:66:D1:4E:7D:D2:5F:A7:8C:78:6B:91:7D:26:42:A8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/688F0BB166D14E7DD25FA78C786B917D2642A8E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A7E69F796169E69C06458D02398265ACC6A324B03A190CFBE2C7CB72BD02609/0/3137392e34382e3235322e302f32322d3234203d3e20323634383536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.48.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:f5:f5:eb:f0:a7:91:10:2c:24:97:f8:d8:69:ed:05:d6:
         2a:a1:f9:93:d3:a0:f2:4d:a2:ff:5f:4d:97:06:8d:d4:3b:b7:
         2a:30:4e:90:d2:ea:fb:e9:2f:44:05:46:c3:11:fd:04:a8:fb:
         b8:51:50:9c:48:dd:0f:d6:1d:7b:10:14:93:84:40:bd:80:d4:
         40:72:44:2d:74:68:e6:89:a2:9b:a8:8e:ee:0d:79:49:fe:68:
         e0:c7:95:3d:f8:15:5c:35:9f:2a:90:9e:fc:f1:a8:cc:56:89:
         e2:f6:18:3d:f1:00:8d:3e:8f:30:f3:b3:ce:1b:65:63:f0:a4:
         58:99:36:35:0d:d3:92:bd:11:d3:c4:fb:64:95:a5:65:fe:0d:
         a6:0b:5e:1b:90:5c:29:cd:30:25:f9:db:b2:91:b5:cd:40:56:
         d1:34:13:03:e2:7d:96:3e:c1:ae:6c:5e:83:a3:81:af:d6:6b:
         44:ba:37:e3:0c:3f:92:0e:44:10:96:51:2e:a5:25:c2:ef:b5:
         a4:8c:6f:26:61:1c:69:d7:ed:5d:6a:02:ad:6f:40:16:e7:37:
         c1:56:fb:b2:4a:da:70:19:be:7d:ac:17:a7:7c:42:e4:c3:63:
         37:d2:88:bb:b6:86:12:66:c2:47:aa:c2:ab:4e:0e:72:5b:fa:
         01:74:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 19:13:46 2024 by rpki-client on console-ams.rpki-client.org