Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa
File:                     3137392e36322e3131332e302f32342d3234203d3e203237383237.roa (raw, json)
Hash identifier:          6ET1sJfEUqqCbMWquOghJtVfH0JE1JN+qGSuQSJsLsQ=
Subject key identifier:   E3:DD:36:84:B1:99:66:01:4F:74:CA:F2:F4:66:EB:97:5E:50:AB:88
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       5D16CEA04828FD495AADE245E52A5CCC569C545D
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa
Signing time:             Tue 05 Mar 2024 17:47:43 +0000
ROA not before:           Tue 05 Mar 2024 17:42:43 +0000
ROA not after:            Tue 04 Mar 2025 17:47:43 +0000
asID:                     27827
IP address blocks:        179.62.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:16:ce:a0:48:28:fd:49:5a:ad:e2:45:e5:2a:5c:cc:56:9c:54:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:43 2024 GMT
            Not After : Mar  4 17:47:43 2025 GMT
        Subject: CN=E3DD3684B19966014F74CAF2F466EB975E50AB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:47:43:ee:db:bc:48:63:c2:f9:c2:0b:39:08:
                    57:7d:59:6d:29:09:11:1f:19:93:1e:a1:83:ca:76:
                    65:73:16:20:00:25:27:f9:e3:35:8d:9d:21:a1:47:
                    8b:b8:9e:e0:c8:1f:9a:3a:2f:ac:9e:61:2b:40:28:
                    38:d7:2f:e7:f0:55:6a:3b:2b:88:4c:d8:68:3f:4e:
                    4d:d5:5c:2c:00:85:b7:6b:a5:20:37:89:ae:1c:e7:
                    91:02:d0:73:f3:cf:05:fd:47:64:5c:9d:3e:c0:a1:
                    ca:06:40:bb:4a:0c:0a:a5:ff:57:bb:1c:9b:e6:df:
                    1e:c0:37:ab:c4:cf:4e:85:85:90:a3:29:45:ec:6d:
                    86:f6:50:35:87:8a:6c:51:37:3d:73:e1:26:7f:66:
                    0c:65:76:ce:68:42:d0:c7:21:e7:d2:19:b5:72:e4:
                    b6:71:b8:77:d0:d0:2d:b3:28:53:75:72:a0:6d:3b:
                    23:b7:e4:b8:73:2d:0b:7f:24:16:4d:45:9f:11:16:
                    79:ff:b4:cd:ac:d8:aa:af:a7:1f:3f:c3:36:dd:75:
                    51:ea:81:aa:fb:11:5f:ff:6b:f6:f5:7b:af:be:95:
                    c7:e2:76:c7:ff:ce:89:a7:0c:d9:4b:63:cd:15:73:
                    27:b0:ff:5d:70:9a:d4:4a:f5:2a:68:42:ad:fb:2c:
                    5f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DD:36:84:B1:99:66:01:4F:74:CA:F2:F4:66:EB:97:5E:50:AB:88
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3131332e302f32342d3234203d3e203237383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:d4:f3:23:95:9c:da:98:8a:c5:38:0a:db:e4:a1:ae:8b:2f:
         2e:25:b4:73:4d:9d:59:85:a8:ce:ca:4f:9c:a0:32:4e:b7:42:
         29:ec:15:b6:31:e3:55:93:f9:bc:c5:69:ef:97:14:ce:21:f6:
         ba:d8:2b:cc:de:f9:d6:ec:0d:ff:37:21:ca:e3:09:06:b2:07:
         86:6a:16:d9:66:ea:d5:9d:a1:13:ca:01:b0:01:97:5f:fd:ce:
         46:ae:a6:49:01:d4:0d:06:ba:98:27:82:fd:5e:e4:01:b6:93:
         96:b8:0d:26:95:78:19:14:5f:68:5e:3c:3c:fc:5a:f6:cc:c5:
         ce:8a:21:44:89:5e:a6:da:5d:76:5c:ed:a9:8f:21:b9:81:84:
         41:f5:97:84:2f:c1:57:6f:f6:ef:b5:64:1a:ac:f4:39:85:66:
         18:12:50:e2:32:9a:06:61:61:34:92:4a:1c:a8:29:6c:9e:1e:
         ee:ac:fb:8e:b9:0e:19:8c:27:b0:2f:6a:83:ea:42:99:90:c6:
         20:99:43:ca:9f:3e:5f:e8:7b:3c:fd:9d:dc:44:23:70:a9:e2:
         57:74:5d:b1:a0:2f:69:9a:19:9d:d4:8f:a1:fb:f8:25:b8:74:
         ad:4f:d2:24:2c:83:ea:63:df:b1:47:c8:ea:0c:4c:83:2e:61:
         cb:7f:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org