Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e352e302f32342d3234203d3e203631353233.roa
File:                     3137392e36322e352e302f32342d3234203d3e203631353233.roa (raw, json)
Hash identifier:          SV0iNC81v9kyjAxEkjEs/57YR6zQL/SlH4Aow9h3swI=
Subject key identifier:   1F:E9:9F:1F:B6:88:0D:91:D4:6E:71:DA:BF:FE:26:55:1D:1F:56:3E
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       184DA2282D90FD117E0FB9BF54B6A0C7199011AC
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e352e302f32342d3234203d3e203631353233.roa
Signing time:             Tue 05 Mar 2024 17:47:43 +0000
ROA not before:           Tue 05 Mar 2024 17:42:43 +0000
ROA not after:            Tue 04 Mar 2025 17:47:43 +0000
asID:                     61523
IP address blocks:        179.62.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:4d:a2:28:2d:90:fd:11:7e:0f:b9:bf:54:b6:a0:c7:19:90:11:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:43 2024 GMT
            Not After : Mar  4 17:47:43 2025 GMT
        Subject: CN=1FE99F1FB6880D91D46E71DABFFE26551D1F563E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:66:a1:5e:fc:1a:4d:36:57:d1:1e:de:01:40:
                    86:7b:ae:bb:e5:b8:9e:96:88:21:01:26:ca:2b:da:
                    56:b0:4c:d2:1b:fa:3d:83:b2:e5:91:af:4d:01:2d:
                    9b:24:03:b2:c1:6f:1d:dc:9c:ab:76:15:51:02:40:
                    75:e8:1e:75:4f:59:d0:9d:38:ad:9f:4b:ca:5a:a2:
                    80:a9:7b:56:5b:80:a1:2c:c6:8d:3d:2e:19:82:0f:
                    47:d9:98:b0:97:b1:a5:f0:cf:74:05:04:b9:e6:53:
                    e9:92:9d:49:64:02:3e:68:0f:b2:7e:88:87:f6:da:
                    ca:0c:7c:1c:d8:5c:5f:34:fa:a9:ef:74:ec:63:83:
                    16:0a:47:15:29:95:9f:70:e3:8a:3e:23:ff:55:ad:
                    c7:6e:b2:ba:e7:2b:41:d0:b2:3c:9d:8d:4e:61:81:
                    7f:e6:ec:23:98:63:d7:b2:db:c8:a7:49:47:a9:01:
                    22:1c:c7:6c:4f:7f:26:44:bf:10:a7:4e:e1:53:25:
                    29:68:f6:95:1a:da:b7:44:f4:f6:93:98:9d:b6:5a:
                    2f:4e:0b:86:45:4a:99:64:f7:20:a1:d6:7a:fd:91:
                    f6:9e:78:7e:ad:33:c8:1f:f1:b2:be:7b:f0:49:42:
                    63:36:bf:58:c6:fe:6d:b3:f3:1d:78:bf:12:8f:7d:
                    99:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E9:9F:1F:B6:88:0D:91:D4:6E:71:DA:BF:FE:26:55:1D:1F:56:3E
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e352e302f32342d3234203d3e203631353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:62:e4:f4:06:dd:bf:c9:fc:5c:74:ab:42:e1:b8:9b:b7:27:
         a1:e2:47:45:7b:01:57:86:e2:b0:be:7e:d3:83:29:61:bc:2c:
         f4:f5:91:86:a6:ed:90:6d:79:63:77:a5:7b:3f:82:b2:10:82:
         07:f2:33:39:17:ea:71:6c:6c:53:6c:ad:11:40:6b:b4:b5:ad:
         a2:d4:fb:5f:55:1e:54:d0:9e:ef:05:32:84:f1:b9:cf:b4:ad:
         3f:87:23:4d:ff:f8:aa:54:f7:62:f1:ef:7a:36:bc:9b:90:ae:
         01:4d:8d:41:cc:eb:59:03:ab:8d:21:51:0d:af:b8:49:fc:cc:
         5c:af:ed:0f:44:17:38:f5:fd:79:f0:06:aa:8b:88:47:08:71:
         e1:c1:3c:be:bc:a5:a3:94:cb:96:1d:44:a4:e7:a5:f9:9b:39:
         76:00:5b:59:71:e2:90:4a:b0:eb:48:ca:33:66:21:aa:e2:57:
         84:4b:7f:10:3b:82:48:40:7a:e9:b3:48:98:f0:72:37:d7:38:
         8a:7f:ab:f1:d2:e3:6a:cc:d2:eb:b0:d2:e1:a1:71:fd:22:26:
         2f:87:1a:a1:de:21:39:25:9b:79:54:9f:74:17:ca:b8:54:49:
         c7:a9:33:20:b0:f1:92:ef:c5:17:44:ca:57:3c:b2:96:01:7b:
         90:29:79:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 17:52:29 2024 by rpki-client on console-ams.rpki-client.org