Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa
File:                     3137392e302e31342e302f32342d3234203d3e203130343831.roa (raw, json)
Hash identifier:          +z7Qqu/n3bs5Tw9TlFn7syhqNtgAB4O+34I03tRYwbY=
Subject key identifier:   B8:D8:B1:2E:3E:D2:21:EC:99:99:DD:8F:2A:41:9D:2F:B3:77:D7:2F
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       13D2C22E9C04C5C64AEA5E09987C915A57A7AB6D
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     10481
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:c2:2e:9c:04:c5:c6:4a:ea:5e:09:98:7c:91:5a:57:a7:ab:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=B8D8B12E3ED221EC9999DD8F2A419D2FB377D72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ca:ba:65:79:31:55:7b:8e:f0:eb:1e:aa:46:
                    60:f0:f4:0f:66:3c:e2:7f:ff:4b:b9:57:25:d3:3f:
                    dc:81:2f:fc:da:20:e0:f3:b8:e3:cc:6d:36:7d:2e:
                    43:77:b2:be:9b:a9:38:d9:30:91:15:aa:91:c5:e9:
                    f9:c3:4e:c2:e3:de:df:83:0f:7b:56:2a:2f:b0:87:
                    10:a1:45:b9:1c:20:49:c2:a7:48:33:15:d1:28:a1:
                    ff:4b:9a:37:30:ea:ef:ce:b6:5a:c9:ae:e5:83:ec:
                    4c:30:91:eb:78:b9:c2:e7:1b:c0:e7:fd:df:80:cc:
                    fa:05:2c:66:f2:ae:c7:1a:4e:39:1e:4a:c3:b5:dc:
                    42:4a:2d:8b:b9:fe:e2:30:d1:53:6e:8b:02:0b:4a:
                    5a:52:eb:b7:24:e4:28:a4:a6:a8:e6:95:d0:23:ce:
                    00:17:1f:97:c6:ca:a5:06:85:54:5f:68:09:fd:09:
                    22:41:74:1b:13:f2:52:34:b2:81:a3:ce:f8:bb:be:
                    71:2d:01:9c:9e:91:33:5f:6c:b7:34:37:93:59:57:
                    95:85:9c:6e:39:59:fe:68:c4:e6:63:5d:db:01:d9:
                    03:16:1d:64:6f:4b:54:e6:ce:c7:5b:c7:5f:68:a4:
                    e5:32:f5:c8:2a:19:7b:f4:ac:9d:09:5d:97:2d:16:
                    8c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D8:B1:2E:3E:D2:21:EC:99:99:DD:8F:2A:41:9D:2F:B3:77:D7:2F
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203130343831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:dc:49:7f:ce:56:b9:02:42:93:98:13:ef:f6:ae:f3:2e:b7:
         44:20:3a:b4:f4:37:e5:a1:c7:ec:e2:4b:1b:2f:62:f6:5b:85:
         45:3f:61:35:a1:72:22:e1:25:45:c4:fc:35:b1:38:98:55:0e:
         04:ad:61:ba:33:2d:9e:38:bc:61:87:6c:2f:94:2a:a3:94:dc:
         a3:86:f9:2c:49:30:64:0a:0c:04:93:5e:38:47:5b:fa:4e:4d:
         cc:9a:32:b1:15:e2:c4:26:f5:66:7a:37:46:30:97:9b:8a:a1:
         75:ce:d8:b5:4b:5d:c2:a2:bf:44:e5:90:22:2e:4d:74:0b:40:
         dc:60:f2:ec:13:71:53:a9:5c:bc:f1:a3:e9:c1:91:dc:0c:e4:
         3e:11:be:a5:0d:fa:4c:cd:fe:64:b0:28:bf:6c:72:b7:c9:aa:
         6b:4e:6e:43:5b:0c:8c:b8:6b:34:f8:d7:23:cc:8e:de:e7:4e:
         16:95:8d:25:aa:bb:de:9c:0e:5d:d7:c1:05:08:b0:39:e9:dc:
         36:f9:0d:05:17:3c:d2:94:60:ce:66:dc:47:f7:06:f0:a5:2f:
         df:cb:9c:e8:7d:5d:8c:3f:5e:b8:fd:dc:a5:4c:8a:be:0f:d6:
         91:64:0b:60:ed:09:da:c5:f7:b2:10:e4:f3:9d:65:53:77:93:
         71:52:c9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:25 2024 by rpki-client on console-ams.rpki-client.org