Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa
File:                     3137392e302e31342e302f32342d3234203d3e203131303134.roa (raw, json)
Hash identifier:          HtwzJM9eopPVX6iaklhoKbmedax0Jm+qA4w9Jm3lPw4=
Subject key identifier:   25:48:5F:94:81:BB:D6:B7:4F:FA:13:15:3D:AF:2B:89:83:5E:7A:80
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       177A5A0E33EDF774242AC0D53922613F58F04266
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa
Signing time:             Tue 05 Mar 2024 17:41:31 +0000
ROA not before:           Tue 05 Mar 2024 17:36:31 +0000
ROA not after:            Tue 04 Mar 2025 17:41:31 +0000
asID:                     11014
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:7a:5a:0e:33:ed:f7:74:24:2a:c0:d5:39:22:61:3f:58:f0:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:31 2024 GMT
            Not After : Mar  4 17:41:31 2025 GMT
        Subject: CN=25485F9481BBD6B74FFA13153DAF2B89835E7A80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:13:8c:f8:a7:57:b4:76:c9:d7:35:51:bd:
                    62:90:2d:8d:25:6a:b8:ef:06:4b:e7:90:3e:0f:7e:
                    56:78:35:43:aa:c8:d5:b9:79:27:72:29:50:69:62:
                    17:74:97:fb:27:50:06:5d:df:9c:85:43:84:cd:ee:
                    59:a3:8f:24:93:b0:b0:05:da:4e:f1:40:86:d2:c7:
                    e1:72:3c:cb:56:0b:69:eb:b8:61:63:6b:4a:14:f3:
                    62:ca:a1:05:d5:6b:19:dd:c2:bb:0c:d1:3c:0e:b0:
                    a3:93:57:59:45:ed:3b:10:e5:55:a9:92:06:39:82:
                    12:78:80:40:3a:c0:61:9e:f9:17:b1:ef:95:65:92:
                    3f:1d:71:91:0c:4c:48:3b:38:63:79:d3:d9:c4:72:
                    ef:eb:e3:be:04:96:3b:df:81:9d:4b:d6:01:0e:26:
                    7b:12:56:c4:5f:8a:da:76:b4:c7:0b:40:38:ca:13:
                    e9:d1:bf:ea:a7:0c:56:31:ed:1e:09:6c:f0:a5:5a:
                    30:69:db:51:02:80:3f:6c:79:9a:0a:69:1a:c1:8c:
                    22:57:8a:5e:28:45:d5:f6:6a:61:f3:50:54:75:f9:
                    b2:e0:07:9a:24:03:1a:29:23:49:71:ad:f1:1d:03:
                    4b:57:c4:d0:c4:e8:5c:0a:da:9c:05:c8:15:04:dc:
                    56:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:48:5F:94:81:BB:D6:B7:4F:FA:13:15:3D:AF:2B:89:83:5E:7A:80
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203131303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:59:a9:7b:0a:ec:17:ac:cb:9a:46:60:eb:e4:ae:40:18:4b:
         3b:75:66:21:66:3b:37:94:0b:00:81:e6:ec:b5:7d:7b:c6:44:
         9e:d3:38:de:cf:9d:0d:b6:fc:5d:b4:c4:c4:a9:ae:af:60:02:
         45:47:e1:67:e4:4f:27:29:78:19:c5:89:21:bf:70:74:d9:10:
         0f:37:c6:94:6c:9c:1a:1c:d8:13:b6:70:6a:0d:c5:7d:2b:a5:
         e5:cd:a8:40:69:32:b1:50:5e:49:54:1d:ec:cb:5a:62:2c:7e:
         bb:67:fb:cd:5a:90:2a:27:30:1f:fa:87:ab:94:04:49:a0:47:
         73:c6:e3:a0:db:ab:6c:0e:77:a1:b6:c8:3a:28:c2:59:67:cd:
         ea:2f:6c:e2:f3:e9:bb:40:9e:d9:5b:a8:96:1f:e5:57:de:be:
         19:ac:92:01:d4:ab:c8:83:09:02:bf:9c:68:0e:dd:44:fe:84:
         d6:e9:5b:af:81:b7:5a:5a:73:bb:d1:69:b1:50:d8:1a:68:ff:
         2b:89:33:41:b6:1c:94:0c:8c:32:b2:05:d6:d3:d7:9e:ef:c3:
         0b:fc:bf:8f:a0:98:e1:ce:fa:d4:fa:df:e3:4c:d0:3a:76:c3:
         d4:e4:05:84:43:85:4f:54:8b:68:f9:9d:5c:6e:68:9b:19:0f:
         7f:de:c3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:19 2024 by rpki-client on console-fra.rpki-client.org