Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa
File:                     3137392e302e31342e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          /owRaXxQu/RzzyPfVZ+Lam3lqTMqBOL48mrZ5ECV5xA=
Subject key identifier:   C6:AC:43:77:55:43:21:7B:43:B6:73:64:7A:4A:55:F7:92:6F:A9:FA
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       71BEA8EB85C995DB713E6388C9508DE38E306E10
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 05 Mar 2024 17:41:32 +0000
ROA not before:           Tue 05 Mar 2024 17:36:32 +0000
ROA not after:            Tue 04 Mar 2025 17:41:32 +0000
asID:                     16509
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:be:a8:eb:85:c9:95:db:71:3e:63:88:c9:50:8d:e3:8e:30:6e:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:32 2024 GMT
            Not After : Mar  4 17:41:32 2025 GMT
        Subject: CN=C6AC43775543217B43B673647A4A55F7926FA9FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:89:1f:2e:0e:1f:a1:4d:6c:d2:a2:3f:8b:b6:
                    39:8c:97:c0:8d:dd:c0:8d:38:01:08:69:3f:bd:80:
                    45:9c:cb:5f:fb:29:33:e8:09:1f:e7:d4:44:eb:4a:
                    d7:34:96:d3:ce:4e:4b:d6:bb:c8:39:c0:8d:12:58:
                    d8:92:a2:e3:f2:3f:c0:54:4c:44:6f:ae:66:21:bb:
                    47:28:f7:3e:de:8f:09:f4:83:75:18:d1:b5:9c:7e:
                    8c:dc:a6:92:9a:7d:2f:91:a2:8f:c8:6b:2a:22:83:
                    4e:7a:6f:eb:35:2f:de:3d:50:9f:ca:06:de:2b:0e:
                    36:1d:c2:0b:d3:ba:93:c8:8f:0c:15:01:d0:d8:ff:
                    6e:5d:86:88:57:19:cf:d9:eb:d6:21:11:94:26:aa:
                    f0:ef:7e:2e:99:ff:a0:76:0c:c9:5e:39:7b:e0:52:
                    bc:76:04:86:d9:c6:02:a1:e4:de:1f:22:b2:61:49:
                    5f:47:02:10:66:e8:27:77:21:31:c9:88:df:61:90:
                    24:d7:c7:91:40:53:7c:c0:71:12:fa:8e:06:f4:4d:
                    65:4c:00:77:87:b4:c4:81:48:cd:6e:be:5e:1b:c9:
                    03:62:77:5e:c5:30:1b:2d:7b:ac:d7:6d:55:01:54:
                    a0:00:aa:74:0e:48:e1:bd:9e:5c:e6:19:6a:03:ff:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:AC:43:77:55:43:21:7B:43:B6:73:64:7A:4A:55:F7:92:6F:A9:FA
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:14:0b:f6:ed:37:10:89:4e:6d:93:b8:c2:4a:f9:75:cb:98:
         0e:99:12:14:41:ba:88:81:d5:b5:43:5b:f4:bd:a0:f0:43:0a:
         9a:24:c7:c0:d5:09:f0:dc:df:08:46:63:52:47:ea:63:3c:49:
         93:2e:1f:3a:4e:65:31:a6:ea:f2:b4:12:f4:db:ab:89:78:18:
         55:90:ba:27:70:50:ff:bc:d0:fa:9b:7a:6b:c6:c1:d2:8a:8e:
         a1:4a:77:31:eb:72:95:f2:19:c1:a0:e7:0a:5c:41:9b:2b:47:
         9d:9e:f9:33:1b:af:23:28:a3:d6:46:36:dd:b4:d9:ba:99:28:
         45:4e:0e:94:0d:0f:f8:b0:a7:62:7f:c1:3b:86:83:08:e9:2b:
         8a:49:98:f7:f4:c0:80:96:41:75:a1:ac:72:5a:38:d8:ec:6e:
         d9:32:83:87:01:40:0c:55:89:e6:34:73:6c:6f:79:ec:fb:82:
         08:26:b9:5b:b6:67:ec:8a:25:3c:e8:16:d4:82:66:ac:67:a2:
         42:70:d6:e0:bc:5b:39:10:68:55:54:09:1f:8b:66:9f:3b:a4:
         d5:3f:d8:d0:13:ed:9e:1e:b7:09:8b:de:95:ff:67:00:a5:c1:
         4b:91:02:27:7b:bc:21:15:ae:dc:76:1f:8d:a6:fa:34:5c:88:
         27:92:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:46 2024 by rpki-client on console-fra.rpki-client.org