Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203232393237.roa
File:                     3137392e302e31342e302f32342d3234203d3e203232393237.roa (raw, json)
Hash identifier:          YxfS2mmqw6xEZ7rVNl3F9tDQCJSqoBZxQwbv1u6s3QU=
Subject key identifier:   55:3C:AD:A6:1A:CA:EF:1A:3D:46:23:39:C5:44:39:37:1C:31:8D:41
Certificate issuer:       /CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
Certificate serial:       32C3ACAC4212D26DFDA78EA9450516FBBAC9A364
Authority key identifier: 12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203232393237.roa
Signing time:             Tue 05 Mar 2024 17:41:32 +0000
ROA not before:           Tue 05 Mar 2024 17:36:32 +0000
ROA not after:            Tue 04 Mar 2025 17:41:32 +0000
asID:                     22927
IP address blocks:        179.0.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 06 May 2024 06:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c3:ac:ac:42:12:d2:6d:fd:a7:8e:a9:45:05:16:fb:ba:c9:a3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1283B5F5ADDE2461E007DDCF79A4534AFC7A577F
        Validity
            Not Before: Mar  5 17:36:32 2024 GMT
            Not After : Mar  4 17:41:32 2025 GMT
        Subject: CN=553CADA61ACAEF1A3D462339C54439371C318D41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:81:9a:29:82:11:f2:25:3e:5c:23:b4:ef:
                    f9:f2:71:88:fd:ea:da:53:be:39:aa:8c:5e:d0:52:
                    ca:70:9a:3a:45:72:fa:35:90:17:f9:7f:a1:4b:3f:
                    15:a0:22:a6:63:1b:aa:07:d1:8d:7b:36:48:09:f3:
                    02:a3:57:42:8b:f1:2c:86:22:05:f6:39:ca:c2:f9:
                    f7:0b:85:9c:5d:34:f5:a1:af:eb:11:51:5b:b4:4d:
                    e1:d8:f9:2b:17:81:56:6b:ae:63:de:60:b7:bc:1c:
                    74:68:30:4d:42:76:41:06:65:ac:93:26:51:b4:11:
                    a3:86:99:89:a5:98:b9:ce:f9:b6:e0:24:fa:c5:ce:
                    b7:6f:dc:eb:a3:00:62:ca:a0:f9:6b:26:7b:6f:a9:
                    f2:9e:82:20:cc:18:d1:05:23:b3:eb:8c:80:26:b2:
                    37:7f:aa:f9:3d:f4:f4:18:0f:a2:7f:93:94:6e:ab:
                    c2:42:f3:87:02:71:5c:d7:a5:0e:b1:af:f2:22:d5:
                    a3:ea:97:b5:20:2c:9f:86:42:23:7b:7d:d0:7b:49:
                    d0:7c:58:35:e8:96:af:e2:43:17:31:81:ec:e6:68:
                    79:1f:b3:66:71:42:62:7f:0e:9e:a9:fb:bd:b9:57:
                    73:20:dd:f3:e6:78:74:ca:6a:9b:68:24:be:9e:25:
                    66:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3C:AD:A6:1A:CA:EF:1A:3D:46:23:39:C5:44:39:37:1C:31:8D:41
            X509v3 Authority Key Identifier:
                keyid:12:83:B5:F5:AD:DE:24:61:E0:07:DD:CF:79:A4:53:4A:FC:7A:57:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1283B5F5ADDE2461E007DDCF79A4534AFC7A577F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D0A2E1FC44B53F4D030901CDCCEF61E49A84F99547F66F09342790BAE033B5D/0/3137392e302e31342e302f32342d3234203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:7f:1a:24:74:bd:3d:9d:a8:e5:22:e0:eb:bc:05:5d:9c:14:
         cf:f9:e7:2f:31:31:07:3f:06:bf:f5:b9:a6:2d:99:53:6b:6c:
         3e:a9:93:ec:f0:38:41:7f:02:59:bc:eb:e0:66:e5:34:99:c2:
         bd:2d:60:dc:94:6d:90:2d:2d:f8:ce:71:db:ca:a6:0f:97:1b:
         7b:26:88:40:8a:0b:4c:22:fa:7c:32:13:87:ec:9e:a1:dc:1d:
         90:b6:8b:cd:c1:93:53:85:45:89:8f:95:ee:ad:63:70:d7:58:
         b0:c0:be:5f:44:3c:6f:2f:09:0a:cd:c4:49:1b:bf:dc:f0:9d:
         2b:38:49:8c:46:64:c7:df:fd:1c:b6:06:bd:bf:01:96:68:d4:
         58:cc:2c:e7:8f:57:dc:57:7a:a6:38:f9:0e:e4:9f:b9:c0:45:
         94:ce:af:28:5b:7e:2d:7b:ba:ea:5d:9c:fe:dd:d2:78:36:45:
         40:48:3f:88:60:b2:0f:f4:6c:28:aa:c1:70:3b:14:dd:ef:e9:
         eb:f6:ed:a8:ee:8a:4d:00:d0:ba:ef:82:ca:a7:46:9c:08:b5:
         80:30:3c:16:94:36:db:10:02:71:ee:47:b3:0f:23:90:41:81:
         88:0e:40:57:58:37:8b:17:b7:6c:e5:81:20:dd:85:8f:4d:78:
         8f:ce:99:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 10:32:19 2024 by rpki-client on console-fra.rpki-client.org