Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
File:                     3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa (raw, json)
Hash identifier:          SsTh5hzVtWroC99tz6qIXbQwRv2T4U7gtLpevPgAd3o=
Subject key identifier:   A6:EF:FF:8F:08:F1:28:30:E5:FA:AE:A2:6A:02:F2:1A:E8:40:F9:D5
Certificate issuer:       /CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
Certificate serial:       31074822941B08F9E0406ED47CE43F0488C5D22A
Authority key identifier: 0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa
Signing time:             Tue 05 Mar 2024 18:20:57 +0000
ROA not before:           Tue 05 Mar 2024 18:15:57 +0000
ROA not after:            Tue 04 Mar 2025 18:20:57 +0000
asID:                     271904
IP address blocks:        179.63.108.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:07:48:22:94:1b:08:f9:e0:40:6e:d4:7c:e4:3f:04:88:c5:d2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8
        Validity
            Not Before: Mar  5 18:15:57 2024 GMT
            Not After : Mar  4 18:20:57 2025 GMT
        Subject: CN=A6EFFF8F08F12830E5FAAEA26A02F21AE840F9D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6f:15:5b:d0:62:ee:43:1a:64:7b:4a:47:53:
                    6e:69:7b:5d:1f:a0:43:14:df:3f:58:69:cc:36:89:
                    b9:14:60:ea:52:c6:57:ac:dd:8e:08:8b:be:b8:ed:
                    c7:5f:d1:b6:87:9f:ee:16:50:49:92:f5:a2:05:82:
                    af:df:38:f7:aa:81:1d:d4:e2:23:11:60:1f:f2:6b:
                    a9:54:89:e5:7d:4b:5f:08:a0:a7:c1:91:a8:70:be:
                    2e:52:e1:ff:aa:04:5f:87:c9:93:72:81:d3:81:d9:
                    9a:ed:a6:56:07:c9:75:d5:11:4c:e7:f6:6d:2a:a0:
                    ea:d9:c4:f9:aa:2b:bc:50:56:c6:ec:d3:44:7c:06:
                    81:00:75:52:af:f0:83:30:13:41:c9:30:f2:28:a8:
                    a4:8e:5b:97:53:8a:2e:a5:70:8d:8f:de:82:a0:12:
                    7a:2a:5e:de:fb:c3:79:82:0c:00:b5:93:94:48:21:
                    78:60:9e:3d:06:1a:17:e7:8b:71:97:26:83:1e:4d:
                    c8:84:46:e8:8a:af:73:0f:79:b8:61:c9:34:58:4c:
                    ff:bd:f7:d7:8e:5e:17:59:48:b9:1f:93:bb:5f:ed:
                    9c:71:2d:64:37:b7:7f:33:c2:dd:cc:8a:c8:b5:ed:
                    92:0a:1a:7c:ea:92:57:03:ff:c8:1a:c5:48:85:e4:
                    b1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:FF:8F:08:F1:28:30:E5:FA:AE:A2:6A:02:F2:1A:E8:40:F9:D5
            X509v3 Authority Key Identifier:
                keyid:0C:2A:24:BE:5D:C7:AF:F9:F5:D9:0A:61:91:F4:9D:2F:2C:8E:A3:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0C2A24BE5DC7AFF9F5D90A6191F49D2F2C8EA3A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4AC3B1B198FAE406D3579932F3C110EDE68CBC9D714EC9105EF3CE3CBDDEA731/0/3137392e36332e3130382e302f32322d3234203d3e20323731393034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:b0:54:83:31:7d:40:6b:30:e2:f4:f8:ee:96:db:60:f2:4e:
         3b:e0:99:b9:dd:77:59:2f:d4:b9:ef:e5:ea:a0:f0:a8:cb:e5:
         1d:df:ef:7f:2f:02:ec:86:2f:f2:33:08:5e:ed:bb:17:be:cc:
         5e:8b:94:e7:6b:67:e7:61:fd:2f:72:f9:c7:05:13:73:d9:cd:
         b1:b4:0e:81:b1:11:95:3a:9b:5e:e7:93:ef:48:cc:97:02:20:
         26:42:51:45:47:95:d0:4b:ab:7c:2e:f3:c2:52:c4:79:1d:e7:
         ae:c6:bc:21:2d:ee:5d:85:f3:95:15:59:e8:c1:8d:e7:28:ef:
         0a:bc:e9:f5:93:b9:18:48:7e:cf:7b:28:89:1d:6c:0b:7e:95:
         90:2a:39:2f:7d:0b:34:0a:4f:a0:34:a0:db:ae:ce:ab:08:8e:
         fa:a5:8a:a0:e1:77:5c:27:cb:cb:ed:3d:f1:62:04:4e:57:70:
         18:4c:9a:82:1b:74:78:6f:7d:03:7c:78:ee:79:77:17:b9:f7:
         db:bc:86:f4:7e:6f:ea:41:69:4f:61:ae:f3:c5:5d:09:92:91:
         76:35:36:cd:62:39:dc:8c:d9:3e:3d:3d:84:f2:30:fe:ce:b3:
         63:e7:34:18:ab:4f:21:8d:fc:6d:b5:aa:5f:fb:05:7a:0c:33:
         9c:ea:0b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:54 2024 by rpki-client on console-fra.rpki-client.org