Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/3137392e302e3230302e302f32332d3234203d3e20323732303337.roa
File:                     3137392e302e3230302e302f32332d3234203d3e20323732303337.roa (raw, json)
Hash identifier:          f3Jx7Z4rp5iwMiCSyH3AD+pfxZSsElLjw2D/yJwizfM=
Subject key identifier:   0B:A1:49:E3:C7:EA:09:DF:BF:F3:6E:35:84:19:BA:EE:00:5B:38:BF
Certificate issuer:       /CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
Certificate serial:       1896885CF344DE8DDE53DB41550393CE49A7FB1D
Authority key identifier: 2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/3137392e302e3230302e302f32332d3234203d3e20323732303337.roa
Signing time:             Tue 05 Mar 2024 18:17:38 +0000
ROA not before:           Tue 05 Mar 2024 18:12:38 +0000
ROA not after:            Tue 04 Mar 2025 18:17:38 +0000
asID:                     272037
IP address blocks:        179.0.200.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:96:88:5c:f3:44:de:8d:de:53:db:41:55:03:93:ce:49:a7:fb:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BA10E6D7C0328E5364BF4041104D52624FF2C2E
        Validity
            Not Before: Mar  5 18:12:38 2024 GMT
            Not After : Mar  4 18:17:38 2025 GMT
        Subject: CN=0BA149E3C7EA09DFBFF36E358419BAEE005B38BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:36:d1:6e:ae:d6:07:d6:5e:ca:3f:17:49:
                    65:dc:09:20:6c:23:a6:66:bb:f7:55:97:56:3f:c5:
                    21:54:f9:96:76:5c:b5:bb:55:2c:df:1f:8a:fb:a3:
                    eb:0d:26:a0:1a:c2:84:69:d9:e0:87:43:fb:ee:c6:
                    09:95:40:23:72:fc:c1:0f:d8:db:50:ae:1c:31:7e:
                    ea:ca:3f:e8:da:b1:3d:40:d6:3c:ce:c4:98:6e:21:
                    94:b1:51:a4:92:e9:3c:3e:9a:2c:e2:7d:f7:66:c2:
                    1d:57:41:7b:55:d1:15:3f:7e:26:83:36:fe:6f:db:
                    4f:fa:89:bc:c0:28:0e:33:44:f5:b8:d9:39:b1:20:
                    cd:f3:50:b0:13:56:36:3a:ea:d3:56:5e:0e:8a:d1:
                    4c:b1:6a:ea:0f:03:de:c0:d0:f9:50:88:76:0b:53:
                    00:86:11:f9:4d:16:b7:c0:4b:d2:91:9e:e2:5d:7a:
                    07:49:3b:ad:8f:48:89:ad:32:9e:6d:8e:cf:95:c0:
                    51:b2:6b:c6:e8:46:d6:08:bf:83:8c:9b:6a:45:49:
                    3b:e4:69:98:ad:e5:d7:e5:4d:84:10:91:8d:be:ea:
                    90:36:3a:7a:2a:46:53:b9:1e:6d:d7:40:3f:e2:22:
                    e2:b0:a9:92:b4:6a:c3:0d:11:4e:1f:3a:74:4c:c4:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A1:49:E3:C7:EA:09:DF:BF:F3:6E:35:84:19:BA:EE:00:5B:38:BF
            X509v3 Authority Key Identifier:
                keyid:2B:A1:0E:6D:7C:03:28:E5:36:4B:F4:04:11:04:D5:26:24:FF:2C:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2BA10E6D7C0328E5364BF4041104D52624FF2C2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C0C8433E770B1BD22FFA4A7661556B4C7956116B0720A276E06D1C81D89A588/0/3137392e302e3230302e302f32332d3234203d3e20323732303337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a6:48:30:2f:0d:c2:b0:83:07:57:45:b2:e3:90:90:7f:7c:bd:
         fa:4a:53:f9:77:20:c1:de:eb:7c:3c:26:2f:d3:19:24:d9:9f:
         c6:2f:be:a0:5c:dd:10:f8:26:bd:9b:25:40:9d:68:78:54:df:
         a2:11:e4:02:ae:a9:56:28:37:13:11:43:12:d6:b7:e1:ca:bb:
         ab:1c:bb:24:14:d0:48:e9:fc:9e:04:22:1d:c0:b4:a2:1e:07:
         23:d2:4d:f0:41:3d:e5:f3:29:24:64:38:66:ac:4b:cb:28:df:
         b3:6b:30:1a:6d:11:77:f3:d1:8b:5b:89:f1:e2:c1:c7:d8:3d:
         85:62:60:09:dd:48:ac:67:9b:d9:f1:18:4c:ed:ca:50:35:93:
         76:0b:f6:31:b9:4a:5d:47:62:bc:d7:4a:26:25:b8:f8:81:ef:
         e5:6f:d5:ac:31:94:7f:3d:4f:00:ca:28:0c:87:88:e3:fc:3b:
         23:8c:8b:62:00:ce:c7:68:d2:0d:4a:af:2d:57:b2:5a:63:c2:
         88:53:37:1f:9b:3f:7a:a0:47:44:14:fe:90:ed:29:d0:ce:59:
         24:56:92:9a:58:b0:79:81:1d:3d:87:52:ed:c6:ee:bc:8e:43:
         b2:24:3b:d4:04:9b:dd:1f:c9:4c:b9:b9:91:cd:d1:62:82:1c:
         b9:ab:b6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:07 2024 by rpki-client on console-fra.rpki-client.org