Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/3137392e34332e302e302f32322d3234203d3e20323730303531.roa
File:                     3137392e34332e302e302f32322d3234203d3e20323730303531.roa (raw, json)
Hash identifier:          RYw6ddPMkQuGSpK/w3f+72Kp9wUiINUU/sfWv1+YG70=
Subject key identifier:   CE:E8:BD:7C:D9:18:95:F3:F9:54:C5:10:99:4B:53:27:37:DE:AB:08
Certificate issuer:       /CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
Certificate serial:       21EEC3334F0955DB58A40546DE0B275CC99935F5
Authority key identifier: B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/3137392e34332e302e302f32322d3234203d3e20323730303531.roa
Signing time:             Tue 05 Mar 2024 17:48:16 +0000
ROA not before:           Tue 05 Mar 2024 17:43:16 +0000
ROA not after:            Tue 04 Mar 2025 17:48:16 +0000
asID:                     270051
IP address blocks:        179.43.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.crl
                          rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:ee:c3:33:4f:09:55:db:58:a4:05:46:de:0b:27:5c:c9:99:35:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224
        Validity
            Not Before: Mar  5 17:43:16 2024 GMT
            Not After : Mar  4 17:48:16 2025 GMT
        Subject: CN=CEE8BD7CD91895F3F954C510994B532737DEAB08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:08:48:06:38:4d:01:dd:09:20:0a:42:66:
                    bc:67:ae:65:5a:af:e7:b0:a3:6e:ba:f0:b1:56:4a:
                    f4:bd:d2:6c:dc:51:66:ee:3f:b2:2a:53:82:b4:ba:
                    3c:20:7c:8d:c3:53:29:7e:f1:a3:c3:57:ed:0b:28:
                    89:51:5a:ef:84:77:ad:d7:5a:36:a3:d0:fb:90:2b:
                    46:49:f5:ed:73:02:3f:be:90:9a:e0:5e:11:6e:3e:
                    15:ce:bc:9d:84:ff:a0:58:bd:9b:08:bb:87:f2:9e:
                    9e:d2:12:a7:87:87:90:a1:ba:e5:36:1c:ab:65:3f:
                    ff:c3:a2:b7:bb:13:10:63:76:33:7c:d8:ce:75:84:
                    69:f9:da:66:fb:e6:d2:70:b5:72:eb:f1:b3:d2:4b:
                    aa:16:16:bc:d5:11:e9:27:75:ca:77:82:87:b5:03:
                    e6:6a:4c:36:9b:3d:ae:4a:e6:66:0c:b7:21:c7:f5:
                    8c:77:8c:0b:c1:ad:88:75:39:a7:47:d1:b4:6c:13:
                    2c:da:b8:ae:d1:cb:67:f3:e3:c3:64:72:19:0d:9d:
                    b2:9d:ef:1a:48:94:b6:bf:2e:2c:d5:7d:c5:9b:16:
                    09:2d:0c:b3:c9:02:fc:be:b5:00:70:3f:7a:e0:62:
                    b2:dc:03:d2:d1:63:65:eb:b3:b6:ff:9d:1c:d4:02:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E8:BD:7C:D9:18:95:F3:F9:54:C5:10:99:4B:53:27:37:DE:AB:08
            X509v3 Authority Key Identifier:
                keyid:B5:7E:BC:F7:8B:C5:0E:7A:1C:13:B5:A6:A2:0C:0A:47:DB:F4:B2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57EBCF78BC50E7A1C13B5A6A20C0A47DBF4B224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4D4F4819FAD828CF2953F558922081CCB63DF148CEFE351C262AA2A3E0882EAB/0/3137392e34332e302e302f32322d3234203d3e20323730303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:fb:e0:fc:d0:78:da:ce:7e:a3:86:11:d4:68:9d:60:d7:
         c6:7a:c5:b1:68:c1:69:a9:25:f8:4e:f2:a5:4d:d0:4c:bb:46:
         03:a3:6d:95:39:80:4b:20:c0:f5:29:95:7a:cf:6a:d1:30:3e:
         2b:be:f8:24:d0:a0:49:78:26:c0:b6:69:08:db:13:63:2e:51:
         9b:4a:d0:c9:c6:b1:cd:95:cc:4c:74:24:22:ef:f4:d8:54:a9:
         3b:4d:e4:b0:ec:9d:9d:9b:e5:81:93:4a:99:93:f1:af:f1:2f:
         a5:26:3e:b5:29:2d:8d:ab:10:5d:76:0c:c3:89:2c:85:08:5b:
         86:15:a3:0f:0c:d5:a5:ff:26:a9:43:6c:fb:33:c0:51:f6:c1:
         28:88:be:26:3a:3e:db:90:36:e8:d8:74:18:89:40:32:e6:ed:
         6f:32:20:ac:77:e2:2c:0e:12:9c:0e:fb:a7:ef:c5:50:ac:58:
         36:5a:83:de:6d:14:d0:26:1a:5d:57:b4:2c:e2:28:2c:11:1d:
         7f:3e:2d:32:c1:64:dc:f6:46:38:de:22:9f:4a:5a:39:a0:77:
         a0:e5:5c:9e:db:8b:25:e4:99:d3:f0:d1:ad:bc:c4:1c:40:24:
         18:7d:58:0b:77:30:d3:03:b8:59:98:a4:d1:70:1c:a1:50:d1:
         ec:7b:26:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org