Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32322d3234203d3e203233303331.roa
File:                     3137392e302e34302e302f32322d3234203d3e203233303331.roa (raw, json)
Hash identifier:          qm26NATbCuf+/WEWr7tSEd4ab3oEQietYq5k0Dzn4W0=
Subject key identifier:   A6:CB:33:E0:13:7B:C9:51:72:DB:AC:CB:8D:05:4C:55:30:F2:8C:4B
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       37F408A22106AF7603FBE1500F9509AC6BF1565B
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32322d3234203d3e203233303331.roa
Signing time:             Tue 05 Mar 2024 17:54:50 +0000
ROA not before:           Tue 05 Mar 2024 17:49:50 +0000
ROA not after:            Tue 04 Mar 2025 17:54:50 +0000
asID:                     23031
IP address blocks:        179.0.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 12 May 2024 01:42:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f4:08:a2:21:06:af:76:03:fb:e1:50:0f:95:09:ac:6b:f1:56:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Mar  5 17:49:50 2024 GMT
            Not After : Mar  4 17:54:50 2025 GMT
        Subject: CN=A6CB33E0137BC95172DBACCB8D054C5530F28C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a4:45:24:92:ff:cb:b6:20:9f:e6:0c:7a:26:
                    32:f6:8f:51:71:ce:59:80:97:b2:80:24:9c:db:3b:
                    9a:a2:e8:ed:21:f1:1c:e9:9d:a3:97:2d:83:48:dc:
                    5a:7c:72:ac:f5:77:02:68:82:18:43:89:00:4d:d1:
                    10:59:4a:e3:cb:92:22:65:e0:b9:34:22:22:9d:1b:
                    64:8e:92:01:49:c8:81:ca:0b:a3:6b:71:f1:c8:50:
                    92:46:da:dc:1c:76:bb:b4:c0:e5:9f:6c:be:73:82:
                    b2:a6:43:85:59:b4:f3:29:16:72:d3:26:2d:9d:b2:
                    15:9b:16:4f:28:55:08:5a:28:09:59:b2:88:c4:43:
                    13:8d:26:e7:ea:12:ed:fe:5a:7f:dd:29:9c:21:72:
                    6b:41:6d:10:75:8f:fd:f5:0a:53:28:35:1c:39:d7:
                    d3:2d:4f:62:b5:92:df:3d:27:21:a6:30:46:d8:cf:
                    c3:be:5a:63:c2:b0:c8:3e:43:dd:17:c4:59:bf:33:
                    c5:c8:f2:fd:4a:8d:b4:c3:11:45:93:0b:9d:45:58:
                    e0:46:57:33:d8:db:f7:d2:06:56:a3:31:c6:b0:16:
                    b1:3f:f8:58:55:0b:b8:37:ff:e2:54:db:d1:66:b8:
                    46:a1:44:11:6c:77:9c:13:03:09:cc:a9:14:3e:e0:
                    8a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:33:E0:13:7B:C9:51:72:DB:AC:CB:8D:05:4C:55:30:F2:8C:4B
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32322d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:af:7c:93:3f:bb:95:3e:f9:9c:f7:86:92:bc:ea:15:bb:bb:
         6c:38:f9:14:43:bf:a7:04:54:1c:cc:02:79:41:24:46:1a:1c:
         c1:a4:96:77:68:3a:d7:49:7e:9c:d9:a8:ca:1d:68:61:b6:a0:
         57:7e:a7:7d:37:4a:97:1f:41:21:94:87:68:b5:4b:a3:1f:0b:
         39:9e:2f:43:cc:1a:3a:8b:50:e8:d6:63:23:0d:c7:e9:e0:9b:
         c9:49:7f:63:c0:b8:af:ee:ad:c7:e1:9a:47:5a:8d:09:5d:50:
         4a:ae:19:02:c2:5a:9e:cb:45:af:b8:49:b8:dc:55:1b:38:a4:
         a9:65:b9:14:e2:0c:e7:65:dd:35:9e:ae:97:89:a8:db:2d:44:
         13:5e:6a:c6:99:0b:2f:e4:a2:cb:dc:22:62:37:4f:5c:b8:a0:
         d0:c1:d8:82:d6:ea:6f:63:eb:00:7c:ca:68:8c:fe:a7:ea:75:
         0e:4e:30:f4:94:b2:ab:15:11:ad:88:32:c7:36:32:65:c0:62:
         9d:0f:25:96:68:49:4b:9e:c1:7a:3d:60:e3:e4:2b:f7:b9:c6:
         3e:82:3f:ef:a8:49:bb:f2:f7:ab:94:55:d6:84:13:00:72:54:
         ba:ce:75:93:f1:05:ed:89:0b:1e:5d:4b:96:d0:4c:7c:0d:32:
         5b:6b:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 23:33:57 2024 by rpki-client on console-ams.rpki-client.org