Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32332d3233203d3e203233303331.roa
File:                     3137392e302e34302e302f32332d3233203d3e203233303331.roa (raw, json)
Hash identifier:          0S0TGqlI5IrTVSJibC6bDovFpS3jnG2dnqII/LPKL2M=
Subject key identifier:   67:E3:45:1C:3B:F8:BC:94:94:B6:BD:F1:E2:4A:0F:27:23:DA:29:15
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       6DD39A6B9BCCE2A47138815146471186CB9E24D3
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32332d3233203d3e203233303331.roa
Signing time:             Tue 09 Jul 2024 22:55:00 +0000
ROA not before:           Tue 09 Jul 2024 22:50:00 +0000
ROA not after:            Tue 08 Jul 2025 22:55:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d3:9a:6b:9b:cc:e2:a4:71:38:81:51:46:47:11:86:cb:9e:24:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jul  9 22:50:00 2024 GMT
            Not After : Jul  8 22:55:00 2025 GMT
        Subject: CN=67E3451C3BF8BC9494B6BDF1E24A0F2723DA2915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2a:82:e5:08:2d:89:ae:c4:91:23:94:6b:85:
                    1e:dd:4d:01:cd:48:66:91:03:a5:ba:89:6b:48:e1:
                    bb:45:9d:49:56:d8:ce:df:08:bc:e9:4f:01:03:65:
                    c2:66:fa:8f:01:e1:12:2b:76:b6:30:7e:f3:84:ce:
                    ef:ce:54:68:45:4b:b5:25:8f:33:49:af:78:37:62:
                    16:6c:ec:5d:4d:e4:6f:96:87:7e:18:67:c8:15:a9:
                    bf:94:ad:fd:10:ba:cc:7a:26:39:91:33:7e:2f:39:
                    cf:14:5a:71:52:7a:e0:ac:94:d8:cf:03:b5:da:d2:
                    3e:f9:0f:c3:92:41:73:a4:a6:26:e8:ee:60:31:4b:
                    d8:58:21:77:23:40:b4:81:3d:c5:31:b6:68:10:60:
                    43:4b:65:b5:e6:e6:6d:be:66:f1:b4:ae:de:bf:e3:
                    c5:f6:33:4d:fc:d3:c1:f6:b8:2f:a1:c0:55:cf:ad:
                    75:32:ea:9e:cc:74:fd:2e:36:71:e6:a5:bd:cf:6f:
                    8c:d3:e1:08:34:a2:cb:9d:9e:c0:94:0c:00:fb:7b:
                    4b:88:35:0b:92:00:2b:40:ba:d6:52:cc:68:f6:85:
                    ae:07:77:61:30:2e:a6:c7:4b:ed:68:9c:97:3a:7c:
                    9d:22:92:c8:da:fd:56:ac:33:78:cf:30:ec:f0:6d:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E3:45:1C:3B:F8:BC:94:94:B6:BD:F1:E2:4A:0F:27:23:DA:29:15
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32332d3233203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:a7:c8:08:2c:c3:aa:d2:1f:0f:3b:c3:f5:96:c1:e4:c9:61:
         b6:ca:e6:a9:bb:18:84:31:42:e5:bc:d1:22:07:65:bf:5c:70:
         48:e3:f8:f5:ed:91:d3:52:93:80:ec:e7:d8:85:92:0d:83:01:
         08:ad:26:87:b1:2a:cf:5f:9e:ca:d6:34:c0:34:dc:1f:88:3b:
         7e:70:06:00:4b:bf:97:91:69:cd:14:cc:bb:eb:7b:36:3c:a6:
         73:59:e5:93:40:80:85:0e:67:01:62:ad:30:f5:cf:fb:b5:2f:
         42:84:78:2b:6f:7a:66:22:28:e9:20:9f:a1:eb:6b:23:b8:da:
         d8:14:c1:d4:8a:15:e4:b3:b6:f6:d5:96:2e:0b:bb:80:c3:1c:
         05:fa:d3:52:e2:53:cd:9c:87:3b:54:f3:65:39:a5:91:8f:85:
         e3:56:83:6f:b2:e0:80:92:df:7c:4e:e0:59:d9:12:25:c9:04:
         36:52:1a:3d:72:ee:30:1e:52:99:3e:aa:75:d4:fa:4d:83:95:
         c3:6b:83:4d:1d:b7:c6:d0:0d:10:66:5d:24:b9:c7:16:34:a6:
         39:86:d4:9f:b6:46:ac:fd:0b:0c:78:30:91:8a:98:cd:89:89:
         c0:5a:28:9f:be:cd:0c:09:36:36:03:a6:de:90:97:99:50:46:
         2d:b1:81:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:51 2024 by rpki-client on console-fra.rpki-client.org