Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32342d3234203d3e203233303331.roa
File:                     3137392e302e34302e302f32342d3234203d3e203233303331.roa (raw, json)
Hash identifier:          Hb4Qly9/q3JJn45Atwudz2OV/WRSjnvu8TM0RLO1U0Y=
Subject key identifier:   92:9C:60:00:6F:52:93:B5:E0:F2:8C:46:6A:BF:87:06:8D:47:1C:10
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       30F3F829FEE0C4F0A5AEF197C3FF47E07B0E5CCF
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32342d3234203d3e203233303331.roa
Signing time:             Tue 09 Jul 2024 22:55:00 +0000
ROA not before:           Tue 09 Jul 2024 22:50:00 +0000
ROA not after:            Tue 08 Jul 2025 22:55:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 02 Nov 2024 22:17:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f3:f8:29:fe:e0:c4:f0:a5:ae:f1:97:c3:ff:47:e0:7b:0e:5c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jul  9 22:50:00 2024 GMT
            Not After : Jul  8 22:55:00 2025 GMT
        Subject: CN=929C60006F5293B5E0F28C466ABF87068D471C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b7:e2:87:8d:b2:bb:51:24:18:f1:f4:a4:df:
                    2a:75:5c:56:24:33:f0:56:db:04:de:e4:8e:13:9c:
                    64:5c:14:75:d4:f6:da:69:21:d2:59:e7:37:26:b3:
                    3e:96:6c:c3:ba:56:da:0a:92:a2:08:f7:55:cc:e4:
                    62:19:bf:8b:a6:5b:87:2b:93:12:b4:e5:81:a4:45:
                    da:bc:0d:d8:52:b4:33:87:54:45:cc:fc:c5:be:91:
                    9e:ad:0a:05:d4:26:59:b4:75:ca:da:a9:6c:fc:ca:
                    8e:e5:0f:89:f6:4e:4a:e9:7d:d3:b1:07:d7:f9:d4:
                    32:dc:28:ae:3f:25:3b:67:76:8e:1e:2a:dd:a2:a8:
                    ab:d8:94:f2:33:9b:49:b2:9a:4e:f2:0f:c6:fa:5a:
                    bd:d6:88:d1:29:5c:63:34:0e:76:b3:da:6c:3c:53:
                    6d:ed:73:81:aa:a4:42:e6:c3:6d:af:fe:dd:15:04:
                    cc:b9:f9:62:75:e8:09:e2:d9:e7:ba:31:d7:f8:33:
                    8a:85:60:83:a5:f6:4a:62:c9:f7:f9:e1:41:a9:14:
                    e7:2f:df:46:dc:54:07:2f:42:4b:ec:d4:ad:dd:96:
                    7c:03:53:4a:11:77:5c:14:47:a8:8c:3e:a0:55:ae:
                    e9:69:80:b8:da:d1:50:49:ed:b0:54:90:ab:de:4b:
                    c3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9C:60:00:6F:52:93:B5:E0:F2:8C:46:6A:BF:87:06:8D:47:1C:10
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34302e302f32342d3234203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:d8:71:62:e2:9b:a3:5b:34:22:54:03:83:ee:9b:13:81:44:
         2c:92:c5:18:4d:3d:17:b2:d3:46:d3:e6:fa:a8:de:47:4b:78:
         6a:b5:cf:0d:6e:95:12:25:3a:05:1c:bb:2c:e2:ce:13:0f:6f:
         74:c1:15:2d:ba:a0:62:ef:96:7b:2d:a9:56:57:24:84:0e:ca:
         9a:f6:dc:64:47:92:b4:eb:3e:2b:c4:8e:56:8e:5c:22:7d:87:
         0b:dc:1e:00:cc:e7:39:89:7a:9a:07:8d:0e:f6:c6:d0:c0:9e:
         d0:d4:cb:c0:01:00:34:95:ba:3f:7e:e1:e5:1b:aa:ef:09:18:
         e4:62:ca:ae:e4:01:a8:a5:18:f9:75:ee:5a:dd:14:c3:e0:01:
         40:42:25:90:1c:26:db:f7:63:e7:e8:2e:ba:d2:d4:0a:39:9b:
         65:27:89:38:33:41:63:8f:f2:ae:5e:cf:ec:47:29:7e:4b:a6:
         f6:5d:51:a3:36:74:3d:40:cc:5a:4b:da:d9:0c:18:a7:9b:e9:
         0d:2c:57:b0:bb:12:0e:22:0d:09:59:7b:be:9a:ef:b9:68:b9:
         3b:d0:07:c6:bb:4b:ba:68:29:22:54:3c:24:9d:a1:41:ae:40:
         f6:49:17:18:17:b1:f1:95:21:52:44:40:92:0e:db:41:40:1d:
         26:06:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 09:59:16 2024 by rpki-client on console-ams.rpki-client.org