Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323733303638.roa
File:                     3137392e302e34312e302f32342d3234203d3e20323733303638.roa (raw, json)
Hash identifier:          aKJdL3D0oTiXDNrzwmXMN19uCtgURKGa7YdYgSg0BrQ=
Subject key identifier:   B5:3F:CF:E2:FA:41:87:D7:49:70:CB:F2:FD:60:9B:A6:C5:01:17:C7
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       1CC065CA05A7C588CAAB5EA3F6BB9A59E62EB6D1
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323733303638.roa
Signing time:             Tue 09 Jul 2024 22:50:00 +0000
ROA not before:           Tue 09 Jul 2024 22:45:00 +0000
ROA not after:            Tue 08 Jul 2025 22:50:00 +0000
asID:                     273068
IP address blocks:        179.0.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl
                          rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c0:65:ca:05:a7:c5:88:ca:ab:5e:a3:f6:bb:9a:59:e6:2e:b6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Jul  9 22:45:00 2024 GMT
            Not After : Jul  8 22:50:00 2025 GMT
        Subject: CN=B53FCFE2FA4187D74970CBF2FD609BA6C50117C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1f:e3:5d:6e:fe:c2:c1:ed:5a:14:81:05:f1:
                    a8:07:57:1c:fa:ae:6d:20:9b:9d:f8:cd:a8:76:25:
                    da:42:7a:5e:77:ee:9d:ae:75:02:d3:0d:55:5d:28:
                    ba:5a:50:b6:fe:23:5b:be:c2:7c:85:c5:84:de:aa:
                    a8:90:d6:82:d9:cf:05:1a:6f:6f:60:95:6a:e6:65:
                    f7:b4:28:20:27:c6:8b:70:69:cd:01:90:44:9c:80:
                    f2:f8:d6:f7:cb:5d:ed:c1:b7:54:85:57:54:22:24:
                    dd:af:43:34:c2:27:39:9f:17:ae:18:b6:11:27:42:
                    fb:99:ad:d4:fe:f1:cd:e6:91:2f:7d:d0:87:f4:fa:
                    95:58:7d:f4:97:c7:c8:17:5f:72:c2:d6:de:af:6e:
                    cb:1c:b0:38:b8:58:6e:e8:41:62:e4:52:22:0e:a2:
                    28:88:f8:a5:07:40:84:4b:24:70:99:9a:95:7d:44:
                    d9:cc:ec:df:3a:d1:39:1a:b2:25:0a:99:63:35:c5:
                    68:a3:e4:41:06:ef:ae:4f:5b:f4:2f:7a:28:99:05:
                    80:2e:98:c4:b1:3a:35:ee:cf:38:6a:8b:ef:06:b8:
                    32:82:e7:be:44:17:5c:88:de:a3:8d:a5:28:f1:67:
                    a9:a7:d8:3e:9d:9b:88:29:20:5e:47:e5:6d:20:68:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3F:CF:E2:FA:41:87:D7:49:70:CB:F2:FD:60:9B:A6:C5:01:17:C7
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/3137392e302e34312e302f32342d3234203d3e20323733303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:d0:c5:53:5f:b3:10:2a:7f:94:46:0f:bb:8d:f1:e4:f4:
         86:92:35:fc:71:96:fb:20:25:88:57:69:98:58:a2:de:09:59:
         d9:3f:ae:02:d4:b0:cd:89:b5:7a:71:79:c4:5b:29:58:1a:28:
         50:e0:38:e4:df:07:58:b3:3f:29:0b:f3:ae:49:0c:b1:56:bb:
         42:06:fa:c0:70:d4:b2:5a:56:1f:7c:20:2c:d7:c2:32:61:cb:
         fa:ea:54:df:d6:a2:af:09:70:d2:69:b3:b3:cc:ca:51:c8:b2:
         8d:15:fd:4d:33:00:f7:3c:51:72:ef:1a:cf:c3:c3:7c:b5:d3:
         be:35:3d:e7:f0:0c:e4:df:4f:f8:55:34:c7:3a:61:1c:df:f6:
         71:d8:e4:38:a9:67:5a:02:52:72:2c:ba:73:5c:ec:10:24:62:
         11:61:85:4d:dd:bd:f3:19:ea:8a:9b:55:a7:8c:38:c8:81:ee:
         15:8f:81:b0:ab:f5:06:62:94:9f:fa:2b:33:7a:da:81:7b:01:
         3a:c7:ae:dc:51:7e:48:25:7e:a7:0b:84:4a:6e:d9:57:dd:88:
         49:ea:48:32:b2:55:b0:28:b5:47:f5:40:8f:30:b6:9a:ab:58:
         86:5d:01:fd:29:8a:20:0d:7a:5c:ac:ca:d1:2e:c6:19:8f:aa:
         95:44:74:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 08:54:59 2024 by rpki-client on console-ams.rpki-client.org