Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa
File:                     3137392e302e3130342e302f32322d3234203d3e20323731393039.roa (raw, json)
Hash identifier:          2hHwyfiZlZSuK1sYdEemckUBqsozA6hnxZyh9Y6ZEoQ=
Subject key identifier:   BF:2A:DB:5E:50:72:27:36:58:8E:70:4B:63:62:C3:05:DD:BB:DA:30
Certificate issuer:       /CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
Certificate serial:       4ED7BA92874DD80AD7683CE4CE09B719A73A899F
Authority key identifier: 92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa
Signing time:             Tue 05 Mar 2024 17:48:33 +0000
ROA not before:           Tue 05 Mar 2024 17:43:33 +0000
ROA not after:            Tue 04 Mar 2025 17:48:33 +0000
asID:                     271909
IP address blocks:        179.0.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:ba:92:87:4d:d8:0a:d7:68:3c:e4:ce:09:b7:19:a7:3a:89:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923C8F2614D4C90EE12E7F692F19A572D92A35FC
        Validity
            Not Before: Mar  5 17:43:33 2024 GMT
            Not After : Mar  4 17:48:33 2025 GMT
        Subject: CN=BF2ADB5E50722736588E704B6362C305DDBBDA30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1d:d1:68:df:8b:b0:5a:2e:c7:de:cf:58:11:
                    03:b9:cc:c4:cf:a9:44:4d:7e:7b:33:fd:cf:93:44:
                    59:c3:d6:8d:91:42:1f:c3:5a:92:eb:e6:c8:58:48:
                    f9:b5:7d:40:85:f6:a8:26:1b:d3:97:65:15:81:54:
                    57:31:b7:d8:91:58:6c:82:25:e5:da:29:aa:62:fa:
                    d3:bd:f0:3f:fd:85:61:79:84:22:80:bb:e9:cb:86:
                    99:50:d0:a3:81:ce:74:a1:72:6f:1a:7c:39:ec:e6:
                    29:c2:4e:b9:00:92:80:f8:4f:5d:fa:71:cf:fd:ab:
                    d8:ac:0e:76:65:5b:f9:8b:c2:5c:2e:36:75:bb:6f:
                    a4:ba:e3:16:2b:16:a0:ed:dd:68:78:cb:6c:68:e8:
                    8f:31:5f:05:87:3d:64:42:a4:35:9d:3e:1a:89:b4:
                    25:23:f1:46:99:3d:7e:42:02:bf:3b:8a:b7:d6:f5:
                    66:ce:74:0e:e1:bf:e4:4b:fd:24:49:42:32:d9:43:
                    84:b1:0d:16:e3:f8:2c:e7:3f:7e:0f:c7:04:e8:46:
                    01:3a:02:0c:c9:9f:d1:92:01:b6:b3:f8:0d:fa:a1:
                    81:4b:b9:14:b0:02:d0:e6:eb:f7:e5:95:63:ff:f5:
                    27:3c:e6:b4:56:0b:b9:c9:29:99:71:15:dc:3f:6f:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2A:DB:5E:50:72:27:36:58:8E:70:4B:63:62:C3:05:DD:BB:DA:30
            X509v3 Authority Key Identifier:
                keyid:92:3C:8F:26:14:D4:C9:0E:E1:2E:7F:69:2F:19:A5:72:D9:2A:35:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923C8F2614D4C90EE12E7F692F19A572D92A35FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F36B0CBC171A077B2C875AF9E151B9693CD3C0EE3EE4D5E8B2B4A6A5BD7C50/0/3137392e302e3130342e302f32322d3234203d3e20323731393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:40:9f:8c:23:21:74:f1:1b:e9:61:78:83:03:00:c2:fb:89:
         0d:35:92:57:79:fb:c5:30:fb:05:cd:e9:e1:3e:ad:e0:ab:62:
         47:4f:9f:0d:1c:77:de:6e:88:67:7a:7c:1a:e5:58:d2:ff:86:
         20:40:cf:e8:6b:4b:56:d3:ea:0e:e5:1d:be:bc:4f:f2:5f:78:
         ed:e2:55:fb:ef:84:92:f3:29:61:9d:5a:a3:0a:1f:49:bc:b7:
         48:21:f3:ae:fc:72:85:d2:2e:5e:65:3e:77:1a:4a:21:c4:32:
         d6:93:35:7f:03:41:7c:0a:8b:cc:15:67:16:e8:6c:48:c5:13:
         6a:2d:27:2b:56:17:49:85:08:40:a3:44:60:68:0b:36:89:57:
         fd:3c:de:c6:c4:73:52:60:eb:ac:80:65:7a:29:23:54:2b:8f:
         f0:ed:78:61:cb:2c:34:13:52:15:d1:c7:ba:12:ce:3d:0e:69:
         54:01:55:99:1e:b6:e9:52:4b:ea:3f:1a:4c:e2:9e:53:d6:13:
         42:b6:3a:7a:83:6d:28:86:6b:77:e6:6e:8c:a6:41:60:65:0f:
         19:98:1a:1a:06:48:f1:38:b3:da:a9:88:30:06:01:2b:39:fd:
         dc:7c:61:f8:f5:8e:11:ce:ee:91:ea:cd:be:90:49:28:7f:75:
         cd:6f:b7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:36 2024 by rpki-client on console-fra.rpki-client.org