Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
File:                     3137392e302e3135362e302f32322d3232203d3e2037373737.roa (raw, json)
Hash identifier:          SHqZqpxg40AH+Ny9xUjaLWNj+BLSWxN7qQ4B5aepnMM=
Subject key identifier:   00:B0:D5:95:99:9B:8D:00:DA:F0:13:A3:62:FD:36:38:A4:DB:39:53
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       09E385AC6893344F6A147B198A9A27C075E8A276
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa
Signing time:             Mon 15 Apr 2024 14:15:00 +0000
ROA not before:           Mon 15 Apr 2024 14:10:00 +0000
ROA not after:            Mon 14 Apr 2025 14:15:00 +0000
asID:                     7777
IP address blocks:        179.0.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:e3:85:ac:68:93:34:4f:6a:14:7b:19:8a:9a:27:c0:75:e8:a2:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Apr 15 14:10:00 2024 GMT
            Not After : Apr 14 14:15:00 2025 GMT
        Subject: CN=00B0D595999B8D00DAF013A362FD3638A4DB3953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:39:34:61:cb:94:b1:51:63:53:79:36:f1:4d:
                    a2:5f:2b:ad:e8:db:cd:1a:31:4d:62:2f:81:15:87:
                    fe:d9:62:52:7c:82:ca:f7:04:c4:d2:72:a9:8f:74:
                    6a:b2:46:e0:68:56:e6:c6:e9:63:fb:39:27:34:f5:
                    b9:f5:cb:3d:5e:ed:50:6c:24:22:8b:fa:5a:2d:b8:
                    fc:d8:4e:cc:33:8d:a2:b6:6a:f7:83:35:32:46:7b:
                    14:69:a8:fb:35:f2:9f:11:41:a7:28:2a:49:8c:26:
                    aa:2c:5e:cb:7c:85:ee:98:f0:99:0b:f5:15:3a:50:
                    51:5b:28:f8:16:99:53:0c:34:7b:59:2f:41:af:87:
                    bc:5f:09:c5:b9:aa:89:52:39:a4:a7:9d:fe:7e:23:
                    13:7a:45:dc:d8:44:e1:fd:e3:cb:67:7c:4e:68:57:
                    4b:88:05:82:de:6a:f0:ac:51:28:77:7f:a3:39:57:
                    18:8f:d1:a8:9c:33:18:90:1e:3a:9e:d5:a4:b3:c5:
                    ec:02:34:37:ec:12:89:3a:8d:45:aa:5e:b1:cb:8e:
                    35:11:4a:f0:c0:e1:43:07:71:ea:39:97:85:0f:b8:
                    ef:ac:88:66:f7:ea:6f:da:57:c0:ac:69:53:99:8a:
                    bf:b0:14:22:33:3d:60:e6:f6:f5:f7:f4:37:50:d9:
                    01:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B0:D5:95:99:9B:8D:00:DA:F0:13:A3:62:FD:36:38:A4:DB:39:53
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/3137392e302e3135362e302f32322d3232203d3e2037373737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:60:f8:7c:03:98:da:fc:7a:41:ad:42:27:43:b9:a2:17:87:
         65:6c:a1:53:10:bc:4c:fe:46:ec:b7:e0:c4:fd:13:d0:87:37:
         3b:a5:d4:ee:ae:2b:3f:87:5e:bb:da:f6:02:8e:5f:42:08:ee:
         c8:29:91:e2:88:19:8c:fb:d0:3a:e6:49:4a:6a:b5:a4:42:d4:
         db:14:98:41:86:9f:21:49:b9:63:92:bf:eb:a7:a0:4c:2a:2d:
         b4:27:53:79:dc:89:be:a1:cf:cb:92:bb:d3:24:75:a4:bf:ee:
         44:55:81:26:bb:e8:8b:46:96:72:fa:1a:0d:64:56:f1:c5:ac:
         53:99:d6:f9:65:55:d8:00:3e:16:5f:ae:ff:63:a0:a2:f6:6b:
         be:af:59:2b:a6:fb:d4:2b:24:26:59:9a:15:3d:70:07:85:56:
         22:93:b4:d6:b6:10:c6:03:22:f8:b5:f8:88:b5:41:3b:88:fc:
         be:92:88:24:82:e4:f8:7b:b1:48:27:ae:64:5f:cc:44:b1:2c:
         c9:37:2f:11:de:09:18:28:99:fe:d7:26:ab:c6:93:62:3f:59:
         73:62:05:1c:68:c5:11:a6:06:13:ea:1d:96:8b:d1:08:ba:d6:
         bb:04:59:52:bb:9a:01:62:b4:e9:ec:8e:93:7c:ab:38:07:0a:
         de:45:9f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:38:22 2024 by rpki-client on console-fra.rpki-client.org