Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/3137392e302e32392e302f32342d3234203d3e203237383137.roa
File:                     3137392e302e32392e302f32342d3234203d3e203237383137.roa (raw, json)
Hash identifier:          ihvBtQq+Ddyj05bCtGI/JkWjS32MHwLR7TeqsbhNOTE=
Subject key identifier:   34:33:A5:5A:71:95:54:D9:8F:06:D9:41:44:ED:4E:3E:59:BA:9B:BA
Certificate issuer:       /CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
Certificate serial:       0A665A7CC091BE5814BBFF7000AAEEE7AFEB1DE5
Authority key identifier: DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/3137392e302e32392e302f32342d3234203d3e203237383137.roa
Signing time:             Tue 05 Mar 2024 18:12:59 +0000
ROA not before:           Tue 05 Mar 2024 18:07:59 +0000
ROA not after:            Tue 04 Mar 2025 18:12:59 +0000
asID:                     27817
IP address blocks:        179.0.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:66:5a:7c:c0:91:be:58:14:bb:ff:70:00:aa:ee:e7:af:eb:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFD71787713EDA0707BCCDDF43BC5652C2F0F998
        Validity
            Not Before: Mar  5 18:07:59 2024 GMT
            Not After : Mar  4 18:12:59 2025 GMT
        Subject: CN=3433A55A719554D98F06D94144ED4E3E59BA9BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e6:dc:c5:14:2d:0e:d2:b5:25:4d:5e:78:97:
                    86:dd:e7:5b:4c:09:a4:69:30:74:c4:a0:6f:8c:70:
                    97:fd:bf:bd:cc:03:72:b8:70:7c:ea:bc:16:09:a8:
                    a3:44:21:42:f9:65:9f:f4:e4:94:a0:57:93:02:29:
                    be:fd:0e:28:91:78:9c:57:63:fb:4e:e5:7b:2f:cf:
                    9b:0d:b1:4f:26:1c:60:35:c0:dd:31:e6:0c:86:ae:
                    14:6c:49:ad:f3:e5:c4:6d:a4:c2:e8:2e:ed:fa:49:
                    64:9f:3c:a7:32:85:fd:26:ea:c8:ba:b4:1d:34:53:
                    a8:e5:3a:8f:c3:d1:77:06:9f:30:8d:44:ee:0c:fb:
                    c2:d7:ec:48:7e:b2:59:9d:46:2e:54:7a:ef:d9:c9:
                    93:df:78:9e:f4:72:0f:af:7e:0b:6d:16:09:28:d4:
                    c7:e2:c3:c6:6e:23:c5:ae:88:66:0b:b2:36:f1:3c:
                    7e:20:3c:6c:29:11:da:d6:b9:9c:2f:dc:cb:4e:64:
                    0b:52:52:20:f1:51:c8:a8:10:1f:cc:d8:de:58:09:
                    87:86:f3:de:ae:8f:6c:d8:c5:fd:41:1d:f3:d1:13:
                    18:24:08:4d:5c:4d:68:df:7b:e7:f9:03:68:79:52:
                    90:95:c2:19:8d:0a:af:48:34:4a:fd:c0:b4:5f:5e:
                    08:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:33:A5:5A:71:95:54:D9:8F:06:D9:41:44:ED:4E:3E:59:BA:9B:BA
            X509v3 Authority Key Identifier:
                keyid:DF:D7:17:87:71:3E:DA:07:07:BC:CD:DF:43:BC:56:52:C2:F0:F9:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFD71787713EDA0707BCCDDF43BC5652C2F0F998.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C75586242605424F667A25BC381216724D6B0FC965C0A00B80545AC2E09EEC0/0/3137392e302e32392e302f32342d3234203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:8b:43:5c:34:46:53:7c:fe:3e:00:bd:45:81:cd:57:6b:32:
         51:ca:cb:81:0d:14:30:13:8f:fa:dd:86:09:67:22:76:37:7a:
         17:63:be:8e:d6:0e:87:7c:ed:9f:63:f8:68:05:9a:1c:28:ed:
         d7:90:e9:86:95:89:60:a6:c0:81:3a:b5:45:f3:7e:d2:54:88:
         ac:2d:85:1e:dd:c1:38:7d:08:5f:74:2c:b2:e9:fc:a1:3b:49:
         33:61:7e:ac:93:70:61:c1:da:3f:52:7a:81:91:68:6e:4c:2b:
         8a:e8:56:0c:93:b3:be:21:a9:97:b8:96:c8:ae:68:74:86:10:
         0f:d3:31:ae:1e:1e:f4:f4:47:fa:c3:d7:f7:e0:1d:8a:10:ff:
         13:9d:c3:64:99:de:29:12:46:ba:a5:b2:8c:4b:56:07:94:1b:
         bc:29:f2:60:a7:1f:36:38:d0:aa:cf:3d:2b:c8:38:27:84:c4:
         42:1a:b8:1f:85:52:b3:56:98:f9:7c:cb:0d:b5:f0:c1:7d:e5:
         de:3f:4a:d5:56:81:55:50:2c:20:3c:ba:f5:35:70:66:97:4c:
         2f:11:4e:f1:ab:ac:60:f0:a4:2a:04:f8:bd:95:60:cd:41:b8:
         c2:3c:0d:e0:2f:61:37:9c:ac:1b:dc:d9:e1:4d:be:ab:db:11:
         d4:0b:52:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:59:49 2024 by rpki-client on console-ams.rpki-client.org