Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39382e302f32342d3234203d3e20323634373830.roa
File:                     3137392e36312e39382e302f32342d3234203d3e20323634373830.roa (raw, json)
Hash identifier:          tZ5ZLxfkR0HlevuxelELMUzrYr0CixPPn1Nxg/hslhE=
Subject key identifier:   C4:A6:52:DF:A8:07:1E:53:79:8A:F0:FA:B5:F0:0D:C0:0B:F5:71:2A
Certificate issuer:       /CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
Certificate serial:       2D2E67D648CF33C75F331060CB609EE0880ABC24
Authority key identifier: C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39382e302f32342d3234203d3e20323634373830.roa
Signing time:             Tue 05 Mar 2024 18:22:44 +0000
ROA not before:           Tue 05 Mar 2024 18:17:44 +0000
ROA not after:            Tue 04 Mar 2025 18:22:44 +0000
asID:                     264780
IP address blocks:        179.61.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl
                          rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 14:52:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2e:67:d6:48:cf:33:c7:5f:33:10:60:cb:60:9e:e0:88:0a:bc:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5158AC830CCC436B01612C96B9D65F6ADA38F18
        Validity
            Not Before: Mar  5 18:17:44 2024 GMT
            Not After : Mar  4 18:22:44 2025 GMT
        Subject: CN=C4A652DFA8071E53798AF0FAB5F00DC00BF5712A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:44:5c:75:05:a6:d4:b7:62:e4:93:85:6c:74:
                    4b:1e:39:e7:a9:3a:06:54:00:b1:1d:44:fa:07:bf:
                    78:a5:1d:70:af:fb:01:8d:15:ea:22:ea:94:7c:09:
                    c3:8f:cb:b3:c7:44:68:d9:98:8f:23:e3:38:0e:38:
                    d3:52:5d:31:81:c9:33:df:69:e0:7d:13:bd:26:be:
                    38:c0:b3:5e:0d:51:32:27:aa:4d:8e:9f:8a:40:e1:
                    b5:d3:c3:be:2d:50:bd:5a:fa:ec:5d:b3:f3:59:fc:
                    20:31:57:b5:c8:f0:06:26:53:67:64:62:74:5d:1c:
                    5a:9d:3c:5d:cf:05:2e:99:43:58:da:ed:1e:71:6a:
                    1f:3f:65:e7:f2:11:66:4d:2c:b4:97:50:36:f2:d2:
                    6c:e7:5e:e6:22:90:04:8f:59:09:7a:63:c1:5e:d7:
                    c5:73:fd:c6:51:3a:25:ee:f2:ca:76:7c:e8:ae:7f:
                    01:12:e1:33:29:21:86:33:89:a0:53:e5:87:9a:d8:
                    b3:ac:00:5c:bf:1f:1c:dc:61:ab:fd:f2:1d:6c:16:
                    e2:52:f0:40:ab:fd:b6:95:9a:8f:2e:f4:ee:c0:83:
                    19:21:5a:24:0c:73:4d:33:37:24:2c:4c:27:3d:6e:
                    51:9c:d1:22:7b:49:26:8c:f7:f8:9c:dd:2a:1c:1e:
                    7e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A6:52:DF:A8:07:1E:53:79:8A:F0:FA:B5:F0:0D:C0:0B:F5:71:2A
            X509v3 Authority Key Identifier:
                keyid:C5:15:8A:C8:30:CC:C4:36:B0:16:12:C9:6B:9D:65:F6:AD:A3:8F:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5158AC830CCC436B01612C96B9D65F6ADA38F18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B688452524F2979AAE57E0EB5ABF964704B0800B03BC6AB87582BB3BA1B1A2/0/3137392e36312e39382e302f32342d3234203d3e20323634373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7b:3f:46:d4:5d:75:e9:8a:52:19:11:e2:ed:30:67:f8:3e:
         cd:14:7b:4d:b4:7e:fd:9b:92:67:21:d9:90:54:50:35:78:17:
         94:b8:d4:5b:3a:35:6e:ec:dd:78:9c:9c:0e:06:67:90:4d:ad:
         bd:e1:bf:c9:4a:96:fc:4e:95:55:89:00:43:d0:d2:c2:c6:b2:
         d7:cf:43:db:50:77:3b:e6:b0:32:22:37:75:5a:c8:82:de:83:
         c4:10:27:8f:0d:12:a6:32:7c:4d:34:7c:d5:47:e7:71:ed:b4:
         1d:ef:0d:ee:bb:e8:b3:f5:66:03:1b:d3:3e:79:96:a7:7b:e4:
         4c:0e:07:84:eb:6e:a4:f7:04:a8:5c:78:91:e3:29:0c:64:11:
         95:80:9a:f1:5a:b3:c6:d1:0c:0b:9e:da:f2:c5:02:d9:5d:da:
         ea:68:59:b2:8c:f1:7a:3f:29:5d:d8:08:17:8b:ef:c2:88:3e:
         3f:d0:11:2d:0b:3f:05:76:f3:8f:ef:f9:18:57:06:39:80:7e:
         af:a0:a9:52:92:86:35:17:15:ab:3f:35:ab:f8:cd:3f:d6:f7:
         48:a8:7e:1c:81:91:d8:d5:d9:ea:b4:e8:5b:76:48:9d:ea:a0:
         e6:02:6e:d6:88:85:6c:00:da:03:02:1d:bc:81:3a:9d:fe:6a:
         95:1e:4e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 14:26:05 2024 by rpki-client on console-fra.rpki-client.org