Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/3137392e3138392e3232322e302f32342d3234203d3e20323637373038.roa
File:                     3137392e3138392e3232322e302f32342d3234203d3e20323637373038.roa (raw, json)
Hash identifier:          lLo56L+toO2xdQ/Zqx6iRBxLh4itaPPKsRKSxn04+ek=
Subject key identifier:   4C:1C:50:EC:18:8A:D5:F4:11:A9:B3:E1:AE:EB:51:51:C1:7D:5C:7B
Certificate issuer:       /CN=472A97D26294E0079CE932F327B2410A8EBD5829
Certificate serial:       6EFC25B8F08798B90B07D85005661E2A810F51AF
Authority key identifier: 47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/3137392e3138392e3232322e302f32342d3234203d3e20323637373038.roa
Signing time:             Tue 05 Mar 2024 18:10:21 +0000
ROA not before:           Tue 05 Mar 2024 18:05:21 +0000
ROA not after:            Tue 04 Mar 2025 18:10:21 +0000
asID:                     267708
IP address blocks:        179.189.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 May 2024 05:57:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fc:25:b8:f0:87:98:b9:0b:07:d8:50:05:66:1e:2a:81:0f:51:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472A97D26294E0079CE932F327B2410A8EBD5829
        Validity
            Not Before: Mar  5 18:05:21 2024 GMT
            Not After : Mar  4 18:10:21 2025 GMT
        Subject: CN=4C1C50EC188AD5F411A9B3E1AEEB5151C17D5C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:18:f8:6b:55:65:fa:5a:34:31:c9:2b:f0:
                    94:ff:08:1e:e3:ad:3a:05:d9:46:3f:05:3e:17:61:
                    39:a9:61:3b:9d:88:fe:a9:73:a7:f6:8f:2a:25:59:
                    f6:d0:23:9e:9f:50:5d:fd:5c:52:eb:df:cb:ba:39:
                    e4:0d:e8:1c:03:09:5d:ef:44:21:09:e4:13:f4:3c:
                    8a:39:70:b3:bf:64:ac:91:a5:fa:5c:a1:35:c3:79:
                    09:3b:15:0d:e4:03:f0:94:de:a8:5b:64:d5:39:cd:
                    94:95:4c:30:b9:39:54:06:4a:89:42:d3:ae:50:d4:
                    e1:54:10:2b:d8:e9:f0:a9:b4:7a:9f:72:2b:32:6e:
                    56:f9:45:cd:15:20:1c:81:07:c6:0f:46:e2:91:6a:
                    e3:d3:26:07:88:04:31:e6:0f:39:66:e6:39:d0:6e:
                    a2:57:ee:1c:25:b9:3f:aa:ec:46:73:d5:f9:c7:bc:
                    9f:92:d7:e0:5b:e2:8e:e6:2a:71:05:90:26:57:fd:
                    33:35:31:08:68:28:b8:1e:e7:6c:f7:4c:ab:21:3e:
                    4a:33:8e:f7:d0:0e:92:7f:b5:e6:b4:f4:da:fb:8e:
                    77:25:55:86:c6:87:50:d8:a7:21:9c:37:ea:e4:50:
                    94:61:c0:d5:f3:01:4a:25:2a:2b:46:9d:45:03:b4:
                    c5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:1C:50:EC:18:8A:D5:F4:11:A9:B3:E1:AE:EB:51:51:C1:7D:5C:7B
            X509v3 Authority Key Identifier:
                keyid:47:2A:97:D2:62:94:E0:07:9C:E9:32:F3:27:B2:41:0A:8E:BD:58:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/472A97D26294E0079CE932F327B2410A8EBD5829.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/472A97D26294E0079CE932F327B2410A8EBD5829.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9B094CDDDCD1B6914057184EE2367A2035454F2E72C40369C8F3F3CED59D10E7/0/3137392e3138392e3232322e302f32342d3234203d3e20323637373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:4a:0f:b3:29:79:97:f1:55:d1:9c:93:c8:6a:a2:8f:11:c6:
         31:a9:07:ea:28:c9:57:fc:77:f8:1e:56:01:45:dc:55:d1:1e:
         ff:94:5d:20:1b:ab:29:6d:49:b5:af:7e:b0:a3:32:8c:fd:2a:
         b4:a3:31:ed:ba:a5:9d:5f:06:7f:50:c7:ae:14:09:88:6f:6f:
         5f:69:3d:4c:3f:29:67:6e:67:0a:b4:3c:dd:66:d1:d7:c6:64:
         9c:89:0d:fa:bc:6a:5d:77:10:33:4d:3a:ec:e1:d5:45:4e:cc:
         50:d0:dd:dd:32:c1:98:ca:a5:38:72:47:15:5c:e0:e8:e5:68:
         cd:81:99:1b:ad:a6:16:b0:d5:37:cf:ee:86:e1:f5:f0:47:92:
         57:91:56:a5:16:ab:18:d0:94:a3:48:9c:5d:8f:56:fe:72:6a:
         44:7b:3a:a4:7f:07:71:1d:f8:b6:33:24:c6:fd:3d:b3:1a:7a:
         1e:92:6a:78:9a:6e:e0:45:94:d5:a5:1a:d4:b2:73:72:6a:d9:
         96:d8:ff:d8:fe:88:80:53:d6:e9:88:60:15:d0:fe:c2:97:32:
         df:5c:68:d8:df:ef:13:c4:34:c5:0e:1e:98:13:36:de:81:fd:
         8d:a6:10:79:ca:ee:2c:c9:6c:2a:2f:cf:fb:74:91:21:78:88:
         69:f9:2a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:06:49 2024 by rpki-client on console-ams.rpki-client.org