Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39392e302f32342d3234203d3e20323633313839.roa
File:                     3137392e34332e39392e302f32342d3234203d3e20323633313839.roa (raw, json)
Hash identifier:          chKPxTkIVZ4FDE3EqXzQH5uW6ztq+1w/yvVdYJXtfPg=
Subject key identifier:   44:0C:3B:A1:FC:24:2B:1D:1B:64:1C:2E:2F:1B:6C:A8:A8:ED:DA:6E
Certificate issuer:       /CN=7F6F76355591EF78F2876F224A9DA4EC3D1F7C75
Certificate serial:       7B5690FF6CE3CDF9C8A4AEDEC340BC72842162BD
Authority key identifier: 7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39392e302f32342d3234203d3e20323633313839.roa
Signing time:             Mon 25 Nov 2024 18:30:01 +0000
ROA not before:           Mon 25 Nov 2024 18:25:01 +0000
ROA not after:            Mon 24 Nov 2025 18:30:01 +0000
asID:                     263189
IP address blocks:        179.43.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.crl
                          rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 30 Dec 2024 14:19:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:56:90:ff:6c:e3:cd:f9:c8:a4:ae:de:c3:40:bc:72:84:21:62:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F6F76355591EF78F2876F224A9DA4EC3D1F7C75
        Validity
            Not Before: Nov 25 18:25:01 2024 GMT
            Not After : Nov 24 18:30:01 2025 GMT
        Subject: CN=440C3BA1FC242B1D1B641C2E2F1B6CA8A8EDDA6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:11:13:89:05:09:19:0b:3b:1d:00:56:ec:
                    b3:7a:7b:98:f8:6d:53:46:bd:cb:ef:01:42:0e:05:
                    2f:41:fc:08:29:ce:be:4e:c9:59:15:98:fb:70:9f:
                    b7:c6:e0:4d:52:f8:41:c2:36:df:10:82:4a:b6:74:
                    3f:fb:70:83:f5:9a:89:dc:4b:9c:84:10:9d:16:84:
                    43:7a:9a:a1:18:98:5f:bd:b9:3c:b8:f3:7a:f4:d6:
                    61:21:2c:ff:8e:e0:9c:b7:5c:c9:a5:71:db:b3:78:
                    e1:93:35:c3:8c:15:ff:96:56:26:6f:e7:93:b1:56:
                    df:9a:da:31:2a:79:65:a1:45:26:f4:af:3b:55:a8:
                    73:eb:7e:8f:2a:09:c9:13:bc:68:73:25:e3:da:5f:
                    a3:c8:31:6d:70:95:04:d2:90:70:51:ce:cb:ca:c4:
                    d1:ed:5a:49:c5:9b:1c:d5:ad:25:be:42:9c:5e:27:
                    03:7b:32:08:fa:82:c7:63:da:8f:56:97:ce:25:9d:
                    be:6a:a7:14:92:1e:4d:6d:ad:8f:ac:96:14:d5:67:
                    07:10:0a:f5:8f:3e:60:e0:14:e1:22:38:c1:0a:5c:
                    7c:af:72:c3:e1:a3:92:47:dd:fa:fc:f8:35:20:48:
                    2e:cc:ad:ce:69:70:46:39:e3:4c:bc:61:4f:4f:65:
                    04:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:0C:3B:A1:FC:24:2B:1D:1B:64:1C:2E:2F:1B:6C:A8:A8:ED:DA:6E
            X509v3 Authority Key Identifier:
                keyid:7F:6F:76:35:55:91:EF:78:F2:87:6F:22:4A:9D:A4:EC:3D:1F:7C:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F6F76355591EF78F2876F224A9DA4EC3D1F7C75.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9BF1002C9E31D1B526FABE60CC81CC5A203BEB8DF84C3441F29CF9E07584DAEC/0/3137392e34332e39392e302f32342d3234203d3e20323633313839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:e0:b8:23:85:f3:3b:d9:cc:e4:16:c1:01:24:7e:7d:64:
         0a:f0:8c:b9:b6:4b:86:90:15:73:23:de:95:57:dd:0d:0e:9f:
         5c:92:47:02:73:89:80:29:b5:c2:ec:df:34:34:31:f0:50:61:
         fe:b6:45:e2:e3:00:4e:48:36:13:c3:33:4b:dd:0d:5a:b7:9f:
         00:35:81:3e:fd:53:b4:d5:97:6f:20:89:03:47:84:cc:97:20:
         d6:99:33:90:c6:be:0f:b0:d0:9d:94:8c:a4:5f:01:8b:ad:7b:
         9b:78:80:93:c3:9d:5b:21:53:2e:fe:24:74:6a:93:65:a2:31:
         2d:2c:8e:ed:bd:05:f6:fe:67:cc:8b:f6:6c:7c:cd:1b:1c:2e:
         0e:df:11:e2:d7:8b:81:69:e0:2a:61:b6:4e:4e:a1:72:3f:52:
         0e:6b:a8:a8:5a:ac:87:ba:85:b9:50:35:09:d9:1f:7c:61:d1:
         41:6b:58:98:c1:fc:f7:ff:b0:90:bd:cb:92:82:45:66:f0:dd:
         94:a5:e7:d4:12:8d:d8:e1:cc:0b:88:61:f6:70:0e:53:2d:d0:
         d2:97:b2:b7:bd:c8:6c:87:a6:bc:15:c1:16:1d:85:dc:3c:35:
         88:35:3a:9f:fa:49:d2:6a:77:19:ad:71:4e:64:b4:06:ac:83:
         cb:61:25:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 27 08:38:16 2024 by rpki-client on console-fra.rpki-client.org