Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa
File:                     3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa (raw, json)
Hash identifier:          NaT0nFOS2plF47Ye5PWNZUjbER7hpT8cEUMOVGbFqyQ=
Subject key identifier:   7C:1A:57:2E:74:E8:0A:00:98:45:5F:99:46:9C:D1:02:1B:08:C2:BB
Certificate issuer:       /CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
Certificate serial:       73F4A50B8C784AE9090F2670555861BA9BE83E4D
Authority key identifier: 22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa
Signing time:             Tue 05 Mar 2024 17:56:48 +0000
ROA not before:           Tue 05 Mar 2024 17:51:48 +0000
ROA not after:            Tue 04 Mar 2025 17:56:48 +0000
asID:                     262234
IP address blocks:        179.49.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f4:a5:0b:8c:78:4a:e9:09:0f:26:70:55:58:61:ba:9b:e8:3e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=220AE4263EC4510BDEEDA90B2E56F50C63919DF0
        Validity
            Not Before: Mar  5 17:51:48 2024 GMT
            Not After : Mar  4 17:56:48 2025 GMT
        Subject: CN=7C1A572E74E80A0098455F99469CD1021B08C2BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7e:a5:5a:db:4d:65:59:e8:54:02:1f:d0:79:
                    e7:e8:a8:ab:2a:9c:36:09:1e:85:8c:05:98:0d:85:
                    a8:eb:47:3f:f1:20:17:bb:d2:90:e1:9a:6f:df:85:
                    25:95:4b:05:5c:45:3c:79:a0:9c:c6:7c:2d:ca:61:
                    50:10:6e:bc:13:ff:ea:66:62:cb:60:7e:5d:de:ea:
                    e6:94:f1:98:08:f6:cc:80:87:3d:71:14:2b:76:0d:
                    fb:a8:83:f8:6b:d8:ec:ab:49:25:10:02:25:d0:ed:
                    8f:34:69:6f:64:1a:00:dc:0c:1e:67:57:58:92:22:
                    f0:f4:50:7e:e5:64:99:36:74:45:33:bc:58:a6:1a:
                    17:44:23:c0:2f:73:94:e6:7c:27:37:24:da:f9:fd:
                    d0:63:fa:ff:9b:34:b2:82:48:b7:cb:df:03:7a:0b:
                    3e:d2:60:f7:8d:8e:d9:97:9d:9b:c7:66:74:88:03:
                    0f:aa:3e:24:ef:a3:32:9e:46:18:83:05:cd:09:6d:
                    cd:68:d1:61:a4:73:34:b1:c6:33:b2:91:d3:1d:86:
                    66:4c:f6:4f:39:2a:9a:e5:86:2a:b3:ca:bb:ea:63:
                    50:d4:05:a2:ea:c8:ce:5f:0d:bd:9c:72:ef:6d:c8:
                    ec:72:60:3d:7f:1b:ad:43:fd:f8:b2:35:ae:5e:6d:
                    09:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1A:57:2E:74:E8:0A:00:98:45:5F:99:46:9C:D1:02:1B:08:C2:BB
            X509v3 Authority Key Identifier:
                keyid:22:0A:E4:26:3E:C4:51:0B:DE:ED:A9:0B:2E:56:F5:0C:63:91:9D:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/220AE4263EC4510BDEEDA90B2E56F50C63919DF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A27B7339A57F2A4D198BBD6C5D5F64CE1AF814B409354771A230A2F02198539F/0/3137392e34392e3131322e302f32312d3234203d3e20323632323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         d0:3b:e8:e9:6a:2a:77:7a:e0:be:97:fa:a5:96:86:d1:a4:23:
         cd:fa:65:f3:03:11:3e:09:14:09:3e:cd:00:29:5d:9d:cb:53:
         b6:3a:ce:4c:ce:7d:01:2a:4f:e1:cd:c1:3d:b1:72:8d:fa:44:
         d8:a0:c0:c9:77:4b:01:e3:81:e2:e0:1a:0d:eb:3d:3d:93:af:
         50:7a:97:bf:19:b4:18:b8:e4:be:fd:43:83:3c:0f:bf:ff:f8:
         a0:55:07:a5:6a:0e:7d:73:d5:3a:77:f3:e7:b0:dc:c4:93:aa:
         68:a4:c5:14:7a:44:83:31:18:53:23:af:7d:02:9b:25:92:a5:
         06:c6:d7:50:de:cd:d5:67:9b:a6:41:cd:5e:c1:28:42:f8:4d:
         92:f7:3f:eb:24:0d:2c:49:b6:26:63:95:fe:8c:70:74:30:b4:
         73:14:a1:d2:c5:3d:d4:42:23:17:28:fd:7b:d6:48:20:d2:66:
         bd:a6:30:15:8e:f5:cd:7d:14:1d:7b:64:f6:66:c2:f2:af:ac:
         b4:fb:eb:21:98:3e:9a:ae:2b:d7:0c:dd:94:aa:1b:94:54:b4:
         11:dd:70:86:e5:c2:c1:e4:08:7b:e8:1e:67:14:d4:24:f9:b0:
         3d:96:33:e8:f9:37:05:f6:a3:1b:66:1a:f2:ed:52:34:ef:ea:
         d2:09:f8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 12:07:53 2024 by rpki-client on console-fra.rpki-client.org