Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203237373834.roa
File:                     3137392e302e3230342e302f32342d3234203d3e203237373834.roa (raw, json)
Hash identifier:          NWJglx1cehyzl4h2f6BXffL1771fmhNS7IeBPhJtUko=
Subject key identifier:   FA:77:1C:20:4B:BC:63:9B:C6:E6:AA:88:AD:01:73:76:58:C6:5A:64
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       255855B2BFEAA3715FE9B6BB6199B6850C633987
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203237373834.roa
Signing time:             Tue 05 Mar 2024 17:44:14 +0000
ROA not before:           Tue 05 Mar 2024 17:39:14 +0000
ROA not after:            Tue 04 Mar 2025 17:44:14 +0000
asID:                     27784
IP address blocks:        179.0.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 25 May 2024 09:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:58:55:b2:bf:ea:a3:71:5f:e9:b6:bb:61:99:b6:85:0c:63:39:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:14 2024 GMT
            Not After : Mar  4 17:44:14 2025 GMT
        Subject: CN=FA771C204BBC639BC6E6AA88AD01737658C65A64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:52:ba:bc:37:5b:e1:90:d7:e2:44:33:2f:b5:
                    23:e1:4b:a6:b0:24:1c:fb:33:92:63:1e:fb:16:81:
                    f9:4e:04:df:1a:eb:a0:16:2d:9d:f8:2f:bf:e2:60:
                    70:56:f7:2e:53:1c:67:fe:d2:c8:52:85:e4:5d:89:
                    84:95:21:da:8c:83:a2:8c:8a:d7:58:f8:84:8b:09:
                    54:b9:37:37:64:12:3e:f1:0a:99:72:aa:f5:97:f9:
                    48:01:37:1c:fe:02:14:20:b5:b5:ac:61:1e:b0:a6:
                    5c:3e:b8:8b:ce:ac:fb:d3:07:06:43:a9:2e:59:5d:
                    59:9c:7c:da:e4:43:0d:03:a7:a9:9f:a6:14:fc:fe:
                    71:f8:da:97:98:c3:e1:f0:c1:e5:84:af:7d:94:ec:
                    d3:ce:6b:77:9b:f3:ff:9e:93:0f:ff:b1:90:20:b6:
                    84:4f:8c:5e:4c:bd:84:83:17:05:83:45:f1:9c:76:
                    7b:a3:0d:86:f7:37:89:fe:b7:c2:61:f9:41:77:0b:
                    d7:e4:a9:13:85:ac:11:4a:fc:31:cd:4a:5b:43:98:
                    59:1c:e8:63:22:5c:dd:b7:d6:6e:5a:56:14:0b:52:
                    06:50:82:01:83:c8:f4:ee:31:44:fc:01:b5:d6:ef:
                    d8:d6:4e:35:f6:5c:4e:46:aa:ce:8b:df:70:de:78:
                    6b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:77:1C:20:4B:BC:63:9B:C6:E6:AA:88:AD:01:73:76:58:C6:5A:64
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/3137392e302e3230342e302f32342d3234203d3e203237373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:f2:a7:dd:6a:cc:88:02:eb:08:c7:9b:52:d3:41:7a:da:63:
         3d:37:bb:ee:e0:28:00:80:a1:93:d0:1e:f2:de:40:65:e4:fd:
         ff:52:0c:64:a7:cb:16:a7:0d:c4:e1:a9:93:e5:30:75:e3:fb:
         2b:40:0f:7c:78:4b:da:57:f3:3f:c0:c2:34:c6:98:96:5d:96:
         8d:4d:d4:c6:c5:2b:03:1f:58:71:d9:fe:60:b7:0c:bd:69:0f:
         51:f0:13:b7:b2:dc:6a:d7:f1:c5:9b:d1:45:ae:a3:e4:6f:af:
         b7:92:e0:4a:63:81:e8:74:19:3a:a2:ad:df:66:4d:09:7a:8e:
         89:83:1a:27:f0:19:4f:69:61:88:56:bd:40:5a:fa:01:6b:a3:
         84:74:d0:03:e9:5c:e7:25:ee:ab:9e:46:2e:92:39:38:c3:88:
         a8:23:02:80:88:3c:82:9f:00:87:d0:46:3d:ab:5c:ae:38:88:
         89:1d:81:74:2e:6f:dc:31:71:c8:a0:94:41:10:85:31:cb:a8:
         3d:72:77:36:df:1c:f6:b3:bd:99:5b:6b:d2:5d:0b:e8:fd:df:
         9d:f6:5c:c8:48:7b:c3:3d:cf:cd:a0:67:d0:9c:07:fb:29:7c:
         fd:9d:3d:67:c2:93:3b:28:bf:5f:03:55:a2:9d:13:e6:ce:69:
         0a:b3:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 10:36:44 2024 by rpki-client on console-fra.rpki-client.org