Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa
File:                     3137392e34332e39302e302f32342d3234203d3e20323633313835.roa (raw, json)
Hash identifier:          Xc0/Yl/hqu6auGINKXPbIBDm5i2p18NIaIMO36q0iTM=
Subject key identifier:   50:51:BD:3A:FE:B8:4C:F8:8C:C3:DA:21:C1:32:22:02:86:10:3D:14
Certificate issuer:       /CN=9939CB5D6D59281BA93C774A966843C53619C202
Certificate serial:       53D5866BFACC2CB5132A155CD1FB1BB963F8093E
Authority key identifier: 99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa
Signing time:             Tue 05 Mar 2024 17:56:10 +0000
ROA not before:           Tue 05 Mar 2024 17:51:10 +0000
ROA not after:            Tue 04 Mar 2025 17:56:10 +0000
asID:                     263185
IP address blocks:        179.43.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl
                          rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 00:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d5:86:6b:fa:cc:2c:b5:13:2a:15:5c:d1:fb:1b:b9:63:f8:09:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9939CB5D6D59281BA93C774A966843C53619C202
        Validity
            Not Before: Mar  5 17:51:10 2024 GMT
            Not After : Mar  4 17:56:10 2025 GMT
        Subject: CN=5051BD3AFEB84CF88CC3DA21C132220286103D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4b:85:2d:c1:91:eb:1c:4d:1a:42:e5:b9:50:
                    5e:8d:ce:ea:3f:3c:07:0d:d0:84:ac:7a:ed:f4:1f:
                    14:07:96:cd:ca:f2:ab:81:4d:d6:3c:36:2a:6a:af:
                    74:43:6b:25:d3:40:9e:a9:17:d5:08:4a:bb:9c:07:
                    62:0d:94:35:9d:2a:e1:6b:95:59:b3:7b:72:a2:29:
                    88:71:f8:39:38:c2:05:8c:82:a4:4a:e6:33:be:fc:
                    6f:9c:cf:7b:f5:49:a8:fc:63:51:d9:87:53:32:dc:
                    21:81:99:c7:17:a5:8e:98:06:37:73:63:49:50:94:
                    bd:7e:75:65:41:e3:43:86:62:63:1b:7d:ab:b6:bd:
                    81:df:cc:8d:ed:e2:5b:ac:57:76:1f:72:62:03:af:
                    cb:af:b3:1e:e6:43:ff:01:10:3c:9d:00:74:57:27:
                    7d:98:f1:e3:0c:51:1a:5b:08:30:a6:c6:62:fe:ba:
                    7f:19:82:03:12:4a:a8:4d:46:22:a5:e3:14:4b:cd:
                    c4:75:f8:8b:cb:15:80:dd:4b:10:0d:57:8f:63:aa:
                    e4:f0:79:dd:4b:52:cc:d1:56:93:33:57:2e:8f:dc:
                    52:4c:fd:0e:a4:5c:b1:77:70:e3:63:b0:8a:10:8c:
                    25:3c:b5:56:79:a8:af:6d:b9:93:6c:62:05:4a:3c:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:BD:3A:FE:B8:4C:F8:8C:C3:DA:21:C1:32:22:02:86:10:3D:14
            X509v3 Authority Key Identifier:
                keyid:99:39:CB:5D:6D:59:28:1B:A9:3C:77:4A:96:68:43:C5:36:19:C2:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/9939CB5D6D59281BA93C774A966843C53619C202.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9939CB5D6D59281BA93C774A966843C53619C202.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ABDCDCA69B22CE9202C0915B9223843255955BEB83F9FBE025C45F591DAACCC5/0/3137392e34332e39302e302f32342d3234203d3e20323633313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:65:81:ae:3b:58:ed:f9:0c:39:1d:e2:f5:60:3b:f0:bf:3e:
         ec:48:57:73:72:20:ec:58:47:34:31:aa:fb:14:d5:d7:a1:7d:
         ba:26:95:ea:18:c6:aa:2b:10:67:73:39:11:92:5c:19:e7:1f:
         43:67:91:a3:e8:5b:59:eb:6d:cb:e3:ed:10:29:0e:da:39:ce:
         00:f2:20:a7:fe:ea:50:20:36:01:c4:7f:bb:32:d9:fe:4e:cf:
         e4:e7:48:24:12:75:43:72:ef:91:97:48:47:26:22:d8:67:91:
         3a:d9:6f:81:ab:27:ef:58:8c:81:8c:cd:2c:55:8e:da:90:cd:
         81:2b:1d:0f:34:46:42:f8:80:70:83:8a:a4:31:f5:fc:75:7c:
         2f:ea:4d:b8:92:7b:22:af:68:28:2d:7a:34:ab:ed:3f:c0:00:
         af:3c:03:20:ff:96:4d:fc:bf:1f:15:ac:da:ba:67:05:2c:e9:
         82:14:99:9f:e9:cc:15:8c:57:be:f3:c9:9b:94:98:c6:83:c9:
         1a:ca:40:07:79:63:fb:ad:6b:c9:94:b5:7b:87:7c:58:16:4a:
         67:b2:b0:b3:b9:ea:cf:f5:b9:ff:c9:27:12:be:88:41:25:aa:
         95:e8:82:21:98:50:a1:8d:0c:3a:ab:4e:ae:6d:0b:cb:93:5f:
         f3:ce:47:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 11:32:16 2024 by rpki-client on console-fra.rpki-client.org