Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138342e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          5SpNCHKy/Qfyv1cuL4kWV6wCX9GQtv6zHOOeuQE6+JI=
Subject key identifier:   62:73:81:8B:B3:39:DF:D8:88:E2:37:A2:BA:B9:82:95:0B:08:54:78
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       5D0D0BEB4ABA4E91B4613198DD4AD8CAC96D12D7
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 05 Mar 2024 18:01:53 +0000
ROA not before:           Tue 05 Mar 2024 17:56:53 +0000
ROA not after:            Tue 04 Mar 2025 18:01:53 +0000
asID:                     270047
IP address blocks:        179.0.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:0d:0b:eb:4a:ba:4e:91:b4:61:31:98:dd:4a:d8:ca:c9:6d:12:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Mar  5 17:56:53 2024 GMT
            Not After : Mar  4 18:01:53 2025 GMT
        Subject: CN=6273818BB339DFD888E237A2BAB982950B085478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:f2:13:ce:90:dd:d1:96:72:ef:e1:33:45:
                    17:3a:81:fd:8d:64:1a:95:46:5f:8d:32:b8:ca:0a:
                    09:be:c9:3d:49:05:a1:97:3d:d7:c5:be:8d:ba:87:
                    2f:28:18:07:51:85:b6:96:be:be:b5:a6:fb:07:86:
                    37:49:59:5d:55:f7:4e:62:5a:4c:fe:82:8a:20:be:
                    e8:75:18:ac:a4:84:cc:75:d7:03:65:d8:f5:ee:50:
                    4c:de:09:eb:a9:b7:b8:6b:3c:0f:28:38:b2:32:4e:
                    db:16:60:9e:eb:8f:04:3d:71:d8:ef:18:dc:b4:c7:
                    7c:dc:66:cf:80:09:e3:fb:ae:8a:24:fc:60:b2:8b:
                    1f:11:8d:09:10:24:08:8c:5d:30:34:da:8c:29:8f:
                    a2:7d:b8:b9:a4:38:c0:67:85:f5:0d:3a:bf:a0:2f:
                    0f:dd:2a:db:e3:c9:2a:3a:8c:7b:8a:5f:26:62:e9:
                    1b:7c:08:bc:bb:17:62:8b:3c:e8:c4:cb:be:e9:4a:
                    7d:e7:7d:51:b0:58:96:5c:c1:f8:18:40:08:9b:90:
                    8e:8f:8f:0e:44:db:d9:fc:d2:5f:b3:67:5f:2b:3e:
                    99:eb:0d:9a:99:1f:55:18:88:61:d0:e9:e0:64:d8:
                    4e:20:0b:2d:79:e0:5d:16:92:50:1f:0f:85:22:bf:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:73:81:8B:B3:39:DF:D8:88:E2:37:A2:BA:B9:82:95:0B:08:54:78
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138342e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:cc:ea:94:81:ae:b4:3b:c0:25:5c:30:d4:a0:20:76:6a:43:
         7e:b8:50:22:7d:2c:0b:cb:72:9c:2d:25:e4:bf:b7:27:da:1a:
         7d:14:3d:b7:e8:73:9a:0e:37:27:f8:fa:f0:6e:e3:96:b3:ca:
         f2:20:89:59:37:e7:27:7b:ab:e6:2d:41:67:35:7f:fb:76:66:
         11:3a:af:82:a0:e3:b9:66:32:51:fe:46:17:85:57:34:0e:8c:
         86:cd:91:41:86:34:11:5d:97:01:27:bf:0d:f1:ef:a6:2a:4e:
         a2:c6:ea:56:54:2d:3d:ca:c2:ef:47:16:cb:fe:c0:6d:69:96:
         e6:99:7a:56:57:e8:39:a2:dc:f0:b1:5e:c1:a3:80:35:4d:d1:
         4f:e7:95:40:44:8a:1e:de:33:e4:81:b5:96:0b:5c:c7:35:c1:
         4e:33:f6:4a:91:b5:4e:cd:bd:b3:0e:97:9b:69:67:fa:b8:4e:
         a2:a8:be:d6:3c:80:d4:92:e6:4a:0e:b0:5f:e5:c6:95:47:07:
         70:3f:94:f4:95:b2:4e:ba:6f:39:ab:04:75:d4:d1:39:eb:6b:
         7f:4c:88:fa:ab:85:40:8a:c8:d9:3c:75:29:76:61:12:cc:12:
         19:be:00:40:e4:3f:98:fc:1f:b1:23:4d:b5:1c:88:bc:ab:31:
         b9:7f:e9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org