Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138352e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          oRNBvCIvGQNXz9eerIIMEPLwWxEBn/5Jhf7IkndQr5Q=
Subject key identifier:   71:EA:A2:B4:AC:9E:87:C1:9C:7C:C5:30:9D:23:31:7F:E1:A6:19:99
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       2EE8D5D486D942A7EDE09B026729A8C8006327C1
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 05 Mar 2024 18:01:53 +0000
ROA not before:           Tue 05 Mar 2024 17:56:53 +0000
ROA not after:            Tue 04 Mar 2025 18:01:53 +0000
asID:                     270047
IP address blocks:        179.0.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e8:d5:d4:86:d9:42:a7:ed:e0:9b:02:67:29:a8:c8:00:63:27:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Mar  5 17:56:53 2024 GMT
            Not After : Mar  4 18:01:53 2025 GMT
        Subject: CN=71EAA2B4AC9E87C19C7CC5309D23317FE1A61999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:ed:76:62:be:b2:cb:41:9a:58:1b:8d:c4:
                    38:5e:5e:66:97:67:5d:1e:72:4d:84:50:22:03:36:
                    d1:d1:e6:aa:a3:9e:1c:83:e5:8b:db:b0:4f:98:84:
                    1a:f0:cf:4c:1b:ad:42:34:96:d2:15:f3:e6:79:1b:
                    31:4c:66:1f:77:52:a3:ec:1f:ee:a3:00:f5:95:91:
                    65:57:1d:ba:10:87:22:34:5b:27:fb:3d:38:07:8f:
                    a4:c4:ca:e7:9e:c8:74:e0:07:ac:99:08:63:25:6b:
                    56:cf:d3:57:0a:eb:5f:fc:3d:ac:bd:4f:63:ef:d9:
                    49:31:15:11:97:9b:65:7a:2e:00:e4:7c:02:d2:c8:
                    b6:fd:fc:f7:13:e0:90:0e:06:3e:d4:af:5f:52:83:
                    ac:1c:e5:c6:3d:8f:f3:d4:aa:80:46:9a:71:66:5a:
                    b3:0a:c3:c6:ea:06:3d:2f:81:a7:96:6b:91:05:48:
                    93:17:29:38:45:5a:02:f8:5b:cb:eb:65:a7:5b:ea:
                    49:7f:50:45:2e:8f:7e:a1:72:27:19:a0:58:91:cf:
                    32:56:4c:eb:57:cc:aa:db:5b:fc:e9:65:a4:1c:f3:
                    b6:ed:38:8d:55:ef:70:44:87:b2:70:29:89:28:d3:
                    3b:f7:d2:7b:ca:b7:31:f8:d8:c0:e4:6d:af:5b:16:
                    f9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EA:A2:B4:AC:9E:87:C1:9C:7C:C5:30:9D:23:31:7F:E1:A6:19:99
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138352e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:33:a6:d7:de:42:45:7c:6c:b3:73:b5:d8:5a:62:c2:ce:24:
         7f:b6:8e:6a:8d:c6:58:78:22:e6:e5:3a:04:69:c7:da:80:0a:
         68:22:94:d3:b2:7f:eb:92:6b:4a:52:72:26:46:ee:03:16:f5:
         ff:40:94:82:b9:4a:42:f6:5e:e7:fc:68:91:8a:e0:72:a8:84:
         cc:4f:51:d5:bd:75:36:32:c0:ea:a4:f2:3b:7b:21:f0:25:21:
         f4:be:76:55:f4:c8:55:33:a8:4e:8f:d4:e9:d8:c4:11:18:5c:
         7e:20:dc:f6:19:e4:f3:a7:94:c7:f7:69:15:ec:c2:d4:b2:f5:
         74:e7:49:5d:59:f1:53:c2:45:58:27:61:d4:73:32:61:83:3c:
         65:84:1a:5e:ee:3a:96:a8:c6:d7:cc:ce:d1:57:b5:e1:1f:f5:
         79:bf:3d:04:dc:a3:ac:57:1c:c2:3a:47:6b:89:2b:cd:56:aa:
         6d:66:f0:f5:34:ec:90:7b:c6:2e:bc:87:14:55:45:62:81:94:
         97:23:4d:a8:b6:9e:99:6b:f7:5a:13:37:5c:66:20:33:18:4e:
         b5:44:9e:6a:f7:0f:cd:1b:3e:0c:88:be:49:37:65:70:85:93:
         f6:d4:dc:4b:e7:60:ca:a9:06:7e:bf:15:80:25:88:f0:fe:ca:
         2c:00:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org