Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
File:                     3137392e302e3138362e302f32332d3233203d3e20323730303437.roa (raw, json)
Hash identifier:          Vo8CqzvcRsBHtaRK0CxlA4FNQE2fgOWvI05xfk/h5I0=
Subject key identifier:   09:6F:ED:C6:97:72:17:B9:B7:B3:33:AD:BA:4B:1B:DE:D7:04:1E:85
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       3BAC4EE8E3246DFDB86E2C94B444C9A0D00138F4
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa
Signing time:             Tue 05 Mar 2024 18:01:53 +0000
ROA not before:           Tue 05 Mar 2024 17:56:53 +0000
ROA not after:            Tue 04 Mar 2025 18:01:53 +0000
asID:                     270047
IP address blocks:        179.0.186.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 26 Nov 2024 23:48:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:ac:4e:e8:e3:24:6d:fd:b8:6e:2c:94:b4:44:c9:a0:d0:01:38:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Mar  5 17:56:53 2024 GMT
            Not After : Mar  4 18:01:53 2025 GMT
        Subject: CN=096FEDC6977217B9B7B333ADBA4B1BDED7041E85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:f4:9b:c2:fb:22:35:67:3a:1b:08:e5:99:
                    3a:38:a8:d2:96:71:b0:cc:f9:31:c4:66:0e:a2:46:
                    16:ad:c1:18:a0:4f:17:21:ae:bb:8a:5c:dd:97:6c:
                    8e:e2:d0:33:7e:2e:c0:b4:b3:35:b0:3d:9a:25:26:
                    de:27:0b:f6:58:55:a9:5d:eb:8d:88:54:1f:f4:51:
                    d8:3f:b9:4b:55:88:be:47:11:e5:cc:df:0f:d3:71:
                    87:af:80:41:9d:b2:cf:98:81:42:db:93:63:a5:b6:
                    21:48:f7:f0:5c:c8:c6:0c:76:48:ca:3c:69:ed:30:
                    cb:84:4c:5f:7c:b4:b0:f0:d6:e4:3a:d4:64:dc:f7:
                    4b:5e:c0:71:de:f7:bb:ce:15:9a:ec:ee:a1:7c:5e:
                    fa:33:a9:70:55:7b:18:61:b6:fd:47:4f:e1:9c:2d:
                    13:22:b2:92:1e:89:d6:97:d0:d3:cb:ce:d3:e0:e8:
                    ef:04:86:04:94:2d:4c:84:51:6f:16:ed:5e:e5:3e:
                    19:8d:86:a0:55:c6:d5:44:0f:bb:e1:7d:07:97:cb:
                    9a:56:3a:09:c0:08:61:5d:05:8d:2f:22:1b:a0:0e:
                    d9:99:e7:fe:84:2a:9f:64:7d:da:7e:4d:07:b8:e7:
                    a1:c4:97:0c:a5:b2:7c:c2:28:56:4a:f6:5a:78:e2:
                    26:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6F:ED:C6:97:72:17:B9:B7:B3:33:AD:BA:4B:1B:DE:D7:04:1E:85
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138362e302f32332d3233203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:a0:14:f4:e9:6d:a3:b2:7c:4b:13:c8:8f:53:72:3b:83:40:
         0c:37:53:f7:5a:3c:ae:38:2c:68:b3:9c:35:bc:f6:3e:44:6b:
         dc:de:64:6c:5d:98:97:fe:8e:ea:8c:fb:a3:12:53:dc:78:9c:
         97:2f:37:61:70:35:ca:61:f0:19:cd:de:c0:75:c0:5a:3e:a1:
         52:b2:9e:cf:7e:80:c7:29:fd:c7:0e:9b:9d:04:aa:b9:82:96:
         4b:4f:1e:86:8d:6f:ce:29:71:85:06:bf:fe:e9:d0:9e:7c:c4:
         19:78:33:c4:1d:02:7e:20:66:b8:80:75:ef:57:70:8b:cf:82:
         ce:b4:ea:da:b2:eb:97:44:e7:07:2f:a3:1a:20:c4:cf:31:87:
         71:a4:64:74:13:c9:1b:86:49:4a:d0:12:1e:71:5e:88:05:02:
         e9:24:af:2c:06:a2:0a:2c:43:36:51:c4:35:9b:d6:b1:7f:2f:
         8d:49:b5:3a:bf:73:ee:b9:8d:2c:ef:04:32:56:ef:a0:ea:3c:
         69:0f:53:12:ca:d3:8c:86:e1:ad:bb:7c:2e:57:f2:d6:20:2c:
         c0:84:ed:a3:89:cd:94:00:8b:46:cf:2d:ea:b1:cf:27:58:39:
         68:1e:51:a3:47:fc:00:95:96:2e:54:6e:73:f8:d9:f8:1b:23:
         cd:18:4f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:41 2024 by rpki-client on console-ams.rpki-client.org