Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
File:                     3137392e302e3138372e302f32342d3234203d3e20323730303437.roa (raw, json)
Hash identifier:          4kRSgBo6f6OKEOrkbhPH0Ln/V62ZtYdyExLbTcrEg/M=
Subject key identifier:   2D:F3:FD:28:93:2C:8C:2A:20:89:9A:9D:2D:3B:EF:4D:7A:FC:41:3F
Certificate issuer:       /CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
Certificate serial:       4A152DC1BAF64F225C1D200E1E515039E70F7B08
Authority key identifier: 90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa
Signing time:             Tue 05 Mar 2024 18:01:52 +0000
ROA not before:           Tue 05 Mar 2024 17:56:52 +0000
ROA not after:            Tue 04 Mar 2025 18:01:52 +0000
asID:                     270047
IP address blocks:        179.0.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl
                          rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:15:2d:c1:ba:f6:4f:22:5c:1d:20:0e:1e:51:50:39:e7:0f:7b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90AFD2ED986A4DAE86A448C1E6E567CE33186BC4
        Validity
            Not Before: Mar  5 17:56:52 2024 GMT
            Not After : Mar  4 18:01:52 2025 GMT
        Subject: CN=2DF3FD28932C8C2A20899A9D2D3BEF4D7AFC413F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:24:21:4a:44:57:e0:8f:9e:80:06:ef:97:ed:
                    61:9a:4c:0b:d5:05:95:d1:90:cc:cf:d2:4a:d9:65:
                    55:81:cf:40:c7:64:5f:c9:44:0a:62:87:5e:e2:df:
                    99:18:52:32:7c:cc:d4:73:17:06:ca:b5:ab:5b:75:
                    31:81:d4:3a:cc:f7:a4:fd:58:a8:fb:e5:ab:ca:72:
                    b7:74:51:fb:65:bf:d3:28:c3:94:9c:d9:1d:b1:bf:
                    0d:8f:88:17:96:d3:2e:ff:be:e8:87:c0:7c:b1:46:
                    8a:80:ce:87:87:72:5c:66:b4:c9:a9:f3:9c:9d:8f:
                    2c:c5:f2:16:27:7b:96:b8:f4:74:46:7e:5a:5d:24:
                    98:fb:43:9c:15:ef:7b:49:56:cb:ae:31:91:e0:58:
                    5d:ba:62:e5:e1:55:6a:e5:d2:63:a0:40:f7:f5:5e:
                    ca:c9:bc:35:de:88:18:2f:90:f1:72:ed:54:fd:87:
                    aa:d6:e8:f5:0e:5b:14:57:d0:d7:cd:49:87:c4:94:
                    51:4f:54:17:27:5e:5d:61:77:bf:46:7c:c0:cf:16:
                    0d:3a:3b:47:e9:48:68:df:02:11:74:a3:97:e5:0b:
                    01:52:7f:5f:20:f3:ad:31:a1:60:c3:13:b1:8d:df:
                    71:71:8f:d0:93:0a:ad:b8:e2:e3:1b:1a:41:0d:29:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F3:FD:28:93:2C:8C:2A:20:89:9A:9D:2D:3B:EF:4D:7A:FC:41:3F
            X509v3 Authority Key Identifier:
                keyid:90:AF:D2:ED:98:6A:4D:AE:86:A4:48:C1:E6:E5:67:CE:33:18:6B:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90AFD2ED986A4DAE86A448C1E6E567CE33186BC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AF3C468FF2D26AFF6DC96BC449ED174C9B5F019E0ED2DF09FF9DB7C28DF69664/0/3137392e302e3138372e302f32342d3234203d3e20323730303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:0c:48:10:e4:58:9f:cd:60:1f:99:ef:4d:c4:28:9e:62:73:
         c5:73:89:ec:7e:ee:9e:1f:b1:c1:9f:95:04:c4:c4:64:21:a6:
         c4:a5:ab:44:73:5f:ef:02:3d:c5:55:2c:e4:f5:18:d2:3c:e0:
         69:6f:96:29:aa:1b:16:37:5f:5d:19:ae:b4:31:09:89:f2:a1:
         87:47:21:a0:38:96:ca:2e:08:7d:8d:e1:03:b6:90:9e:94:2a:
         0e:0b:9b:22:1e:8c:c8:ce:48:a3:d3:c4:7f:f9:96:ff:7e:41:
         2b:c0:4b:6b:e9:20:98:65:66:bf:78:17:58:ce:e7:f5:79:db:
         26:5b:92:da:9c:aa:8b:d7:3b:b3:b0:3b:2e:9e:6f:aa:69:f3:
         4f:b4:08:28:17:fe:00:a4:b8:35:9f:34:5a:65:c1:22:e2:ce:
         1c:59:57:35:f0:41:15:cd:03:6d:3b:03:72:bd:29:7c:09:5c:
         76:1c:4e:98:e4:c1:67:24:ab:7a:6d:b2:cd:e6:e9:79:5d:85:
         6a:82:fa:94:be:4d:85:a7:cc:b5:98:87:52:f0:b7:ba:d6:36:
         9e:fe:66:60:06:b8:20:f2:e7:c4:8e:7d:14:c1:c6:7c:5e:98:
         fb:08:e0:de:2a:d1:36:af:33:15:81:df:99:5c:9f:ec:ff:5a:
         1b:61:a9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 03:14:23 2024 by rpki-client on console-fra.rpki-client.org