Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa
File:                     3137392e302e3135342e302f32342d3234203d3e203532343934.roa (raw, json)
Hash identifier:          4lhd/olQVseOq6xW6w8OhjRCNXN2YdOFdN/X/BYr1B0=
Subject key identifier:   FA:1B:45:EB:2B:32:5E:B9:4E:7E:BE:E8:70:E5:C2:1A:0F:DA:B3:6E
Certificate issuer:       /CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
Certificate serial:       3AD1820618ADB06C287FE9DA234B705D3EDA0A9B
Authority key identifier: 8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa
Signing time:             Tue 05 Mar 2024 17:49:39 +0000
ROA not before:           Tue 05 Mar 2024 17:44:39 +0000
ROA not after:            Tue 04 Mar 2025 17:49:39 +0000
asID:                     52494
IP address blocks:        179.0.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d1:82:06:18:ad:b0:6c:28:7f:e9:da:23:4b:70:5d:3e:da:0a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C103F62899D50C3499D54E0D31FAF84B4C69F19
        Validity
            Not Before: Mar  5 17:44:39 2024 GMT
            Not After : Mar  4 17:49:39 2025 GMT
        Subject: CN=FA1B45EB2B325EB94E7EBEE870E5C21A0FDAB36E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:61:d3:53:f2:ae:f5:54:b3:69:72:a7:9b:
                    a8:10:4a:65:4d:73:0d:8c:68:96:3a:24:57:c7:1f:
                    e7:54:1c:8d:73:4a:36:46:54:e8:a3:69:62:5d:6e:
                    21:0a:0b:2d:c3:7e:94:5d:b6:14:85:7e:c6:b1:45:
                    76:47:7b:b9:64:df:26:35:0a:37:c5:24:b9:62:22:
                    5c:27:c9:f1:a5:a0:63:37:b8:51:b4:93:75:5a:70:
                    67:78:a9:35:90:57:85:de:86:f9:62:34:1f:d7:28:
                    75:a0:53:10:e0:b7:f3:89:2d:09:65:81:19:5b:56:
                    89:3c:bd:77:d2:1c:ad:95:47:3b:3e:1d:25:51:3b:
                    96:d7:65:40:b0:57:68:70:b2:b5:b2:94:19:5d:eb:
                    dc:1f:2b:cc:cf:37:94:cc:b8:e8:0a:71:e9:4b:95:
                    22:3b:2e:f2:b4:19:52:14:76:84:dc:af:27:00:3b:
                    63:80:d6:d0:1b:b8:40:01:64:b3:43:1a:ce:da:27:
                    6a:24:f7:ad:79:68:0a:1a:d3:09:36:72:b5:9b:f8:
                    17:2b:4a:9d:fe:2e:fb:d1:74:ec:06:c8:b1:8b:96:
                    68:03:3f:d5:d7:9d:cd:36:cd:80:ae:93:b2:c1:62:
                    74:5c:05:21:06:29:52:3a:06:54:65:8b:eb:69:13:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:45:EB:2B:32:5E:B9:4E:7E:BE:E8:70:E5:C2:1A:0F:DA:B3:6E
            X509v3 Authority Key Identifier:
                keyid:8C:10:3F:62:89:9D:50:C3:49:9D:54:E0:D3:1F:AF:84:B4:C6:9F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C103F62899D50C3499D54E0D31FAF84B4C69F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B1200D3E26A8F4DA3777FB090E34D8E771F30C4F833A79B182E5E12F450C2936/0/3137392e302e3135342e302f32342d3234203d3e203532343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:7d:f9:86:ed:3d:51:66:07:84:a7:ae:b5:71:d7:e1:fb:b4:
         de:f2:84:f3:f4:85:77:61:37:cb:34:8a:f7:a9:48:3d:22:1a:
         e0:a7:9a:36:c1:6c:da:d8:ad:81:b3:e7:dd:ae:b8:47:2d:cf:
         f9:b4:43:9b:65:36:e6:77:c1:35:7d:29:1f:6d:52:e4:79:98:
         5c:2f:1f:55:53:d9:ce:1e:c4:64:41:8a:ed:13:5a:3a:63:6e:
         ca:37:93:f4:a8:47:86:82:c1:c7:f4:da:c6:82:ed:bf:d1:2a:
         b4:d2:cb:0c:81:c2:c6:37:f1:32:0e:f4:6b:df:1a:ce:8f:ed:
         70:fe:d5:a9:00:ea:7e:a7:0d:dd:f1:ad:71:b8:27:ac:98:9e:
         fc:64:fa:02:52:ea:e5:09:98:d0:e7:73:3e:7b:e2:ba:1e:ce:
         61:1a:7a:99:06:fc:e2:de:3f:06:13:39:41:74:7c:c6:eb:4a:
         2f:64:72:06:ef:f0:84:3c:8c:d0:b9:73:29:98:2d:f8:91:9b:
         ab:f0:c3:90:d3:ba:02:27:2e:4c:a9:a9:a9:15:21:b7:ce:50:
         fb:80:a5:ab:a1:75:09:2a:8a:64:c2:fb:b3:a3:92:db:2f:66:
         bc:5a:80:8e:d7:68:f0:c2:91:84:8f:c4:f9:c9:1f:38:12:8f:
         61:d3:e3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org