Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa
File:                     3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa (raw, json)
Hash identifier:          H+pjlxYJ86SApMF0sjs5MHzvimin8a5j4TTLB/4maiQ=
Subject key identifier:   29:12:27:5D:09:58:99:C8:D9:2F:52:1B:E5:5B:E2:62:96:98:61:2E
Certificate issuer:       /CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
Certificate serial:       03E12254AF04B03218DFA17EAC8E8F625C9D1FFC
Authority key identifier: 24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa
Signing time:             Tue 05 Mar 2024 17:57:37 +0000
ROA not before:           Tue 05 Mar 2024 17:52:37 +0000
ROA not after:            Tue 04 Mar 2025 17:57:37 +0000
asID:                     262220
IP address blocks:        179.51.117.0/24 maxlen: 29

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl
                          rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e1:22:54:af:04:b0:32:18:df:a1:7e:ac:8e:8f:62:5c:9d:1f:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24283CA1133BF90D2EB2CC52CE1E0804803B0C85
        Validity
            Not Before: Mar  5 17:52:37 2024 GMT
            Not After : Mar  4 17:57:37 2025 GMT
        Subject: CN=2912275D095899C8D92F521BE55BE2629698612E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:76:bb:d8:2d:d1:d1:f0:22:cf:36:15:90:9b:
                    23:5e:5b:59:8a:97:21:fa:d5:ae:10:23:7b:0c:1f:
                    d2:c8:5c:5f:0f:23:71:91:7e:24:86:f1:21:01:36:
                    8c:bf:2c:71:7b:0e:f5:2d:2e:25:f1:e7:67:92:3d:
                    f0:6c:d3:36:be:0f:c2:a5:94:a9:3b:a7:74:c2:5b:
                    75:59:7a:b9:a2:80:e1:d4:3b:e2:96:15:b1:b2:08:
                    f4:00:35:c7:22:2e:10:47:e0:52:cd:51:2b:24:1f:
                    5b:bf:15:02:00:22:80:ca:c1:42:d9:10:7d:56:01:
                    a3:9e:fb:e7:9a:f4:e1:02:a6:64:fc:9d:f8:3b:cc:
                    1d:68:c6:1f:79:12:50:48:d3:27:74:40:c7:af:8a:
                    bc:68:36:ef:66:c6:38:ff:96:ef:d4:98:ef:5f:09:
                    c6:50:ea:a9:b6:14:80:ea:a3:82:63:e9:c4:71:51:
                    18:66:87:22:12:4c:22:42:20:cb:b3:15:cf:d5:0b:
                    5d:f5:77:f4:15:c1:91:98:30:27:47:be:fb:47:28:
                    39:5c:b1:f3:e5:99:94:83:05:c8:5f:70:74:f1:ce:
                    ee:0e:8e:fc:cc:0a:ed:7b:4a:c2:0c:a7:09:f4:95:
                    b0:17:bd:a3:72:d8:79:6d:1d:39:73:5b:26:56:df:
                    29:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:12:27:5D:09:58:99:C8:D9:2F:52:1B:E5:5B:E2:62:96:98:61:2E
            X509v3 Authority Key Identifier:
                keyid:24:28:3C:A1:13:3B:F9:0D:2E:B2:CC:52:CE:1E:08:04:80:3B:0C:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/24283CA1133BF90D2EB2CC52CE1E0804803B0C85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B5C1CF48754559FD896A10EC802B797A2A863FEAA85FC179F410B59A33044CEC/0/3137392e35312e3131372e302f32342d3239203d3e20323632323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:46:c6:12:e3:62:34:88:92:2a:5b:07:50:26:29:73:15:
         4b:8d:03:88:15:67:05:c9:11:7e:75:43:78:02:74:ed:f0:90:
         d1:4a:84:5a:e7:ac:78:73:d8:99:0b:30:d7:29:5c:61:12:93:
         e7:c4:98:d4:dd:8d:47:f6:dc:2f:70:d2:0d:46:92:7c:77:3b:
         8b:96:df:58:0e:0f:79:f0:f1:91:56:b0:9a:0c:90:81:1a:c1:
         94:c1:56:d5:67:fa:bf:c5:5c:8f:bd:32:16:0c:bd:55:1d:cf:
         f0:c5:f4:bf:d0:37:80:b8:1d:a8:ca:97:b6:30:10:dc:f7:27:
         3d:4c:f5:8c:ad:21:c2:9a:0e:9b:c4:2e:48:9d:e8:63:4e:98:
         d3:49:f4:5e:9f:52:2f:a2:11:2f:8f:40:ff:47:a3:bc:f5:27:
         c6:c6:c1:6e:82:b7:ec:0c:ed:8c:4d:07:cc:61:83:70:47:0c:
         d8:b3:cc:1c:87:c8:e1:49:8c:60:43:36:ac:b9:63:56:44:9b:
         9b:73:ef:05:a3:e8:8f:b6:f5:02:8f:04:70:94:32:c1:6a:ba:
         25:3a:02:09:a7:65:d5:23:c7:83:36:55:5f:d9:de:7c:21:b8:
         10:46:d9:ef:4b:e7:65:8a:a5:9a:a1:52:f4:63:ac:0f:f7:fa:
         e7:5f:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:40 2024 by rpki-client on console-fra.rpki-client.org