Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa
File:                     3137392e302e33312e302f32342d3234203d3e20323633313933.roa (raw, json)
Hash identifier:          UcaRlsLY8HU7iHplcR6SfranbhPaMySHuWKjYCK34gE=
Subject key identifier:   AB:1C:05:E5:81:A9:CD:1A:5C:61:00:E0:C3:B1:8F:82:01:A5:A0:B8
Certificate issuer:       /CN=A7462244657DD26E0140804900F206B05BB243E9
Certificate serial:       739204CF65B7D824D62FB2E4027E7CADBBC06CE7
Authority key identifier: A7:46:22:44:65:7D:D2:6E:01:40:80:49:00:F2:06:B0:5B:B2:43:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7462244657DD26E0140804900F206B05BB243E9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa
Signing time:             Tue 05 Mar 2024 18:01:07 +0000
ROA not before:           Tue 05 Mar 2024 17:56:07 +0000
ROA not after:            Tue 04 Mar 2025 18:01:07 +0000
asID:                     263193
IP address blocks:        179.0.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/A7462244657DD26E0140804900F206B05BB243E9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/A7462244657DD26E0140804900F206B05BB243E9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7462244657DD26E0140804900F206B05BB243E9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:92:04:cf:65:b7:d8:24:d6:2f:b2:e4:02:7e:7c:ad:bb:c0:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7462244657DD26E0140804900F206B05BB243E9
        Validity
            Not Before: Mar  5 17:56:07 2024 GMT
            Not After : Mar  4 18:01:07 2025 GMT
        Subject: CN=AB1C05E581A9CD1A5C6100E0C3B18F8201A5A0B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:1d:1a:6f:40:55:7d:c8:0d:89:8a:5d:ff:
                    1f:dd:63:d7:2d:a2:51:6d:f5:4d:c6:4b:0b:ea:f6:
                    a8:9a:46:ee:dd:6a:ef:37:08:2b:64:8b:b4:7d:84:
                    7c:6c:78:a3:6a:a0:2b:6d:ba:7d:84:6d:33:e2:f8:
                    50:58:8f:8f:e0:11:ca:30:b9:71:14:a3:02:1e:37:
                    03:8f:24:34:20:b8:9f:4b:28:18:98:97:f2:bb:7e:
                    d4:af:0b:22:6a:44:6d:c4:b4:a6:8b:d3:db:74:fb:
                    13:a3:f3:f3:19:cf:36:cc:97:bc:e6:50:33:a6:f8:
                    fb:36:3f:83:54:e3:2b:f1:7e:92:ef:31:a1:c4:07:
                    0a:02:86:9b:f5:4f:0a:37:79:7b:97:16:9f:84:2b:
                    ac:9a:75:87:6c:ba:08:b1:10:a1:6d:27:97:be:ae:
                    5c:be:3f:99:e4:70:6a:88:00:01:01:45:74:01:37:
                    5a:8e:fc:3c:1a:03:ab:80:de:80:ae:da:01:12:cb:
                    64:ac:b5:b9:03:5c:22:d2:28:f2:22:c2:a7:c0:33:
                    22:8b:6e:44:9c:11:f5:46:8f:3c:ff:c4:0f:5b:ea:
                    88:b6:ec:ad:60:52:ab:01:6e:9b:7e:19:ff:10:76:
                    6b:2d:c3:21:70:eb:e2:5f:76:b0:90:fe:9a:6c:6d:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1C:05:E5:81:A9:CD:1A:5C:61:00:E0:C3:B1:8F:82:01:A5:A0:B8
            X509v3 Authority Key Identifier:
                keyid:A7:46:22:44:65:7D:D2:6E:01:40:80:49:00:F2:06:B0:5B:B2:43:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/A7462244657DD26E0140804900F206B05BB243E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7462244657DD26E0140804900F206B05BB243E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C224E9C0E3A105B47F92E224FC00F37E11726023E9BC58DD3252A1088214BC44/0/3137392e302e33312e302f32342d3234203d3e20323633313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:f0:e2:4d:58:99:f5:1a:42:84:6c:af:7b:a0:40:69:90:2f:
         b0:14:e7:08:da:11:e6:ff:1b:4f:39:c9:6b:28:2d:d2:1a:75:
         4b:80:97:f6:44:d3:6c:90:0c:9a:0d:f6:1d:fe:41:0b:c8:0e:
         c3:01:3a:78:7d:a2:70:63:8a:04:30:aa:4a:2a:ea:f8:0b:e7:
         8f:d0:36:f2:4f:22:c5:bf:42:d8:5c:af:e4:fa:94:d6:eb:0a:
         ac:5f:e7:7b:e1:bf:1b:b2:11:91:a3:61:90:55:bd:7e:c0:5f:
         33:bb:0b:9b:c3:c9:dc:fc:cb:4e:d7:96:8c:10:05:84:4a:10:
         52:f7:98:bb:70:b7:ae:0f:30:29:4d:0e:9f:6c:1c:e1:bd:ae:
         a3:6e:30:2e:5c:5b:32:45:67:ed:98:38:56:f2:27:1d:ac:1c:
         a9:06:c4:51:0a:a4:9e:b6:c2:e9:24:30:8a:49:78:56:05:3b:
         20:5e:08:41:5a:4d:88:fb:fe:c8:14:71:e1:09:98:3b:42:a4:
         90:b7:99:7e:68:ed:5b:77:ab:b5:ae:06:1a:b3:80:ae:2c:d5:
         b9:3f:62:a8:f9:07:83:83:9a:d8:42:a9:5e:89:7b:19:7c:95:
         a2:36:c7:15:a8:a6:b0:2f:6f:11:e4:1b:a2:ed:a1:d9:2e:df:
         46:ff:44:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:37 2024 by rpki-client on console-ams.rpki-client.org