Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32342e302f32312d3234203d3e203236363139.roa
File:                     3137392e35302e32342e302f32312d3234203d3e203236363139.roa (raw, json)
Hash identifier:          JKuvlohl5LQwWXkBXMlJoCYaJ6qFQxoUi544XLNTGCM=
Subject key identifier:   F6:2F:EF:33:08:70:30:80:52:BD:F0:DC:64:4A:11:53:21:DF:D3:61
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       2F6496406B129828DE0704BA22F58B55B0D86F87
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32342e302f32312d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:40 +0000
ROA not before:           Tue 05 Mar 2024 17:51:40 +0000
ROA not after:            Tue 04 Mar 2025 17:56:40 +0000
asID:                     26619
IP address blocks:        179.50.24.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:64:96:40:6b:12:98:28:de:07:04:ba:22:f5:8b:55:b0:d8:6f:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:40 2024 GMT
            Not After : Mar  4 17:56:40 2025 GMT
        Subject: CN=F62FEF330870308052BDF0DC644A115321DFD361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:82:54:e9:2e:cb:2a:67:24:b8:24:46:9e:
                    79:b3:ec:21:b4:d6:1b:79:e9:10:ca:4a:f8:9f:70:
                    0c:00:c1:c7:f9:a1:8a:21:b4:49:49:a3:77:02:32:
                    64:0e:ff:d3:41:4b:3a:6e:4e:77:99:9d:d9:a9:ca:
                    fc:b3:46:d5:30:3c:84:46:9c:0f:3f:2e:88:fa:e2:
                    09:0d:d4:c0:75:5a:53:17:1a:ee:02:d7:04:2e:bf:
                    72:8a:48:88:82:88:cb:98:e0:92:73:f0:45:f9:72:
                    55:d5:cd:6a:bc:a7:04:f5:94:d4:df:12:e9:3f:b7:
                    c0:5d:06:d6:db:a9:f1:cb:aa:2f:f7:b5:d4:de:19:
                    00:e3:ce:00:ee:c8:ac:07:28:ba:46:0e:be:13:db:
                    75:d3:8d:22:09:3d:d5:c5:15:1e:db:b6:1b:7d:05:
                    1e:e9:0d:71:9d:9a:ea:e2:62:82:48:aa:73:44:75:
                    b8:25:88:ab:2b:ea:1e:e8:7f:d3:ba:73:45:05:55:
                    11:2a:b8:ff:ce:38:6b:53:8a:85:d6:bb:03:d4:09:
                    36:5b:fb:06:3e:41:49:bb:4a:ea:b4:32:d4:2e:cc:
                    e9:7b:52:13:9e:ea:48:53:6a:5a:50:5b:c2:28:fa:
                    b0:b7:b2:3b:2c:42:d1:11:c4:dd:36:a4:d9:ed:7d:
                    e0:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2F:EF:33:08:70:30:80:52:BD:F0:DC:64:4A:11:53:21:DF:D3:61
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e32342e302f32312d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a8:ca:ff:9c:9d:68:2d:5d:c8:78:84:81:cc:8c:cd:95:ad:b9:
         a4:c7:57:09:cd:c9:ae:9f:90:50:2d:7e:57:3c:51:ba:51:db:
         ce:81:23:16:17:ab:9b:ce:c3:48:bc:77:a7:cd:ba:fe:c9:82:
         ac:f6:cf:be:28:83:63:68:0f:18:c7:1c:d4:bf:bb:fa:67:55:
         41:38:65:bc:b6:d4:ef:3d:6d:34:97:44:66:b9:fa:41:d9:f1:
         bd:25:63:5d:95:c8:c2:8e:2d:a1:f4:e1:12:bb:74:72:84:19:
         40:3d:0e:7f:47:d4:16:d7:71:8c:fa:a7:01:8c:21:11:4f:c1:
         69:55:04:59:e4:d8:8e:9d:1f:a2:55:a0:7c:bb:90:a0:94:ce:
         a2:48:69:da:fb:f9:43:6a:08:80:1b:8e:8b:18:ce:cf:ee:ab:
         9f:9c:33:25:0f:9f:8b:44:86:7d:55:ec:61:20:07:d1:02:5a:
         fd:c1:91:de:f8:8f:44:54:eb:5f:40:5b:ad:53:7f:1f:bb:c7:
         cc:6f:0b:48:a6:a2:e2:78:f6:1c:9a:93:9f:e4:32:be:9a:9a:
         18:82:ff:7a:d5:df:90:bb:4e:f1:e2:cf:78:e4:7c:97:5f:70:
         e7:4b:44:b1:7a:52:72:73:0e:ec:78:8a:58:5a:b6:c9:ec:3d:
         51:53:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:24 2024 by rpki-client on console-fra.rpki-client.org