Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e34302e302f32312d3231203d3e203236363139.roa
File:                     3137392e35302e34302e302f32312d3231203d3e203236363139.roa (raw, json)
Hash identifier:          20xtTbEBVW8MZjgTJuqe+wgv1n7Ki6jmXAPbqpLdG8o=
Subject key identifier:   45:2E:84:C5:F8:B6:74:FD:4A:18:DD:87:10:79:B7:7A:4A:3B:34:CB
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       1BB6EF9D4AD62D7ED919CA5EE8A920F767D652E8
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e34302e302f32312d3231203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:41 +0000
ROA not before:           Tue 05 Mar 2024 17:51:41 +0000
ROA not after:            Tue 04 Mar 2025 17:56:41 +0000
asID:                     26619
IP address blocks:        179.50.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b6:ef:9d:4a:d6:2d:7e:d9:19:ca:5e:e8:a9:20:f7:67:d6:52:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:41 2024 GMT
            Not After : Mar  4 17:56:41 2025 GMT
        Subject: CN=452E84C5F8B674FD4A18DD871079B77A4A3B34CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:ef:8d:a9:e5:09:ff:7f:18:7f:c8:7d:58:
                    1a:9a:4f:61:cb:c6:06:09:57:f2:3a:96:74:51:43:
                    5b:bf:8f:8b:af:da:8d:81:7c:2a:98:1c:a4:30:c4:
                    fb:98:a3:6f:8d:bb:0e:91:4b:84:8d:96:95:0f:d8:
                    7e:fb:fb:2d:d3:ee:77:4f:78:39:29:e8:de:8e:0d:
                    5b:f2:51:28:9e:c4:fe:95:08:30:c0:7f:f8:af:cb:
                    79:f9:15:4e:c5:9d:88:19:56:d3:c9:c8:fe:69:bb:
                    1b:7b:99:db:ec:c7:ae:4f:0c:a6:99:fa:d9:c2:38:
                    fc:1e:fd:d0:25:e3:a0:d8:2f:e7:8f:b1:61:a4:61:
                    28:c9:5c:06:1f:6c:52:d3:59:0a:43:f4:89:7d:94:
                    71:fb:fb:32:84:4a:19:48:39:dc:38:8c:25:49:86:
                    71:97:3b:46:72:90:b5:93:73:1b:07:91:7e:cf:9d:
                    d2:08:c3:ce:29:58:17:ab:96:46:54:d5:9d:43:8d:
                    5d:95:b7:1c:47:5a:54:a9:01:fd:31:52:12:25:19:
                    2d:d7:2e:07:72:ea:f0:9e:18:0d:1a:5d:8c:8c:eb:
                    fc:47:d4:ed:a9:8e:f9:09:65:29:9a:6b:eb:d8:e5:
                    b8:9c:28:89:c3:93:cb:ce:44:33:99:3e:ec:0e:82:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:84:C5:F8:B6:74:FD:4A:18:DD:87:10:79:B7:7A:4A:3B:34:CB
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e34302e302f32312d3231203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0e:fa:46:88:d9:78:27:b2:22:b5:cd:7d:f6:37:9b:35:ac:90:
         ea:5f:9e:08:ac:f7:a3:fe:b7:64:e1:22:9d:8e:3a:f4:b5:9f:
         28:c4:76:c6:1b:ae:ff:ea:a0:cd:47:ab:14:00:47:1a:73:67:
         22:4b:89:3e:6b:1b:87:f9:f4:c8:a8:7a:77:1a:d5:f5:68:a2:
         17:a6:0a:df:6b:ac:0c:d5:08:b6:3f:75:36:4e:45:2f:0f:1b:
         92:c3:83:c6:c8:30:30:c7:f0:6d:a1:41:47:a3:f1:f1:62:a0:
         d1:4f:94:77:ea:1c:ea:1c:b4:d3:ba:4a:f1:9c:00:d8:ae:ba:
         06:e2:a6:49:58:a3:6c:e6:23:8d:c4:90:53:4f:dd:6e:c0:c0:
         e7:78:f3:60:32:fe:1a:e9:e8:02:11:90:e7:14:e8:ac:03:36:
         c5:7f:ab:ef:54:b6:57:32:58:72:ec:a3:9c:c4:ca:bc:82:a1:
         03:a3:34:d5:91:66:08:19:14:7d:17:4b:7c:23:56:31:7d:88:
         c5:63:77:13:0a:04:ee:7b:a6:0b:64:49:e8:2f:3e:e1:72:41:
         e5:f0:22:ed:c0:71:2c:07:27:cd:d5:f2:4c:3b:7c:4c:de:29:
         1d:ad:5e:f3:34:f6:ff:92:37:3c:0b:c5:4b:13:66:19:d1:e0:
         10:5a:f6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:51:28 2024 by rpki-client on console-ams.rpki-client.org