Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37382e302f32342d3234203d3e203236363139.roa
File:                     3137392e35302e37382e302f32342d3234203d3e203236363139.roa (raw, json)
Hash identifier:          woUaNHTBiixU/o7ykfeYb28Mo+hCBGKgJsUis2Dr4X8=
Subject key identifier:   17:5A:8D:39:B4:2C:76:ED:11:A9:4A:F6:F8:66:F3:A2:65:9E:E1:FD
Certificate issuer:       /CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
Certificate serial:       407A6E1074703757EA98E388504F57F0EF2821D9
Authority key identifier: 48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37382e302f32342d3234203d3e203236363139.roa
Signing time:             Tue 05 Mar 2024 17:56:39 +0000
ROA not before:           Tue 05 Mar 2024 17:51:39 +0000
ROA not after:            Tue 04 Mar 2025 17:56:39 +0000
asID:                     26619
IP address blocks:        179.50.78.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:7a:6e:10:74:70:37:57:ea:98:e3:88:50:4f:57:f0:ef:28:21:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF
        Validity
            Not Before: Mar  5 17:51:39 2024 GMT
            Not After : Mar  4 17:56:39 2025 GMT
        Subject: CN=175A8D39B42C76ED11A94AF6F866F3A2659EE1FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:13:c9:45:9c:1f:8d:d1:4d:47:2e:d8:91:
                    83:b5:b5:37:00:30:6b:aa:ef:de:53:3c:33:49:34:
                    ff:f5:e6:c1:d7:e9:d2:9f:33:4c:39:9a:b3:b6:f7:
                    61:05:aa:1b:24:6d:39:a5:fc:3f:89:1d:0b:eb:09:
                    90:84:32:bf:73:92:3b:51:34:23:7f:09:b9:ad:03:
                    c7:8c:26:41:b8:99:4e:a5:8c:44:29:f8:92:a8:da:
                    94:fb:b9:8d:90:d2:14:a4:93:4c:c7:f0:f1:33:fc:
                    3e:e6:43:cc:72:14:8b:cc:0b:34:c2:3e:ca:3c:70:
                    ac:d8:16:56:72:b6:c0:a4:5e:e4:b9:cf:31:da:83:
                    18:0d:e4:96:44:1c:68:80:5e:c6:89:ee:01:90:e7:
                    bb:b1:17:07:df:59:7d:1c:46:65:62:f7:66:00:c8:
                    60:cb:c8:5f:f5:92:ff:fd:36:23:81:11:54:fc:8c:
                    f1:65:91:a7:8f:8d:1e:02:2c:98:5a:df:91:98:5c:
                    fb:61:c1:1b:96:25:6b:b9:d6:73:01:b9:83:7e:1c:
                    4c:23:b3:5e:54:7a:ce:9b:63:f5:59:82:1e:d3:95:
                    fc:be:00:0b:4e:a7:78:51:0f:fc:61:3d:32:f7:e7:
                    8e:7f:09:b0:78:de:ce:32:13:c9:b5:9f:36:9e:72:
                    70:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5A:8D:39:B4:2C:76:ED:11:A9:4A:F6:F8:66:F3:A2:65:9E:E1:FD
            X509v3 Authority Key Identifier:
                keyid:48:6B:0B:E5:44:5E:23:C8:D1:36:BD:0B:04:CD:CB:C0:E7:E3:1E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/486B0BE5445E23C8D136BD0B04CDCBC0E7E31EFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0A76A37CCDDA60FAA3806F550F54723B2051F7F40A6BAEBF1D865EC3591B80D/0/3137392e35302e37382e302f32342d3234203d3e203236363139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:ae:7c:9e:38:c2:e0:89:74:85:a5:ec:49:72:35:81:f4:b2:
         dd:89:0a:bb:6d:1a:da:4d:02:44:47:99:9f:67:14:00:6e:4f:
         0f:ca:14:e0:a2:cb:12:51:4b:4c:e6:ea:e4:85:75:90:d2:ac:
         45:91:fd:ab:e5:db:34:ab:12:8a:10:5d:9e:69:18:30:0c:93:
         01:e7:16:11:97:ee:4e:96:cd:03:1c:5c:58:1a:e3:dd:93:b0:
         51:b1:b8:c8:fe:53:b6:b9:a6:57:01:64:10:77:44:d8:e0:e2:
         c0:08:a6:48:25:f9:3e:44:44:7e:f5:62:1e:9f:a6:fb:b1:80:
         13:e5:24:7f:fe:d8:1e:52:bc:27:4a:a7:91:d3:be:3f:f5:0e:
         86:3c:39:5b:d9:44:3a:5a:1d:63:23:55:b4:c4:b2:93:1f:ff:
         ad:81:f9:36:c3:4a:43:f9:25:c2:7b:e4:09:f3:06:6f:0b:59:
         1d:ae:58:3c:41:da:2a:31:87:92:cd:3d:e7:3d:05:e6:93:16:
         a3:61:65:c2:de:15:a3:cb:4e:8e:7e:52:31:1f:54:81:a2:4f:
         05:8d:18:62:94:a9:42:7d:bb:a8:f6:79:68:54:dc:c0:d8:15:
         a6:d3:c7:19:fd:1c:29:05:57:67:39:f5:f1:03:d9:bd:2d:07:
         15:b0:23:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:52:24 2024 by rpki-client on console-fra.rpki-client.org