Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3136203d3e20323731373733.roa
File:                     3137392e31382e302e302f31362d3136203d3e20323731373733.roa (raw, json)
Hash identifier:          23xksH2TvZlUVDsnOrPh7M3/D7wFOwma7Vogx5qide8=
Subject key identifier:   22:B7:58:7B:2D:A8:42:41:58:D7:C6:A4:5D:35:CA:86:CA:64:7A:3D
Certificate issuer:       /CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
Certificate serial:       46EEBE052FB605263AA10DE4F0C66F0FBA389DA9
Authority key identifier: 92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3136203d3e20323731373733.roa
Signing time:             Tue 05 Mar 2024 17:41:17 +0000
ROA not before:           Tue 05 Mar 2024 17:36:17 +0000
ROA not after:            Tue 04 Mar 2025 17:41:17 +0000
asID:                     271773
IP address blocks:        179.18.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl
                          rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:ee:be:05:2f:b6:05:26:3a:a1:0d:e4:f0:c6:6f:0f:ba:38:9d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928052F0CB3F37ACD3ABCCCBC8A740B04DA13237
        Validity
            Not Before: Mar  5 17:36:17 2024 GMT
            Not After : Mar  4 17:41:17 2025 GMT
        Subject: CN=22B7587B2DA8424158D7C6A45D35CA86CA647A3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:93:d8:10:75:e5:f6:2a:20:cd:03:ba:e2:
                    a3:7b:8d:aa:c9:2f:17:bf:34:d9:20:f6:d3:92:51:
                    80:30:43:e0:51:4c:f5:18:fe:4f:1d:b9:67:b7:ac:
                    08:e1:01:96:3d:d8:bb:9b:5c:63:35:49:0c:91:6a:
                    6c:32:74:3e:51:16:bd:8f:41:42:2a:5c:48:42:82:
                    9e:fa:88:9e:91:ad:20:e1:06:1d:03:f5:e5:f8:25:
                    34:04:83:10:c5:cf:61:6f:51:cd:c2:1c:7a:79:b2:
                    d3:6b:e0:5f:7e:2c:94:5d:a3:d4:2b:2d:4b:31:81:
                    c8:5e:0e:16:ce:b1:e4:20:af:9a:a0:39:78:4f:e0:
                    62:24:3a:42:60:5b:4f:5e:fd:6e:5c:9a:43:4b:5a:
                    98:59:6c:fb:c3:67:f2:9e:f3:e8:2a:b5:a5:97:ea:
                    26:6a:96:54:a9:13:fb:b3:01:90:96:73:38:64:e6:
                    81:3a:e7:9f:c4:b4:63:9c:82:d7:a5:75:1b:cb:09:
                    93:51:7a:d2:43:91:63:28:32:14:12:4c:a5:2d:d9:
                    da:19:b6:0c:0e:1f:3a:f9:59:4a:8b:b7:9a:bf:eb:
                    80:dc:6a:39:2e:d5:62:52:6a:d4:10:04:4f:70:aa:
                    9c:d2:ce:b7:30:7f:bc:88:e5:1b:b6:d0:2b:46:33:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:58:7B:2D:A8:42:41:58:D7:C6:A4:5D:35:CA:86:CA:64:7A:3D
            X509v3 Authority Key Identifier:
                keyid:92:80:52:F0:CB:3F:37:AC:D3:AB:CC:CB:C8:A7:40:B0:4D:A1:32:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/928052F0CB3F37ACD3ABCCCBC8A740B04DA13237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D4B56D8CB7B0666463ACAE31C3496971109B4D5151D62FBE8CF7EB3069FD6FC8/0/3137392e31382e302e302f31362d3136203d3e20323731373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:db:1f:93:4d:84:32:f3:05:af:a4:2d:25:e7:db:f8:7f:
         7a:ac:b6:3d:d0:25:8f:47:d9:6e:3a:6c:f9:3b:41:83:f1:38:
         af:c9:76:05:0e:7f:ae:07:1f:29:5a:50:9d:35:1d:c6:25:21:
         d0:48:3e:cb:73:6e:fb:78:d7:d8:39:96:fa:d7:b5:8d:06:37:
         78:db:8a:75:cd:6f:4c:ca:6f:f2:a3:a2:4e:eb:e5:3f:0c:ac:
         d7:18:dc:11:b2:88:08:f7:d1:a5:16:b6:0f:de:81:ec:09:10:
         3f:66:d4:40:56:b4:2a:ca:5a:97:a2:f0:d8:05:a4:85:5c:11:
         01:af:3f:9e:37:88:94:ab:1f:27:de:72:55:4d:e2:e4:ea:47:
         67:43:29:d1:79:da:2f:5b:24:37:19:cc:4c:92:5e:00:a5:e9:
         76:74:05:f9:37:09:7b:29:51:aa:80:57:8e:9e:8f:7e:10:fd:
         6c:05:de:97:8e:a9:0c:31:4e:a9:b1:77:78:8c:62:ff:4e:45:
         b2:25:87:22:f6:ef:53:db:7b:84:b9:0e:3f:18:9b:ea:af:9c:
         71:9f:77:10:8f:64:13:5d:41:2b:51:73:14:c8:fa:63:ae:13:
         e3:86:0f:5e:2b:2e:da:22:74:df:65:46:7c:79:f5:4f:4f:8a:
         a7:a2:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 15:04:07 2024 by rpki-client on console-ams.rpki-client.org