Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e20323633313939.roa
File:                     3137392e302e3134362e302f32342d3234203d3e20323633313939.roa (raw, json)
Hash identifier:          ElzvwPDYtoa4yEDC4/7BfT8lmMJmrmERhzsp6vRhpSI=
Subject key identifier:   B6:5B:4D:CF:94:15:18:A3:F3:AD:8C:B8:00:96:19:4F:1C:CE:B9:FB
Certificate issuer:       /CN=2D7C9588134926F30E67EDE409C53B875B5CF047
Certificate serial:       38A4D5D52DB660B7C0AE7593D44688549273B68E
Authority key identifier: 2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e20323633313939.roa
Signing time:             Fri 12 Jul 2024 06:20:00 +0000
ROA not before:           Fri 12 Jul 2024 06:15:00 +0000
ROA not after:            Fri 11 Jul 2025 06:20:00 +0000
asID:                     263199
IP address blocks:        179.0.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl
                          rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a4:d5:d5:2d:b6:60:b7:c0:ae:75:93:d4:46:88:54:92:73:b6:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D7C9588134926F30E67EDE409C53B875B5CF047
        Validity
            Not Before: Jul 12 06:15:00 2024 GMT
            Not After : Jul 11 06:20:00 2025 GMT
        Subject: CN=B65B4DCF941518A3F3AD8CB80096194F1CCEB9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:38:bd:03:c6:d6:29:75:f7:22:93:2a:e7:
                    37:cd:39:a0:26:56:c3:d4:4d:6b:0f:c8:c0:08:00:
                    a0:d3:9e:bc:5b:f6:95:10:d3:6e:26:c0:75:8a:7f:
                    f5:c8:d5:d4:c2:40:19:07:38:0b:d1:e2:47:f0:93:
                    be:74:03:a5:3a:12:15:34:28:e2:89:8b:bf:45:94:
                    10:a0:4f:20:21:d1:2a:f1:fe:e2:bf:31:6d:c9:0f:
                    c2:75:d2:11:99:08:e0:16:40:42:5c:af:37:d8:d7:
                    b1:a7:12:80:9d:4c:ee:b3:c1:1c:0b:9e:70:af:2f:
                    77:23:2e:13:b8:b4:d1:40:88:df:be:b8:7e:0a:29:
                    d8:ce:30:da:36:05:a1:4d:c5:03:d8:f5:f3:45:80:
                    a4:e7:2c:1e:10:45:e5:6c:d6:c7:39:d4:a3:fd:2a:
                    11:74:0e:94:a6:52:cd:02:60:07:0c:e1:72:ce:34:
                    03:76:3c:2f:d9:de:18:56:2c:4b:8e:f7:23:ee:0b:
                    0d:df:0b:d8:23:d3:b0:05:0c:e8:40:e9:09:64:04:
                    95:82:55:d9:f9:b7:34:33:bc:7c:78:11:87:33:06:
                    c8:30:33:5b:8d:4f:2c:45:d6:19:e1:c9:f9:db:ad:
                    c5:8f:e1:bf:2a:91:45:72:b6:f6:b4:26:98:d9:2b:
                    96:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:5B:4D:CF:94:15:18:A3:F3:AD:8C:B8:00:96:19:4F:1C:CE:B9:FB
            X509v3 Authority Key Identifier:
                keyid:2D:7C:95:88:13:49:26:F3:0E:67:ED:E4:09:C5:3B:87:5B:5C:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/2D7C9588134926F30E67EDE409C53B875B5CF047.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D7C9588134926F30E67EDE409C53B875B5CF047.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F27AC91C474B388C0CCACF20057081094094BA4652C9759598575AD02D8AC576/0/3137392e302e3134362e302f32342d3234203d3e20323633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:d2:7f:a4:0c:50:16:72:d8:89:23:00:d3:cf:d1:9b:d1:e9:
         ca:2b:40:2a:e9:7c:00:ca:3d:98:d7:1b:ea:d1:f8:ed:3f:4e:
         ba:74:b1:85:19:6c:a1:a9:df:e9:69:f2:f9:60:63:1c:3c:10:
         ac:37:f5:38:2b:92:02:21:8a:e3:56:b8:56:c0:80:c9:f7:85:
         1c:f0:55:6a:c4:df:ca:b6:35:e6:6c:99:91:7e:d8:c1:ad:ff:
         c6:ab:67:84:3f:0b:49:ba:b9:1f:37:3d:77:a9:cf:d7:2b:f0:
         8b:dc:21:96:d5:bc:97:cd:d0:08:68:5b:cb:45:76:83:a9:57:
         42:26:40:a1:7a:86:90:b2:96:63:85:db:05:bf:d5:89:b1:3c:
         f3:1a:9c:2a:7a:d7:2d:4b:8e:23:95:f9:83:3e:fa:e0:70:82:
         d1:76:e2:a3:3d:ab:bf:1a:4f:13:d8:d0:87:fe:51:f5:97:09:
         5c:1a:4f:51:71:ba:8d:b7:4d:2a:d5:20:c2:c6:1d:7b:49:a4:
         d1:48:c7:de:f9:5c:bb:07:c3:d3:34:a2:b8:3c:58:56:7f:72:
         64:3d:3f:ac:4e:fd:5d:89:a7:c2:08:fa:da:8c:ff:82:86:35:
         73:6a:11:8c:71:db:39:78:80:eb:4b:ed:87:9d:32:5b:e3:67:
         f7:b4:cc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org