Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3137392e34332e3139322e302f31382d3234203d3e203237383837.roa
File:                     3137392e34332e3139322e302f31382d3234203d3e203237383837.roa (raw, json)
Hash identifier:          2Tsf1OBG1iLIsVKvXbQ6gO0aFttuqGBkDDNRgDt8KBo=
Subject key identifier:   3D:6C:49:5E:43:1A:15:28:E3:F2:96:F9:8C:C8:B6:0E:9E:40:A2:69
Certificate issuer:       /CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
Certificate serial:       32A87601CFEA70433D24F1FFE38F227203E9E37B
Authority key identifier: F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3137392e34332e3139322e302f31382d3234203d3e203237383837.roa
Signing time:             Tue 05 Mar 2024 18:06:30 +0000
ROA not before:           Tue 05 Mar 2024 18:01:30 +0000
ROA not after:            Tue 04 Mar 2025 18:06:30 +0000
asID:                     27887
IP address blocks:        179.43.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:a8:76:01:cf:ea:70:43:3d:24:f1:ff:e3:8f:22:72:03:e9:e3:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F00FBBA32D43BAF3EF3175458BDD03F4CE87674F
        Validity
            Not Before: Mar  5 18:01:30 2024 GMT
            Not After : Mar  4 18:06:30 2025 GMT
        Subject: CN=3D6C495E431A1528E3F296F98CC8B60E9E40A269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:fa:62:14:41:bc:61:fb:b6:ad:cd:ad:08:
                    c4:df:ee:2f:f0:12:33:29:59:e7:65:f8:89:54:38:
                    c0:69:9e:28:70:bf:ab:70:ad:e3:7c:1e:1d:6a:38:
                    97:d0:7b:6f:04:68:48:6c:e3:97:30:48:dc:64:c1:
                    13:1c:cc:c0:d2:0c:9e:24:36:f6:03:32:28:71:b9:
                    65:c0:1e:9e:fa:6b:08:43:5b:e8:e0:39:65:0d:46:
                    62:d4:5f:1e:e8:47:82:94:81:5b:64:c1:20:9b:83:
                    64:2c:be:5c:52:2b:f0:4f:8c:34:c4:d1:6d:e2:39:
                    a1:32:33:98:16:40:eb:b2:d5:0e:21:fd:e8:3e:b3:
                    3f:a8:1e:95:fc:ce:d7:47:d5:85:13:57:b9:66:9e:
                    ff:48:52:28:49:9e:d5:df:97:a3:39:50:3a:34:98:
                    f7:b2:23:f5:6a:90:2d:71:6d:d0:ec:31:44:4c:37:
                    4b:e1:f3:5d:d3:72:e4:3d:f9:bf:fd:7c:c6:0e:b4:
                    63:b6:10:60:09:f3:5a:51:9c:30:02:03:f4:6c:ff:
                    90:8b:f4:7b:14:ff:ff:67:14:f3:53:5e:e7:95:fc:
                    b6:ab:0b:65:30:73:34:95:90:cd:d4:f5:68:21:52:
                    d9:1f:b8:be:81:1b:55:5d:e4:4e:0c:1a:c0:00:89:
                    a7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:6C:49:5E:43:1A:15:28:E3:F2:96:F9:8C:C8:B6:0E:9E:40:A2:69
            X509v3 Authority Key Identifier:
                keyid:F0:0F:BB:A3:2D:43:BA:F3:EF:31:75:45:8B:DD:03:F4:CE:87:67:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F00FBBA32D43BAF3EF3175458BDD03F4CE87674F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FBACD4BCCCBBFFA92D6D2619F076C25CCF6D71685F4F24712ECD43A6718C1C2C/0/3137392e34332e3139322e302f31382d3234203d3e203237383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9f:03:9a:33:01:b5:b1:b0:d7:b2:f0:4c:b4:c0:e9:d8:a3:b7:
         51:76:ea:35:2c:dc:72:f6:c0:da:60:d4:f7:48:36:dd:61:c9:
         42:06:43:77:d8:e5:c0:99:29:f6:25:85:50:75:a9:b3:56:9f:
         93:a3:1b:3e:76:2f:97:a6:dd:f9:f6:d4:88:cf:04:3c:a3:27:
         f0:c2:c2:21:51:4b:67:bf:bb:fe:51:6e:fc:2c:59:58:a8:c7:
         6e:8d:ec:6f:42:f8:3b:6a:7a:1a:fe:1f:1e:20:9a:ca:40:e8:
         f1:4f:70:c3:37:2c:b5:a6:04:e7:f0:9a:2a:49:0f:b7:85:b6:
         06:33:3e:01:24:4e:f5:d6:61:01:54:8f:c9:41:e3:a5:af:56:
         13:99:c5:26:f7:c6:af:46:40:c8:0d:d6:a8:30:d7:cd:5f:20:
         c1:66:18:d5:2e:18:7a:5c:a8:a8:89:e2:23:10:49:c6:43:41:
         86:6f:0a:da:f3:1b:69:01:c9:14:4a:03:8e:00:86:30:e0:d5:
         88:3c:7f:e2:bd:27:3b:77:7c:c3:e5:3e:ee:a3:52:22:23:08:
         cb:fd:b1:93:1b:b3:ba:56:6c:92:47:8a:bc:dd:e2:3a:31:8b:
         0e:99:af:d8:ad:44:82:53:d1:27:bc:62:c0:a4:2b:2c:eb:79:
         a7:3c:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 20:20:39 2024 by rpki-client on console-ams.rpki-client.org