Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235302e302f32342d3234203d3e203532343338.roa
File:                     3137392e36332e3235302e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          QVgYBe/sIKvUqh31FV3DXKaPf7esfiU2r1zTB5SXKgA=
Subject key identifier:   FA:74:93:E0:F2:E7:B5:20:88:37:D7:FC:06:BF:3B:ED:A7:24:09:14
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       34CD82149A146DCF2C9B4500903BB4F8E49811EC
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235302e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:34 +0000
ROA not before:           Tue 05 Mar 2024 17:35:34 +0000
ROA not after:            Tue 04 Mar 2025 17:40:34 +0000
asID:                     52438
IP address blocks:        179.63.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:cd:82:14:9a:14:6d:cf:2c:9b:45:00:90:3b:b4:f8:e4:98:11:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:34 2024 GMT
            Not After : Mar  4 17:40:34 2025 GMT
        Subject: CN=FA7493E0F2E7B5208837D7FC06BF3BEDA7240914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c2:62:89:7a:19:14:ae:db:73:34:ec:f1:fd:
                    25:c5:ad:12:92:6d:6a:fb:2e:fc:bb:80:3d:bd:4c:
                    eb:a1:58:2c:e9:bc:7f:c6:23:44:cc:cc:c4:5a:59:
                    73:42:e8:5b:f4:c3:1c:65:f5:95:78:68:90:a9:b2:
                    98:65:67:7d:d2:d6:0e:77:a4:6e:45:be:d2:42:92:
                    5d:e4:45:53:42:ca:9f:d1:cf:6f:f9:0d:a5:e0:d5:
                    ce:70:19:bc:5f:b7:58:53:c8:60:fb:7a:65:3f:ef:
                    ef:e1:fa:c1:40:54:bb:34:91:da:5d:2f:af:f0:d0:
                    06:86:10:f6:58:d2:1f:db:19:82:ea:bd:8f:a6:30:
                    42:4e:7d:82:83:3f:13:70:6c:ac:6d:2b:cc:e7:c8:
                    93:a7:19:ff:17:3a:cd:92:f3:cd:b9:54:00:88:c1:
                    fb:8a:3a:a5:7a:0d:36:a3:55:7e:f2:f4:3f:15:8d:
                    9f:0f:1f:41:50:02:64:d3:2d:2c:83:9b:ec:e4:a5:
                    69:59:10:0e:b7:1d:74:9f:23:f6:5e:2a:49:44:89:
                    61:ca:df:d4:03:db:d4:fe:17:ff:3f:83:ac:e0:64:
                    62:26:9b:f6:51:87:97:b5:fd:bf:b3:b2:7e:07:56:
                    3c:4b:fc:3e:6c:cd:20:16:b6:b0:26:25:64:d5:ac:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:74:93:E0:F2:E7:B5:20:88:37:D7:FC:06:BF:3B:ED:A7:24:09:14
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235302e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:9c:5d:f6:86:43:ca:58:eb:71:b6:f6:7e:7d:43:37:a6:70:
         32:37:94:f8:f8:c0:55:37:e5:cf:e7:3a:0d:8c:f7:cf:a7:19:
         4b:a2:e7:f2:f4:ad:de:0b:c3:e0:13:35:6d:21:a6:f5:b9:e1:
         66:2c:b4:87:b1:f8:3f:60:4a:d4:58:14:a9:c0:05:49:f3:15:
         55:cd:6c:61:00:7c:06:2a:12:93:e3:c6:e1:b8:e0:11:63:ed:
         98:79:2a:bd:da:e0:df:08:36:d2:fb:8e:16:22:d4:26:0e:8f:
         e0:66:14:7f:c8:7b:aa:3e:cf:da:c1:54:30:e1:02:dc:1c:4f:
         cb:8d:0b:b3:06:ce:20:eb:c2:a9:00:6f:aa:14:45:7b:79:7b:
         86:99:14:98:df:ee:5a:33:6e:91:5e:91:4a:02:94:c9:89:1a:
         45:3f:45:c2:49:f8:e4:43:e0:4b:f6:52:fe:51:15:b3:90:4b:
         e4:42:e3:e9:e3:ce:d5:1d:91:7b:4d:7f:c6:88:67:b9:7b:f3:
         6f:d0:ac:4a:80:34:f6:0f:ec:c0:05:14:9c:3b:43:8f:7f:d9:
         a7:81:6c:84:40:bf:1b:b0:a6:97:0d:02:80:6a:a3:0f:07:dc:
         ab:4e:86:04:83:ee:79:b6:70:46:60:eb:87:14:78:20:5b:fe:
         d7:af:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 15:58:33 2024 by rpki-client on console-fra.rpki-client.org