Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235312e302f32342d3234203d3e203532343338.roa
File:                     3137392e36332e3235312e302f32342d3234203d3e203532343338.roa (raw, json)
Hash identifier:          Arz79PhI/USjYTgie/SpKwnl/04Qdym1qbv5CqrKYEI=
Subject key identifier:   58:B6:C7:35:56:E6:BA:33:67:04:B4:AF:93:5C:62:63:1D:3D:35:27
Certificate issuer:       /CN=A537F8449EAA5150B4958CB0F49E0C2358347988
Certificate serial:       4C5846B05A08B9457B4535043689BF936B4A69A7
Authority key identifier: A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235312e302f32342d3234203d3e203532343338.roa
Signing time:             Tue 05 Mar 2024 17:40:35 +0000
ROA not before:           Tue 05 Mar 2024 17:35:35 +0000
ROA not after:            Tue 04 Mar 2025 17:40:35 +0000
asID:                     52438
IP address blocks:        179.63.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl
                          rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 29 Jun 2024 23:26:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:58:46:b0:5a:08:b9:45:7b:45:35:04:36:89:bf:93:6b:4a:69:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A537F8449EAA5150B4958CB0F49E0C2358347988
        Validity
            Not Before: Mar  5 17:35:35 2024 GMT
            Not After : Mar  4 17:40:35 2025 GMT
        Subject: CN=58B6C73556E6BA336704B4AF935C62631D3D3527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:b7:c2:84:ed:3c:c5:8f:57:b1:c0:84:64:
                    3b:ec:bb:e5:c0:74:6d:42:56:48:6d:4e:28:60:54:
                    c3:11:e7:f7:16:9d:06:b1:8b:38:71:06:db:6a:85:
                    40:47:bd:1d:f6:4b:53:06:51:60:90:9d:c8:b0:6c:
                    18:b1:97:c2:02:26:19:58:2b:e2:0a:79:8a:db:1e:
                    3c:7d:e8:23:24:ca:10:64:32:03:49:f1:03:0e:94:
                    bf:77:58:f0:94:97:f8:dc:5b:4f:97:c0:53:ed:9d:
                    34:08:50:f4:a7:cf:aa:c0:38:f5:3c:fb:35:3f:ad:
                    b4:68:c8:0d:f5:53:4c:1a:d9:a8:84:02:07:aa:ee:
                    26:9c:c3:61:69:3d:c7:85:51:07:cf:2b:b8:c0:f8:
                    89:77:50:c0:d7:69:1c:5e:fe:eb:d7:ee:e9:aa:9a:
                    45:6f:a3:0e:aa:c8:7c:16:11:47:7d:49:0b:a3:10:
                    f3:62:71:40:f6:42:8b:97:05:8b:6c:8c:ba:52:cb:
                    be:69:d2:52:ad:49:09:18:99:6b:7e:61:97:2a:0f:
                    7a:7e:7b:cc:bf:79:73:bc:30:db:bc:3f:be:1f:cc:
                    dc:f1:e6:65:51:30:84:19:a2:b7:6f:f3:c9:92:d0:
                    b5:e1:3d:7e:62:69:05:3d:1e:60:3b:82:48:a5:63:
                    fc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B6:C7:35:56:E6:BA:33:67:04:B4:AF:93:5C:62:63:1D:3D:35:27
            X509v3 Authority Key Identifier:
                keyid:A5:37:F8:44:9E:AA:51:50:B4:95:8C:B0:F4:9E:0C:23:58:34:79:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/A537F8449EAA5150B4958CB0F49E0C2358347988.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A537F8449EAA5150B4958CB0F49E0C2358347988.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53436176F4917FAF54ECEB37027784BC7A58A4029F883D048E84F416CAC7BB91/0/3137392e36332e3235312e302f32342d3234203d3e203532343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:00:e8:e8:fe:83:34:60:39:10:28:46:a5:a3:25:0d:fc:
         95:a5:f9:e7:b5:e9:1c:d7:63:97:6f:cc:9d:df:02:6f:d8:2f:
         da:97:a9:6f:a3:d9:3b:df:32:ab:c3:f9:bc:0d:9b:cb:6c:61:
         06:c5:1b:2e:e0:a8:10:d8:c7:00:1f:ff:c6:7b:3e:50:2d:86:
         23:a7:7c:b9:53:cb:2c:a0:a1:72:13:4c:db:7b:97:a8:14:c7:
         9e:90:8c:a5:d5:eb:a9:9c:33:74:6e:c1:75:9b:f8:17:87:ca:
         c3:6e:a3:0a:9f:0c:f9:7d:3f:fb:cc:e5:a4:a2:0c:10:ef:83:
         29:43:f5:8f:22:55:f5:19:d8:38:a5:3c:1e:c1:33:1c:fd:d1:
         a4:5d:1d:64:a1:ac:8b:8b:77:41:99:3a:e7:73:14:a6:27:48:
         51:c9:8a:ae:69:9b:fe:98:77:37:96:7e:97:2a:53:f2:f5:ff:
         82:03:44:d4:ba:3f:98:c5:c5:db:cd:8b:26:01:d8:35:65:d6:
         77:cf:ac:a3:4b:0a:3e:53:1a:fe:f7:7c:d8:c9:44:fe:25:35:
         e4:29:c8:9d:df:30:c1:5c:e3:0b:ed:72:47:05:72:f3:0e:a3:
         9e:eb:75:d6:23:5d:43:23:a5:60:d4:7e:ca:03:ed:49:af:25:
         a0:47:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 17:42:34 2024 by rpki-client on console-ams.rpki-client.org