Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3232302e302f32322d3232203d3e20323634363430.roa
File:                     3137392e36332e3232302e302f32322d3232203d3e20323634363430.roa (raw, json)
Hash identifier:          2sappf+OD6iKM0UbZ8eIZstHr96j8ycjyhjOevJZl/A=
Subject key identifier:   5D:FC:9C:39:AE:DC:14:B5:2F:01:81:4E:0E:55:EB:57:CA:C9:B3:85
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       61767795EBBDE7653776FD5BF56BF647DA019C8D
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3232302e302f32322d3232203d3e20323634363430.roa
Signing time:             Tue 05 Mar 2024 17:52:43 +0000
ROA not before:           Tue 05 Mar 2024 17:47:43 +0000
ROA not after:            Tue 04 Mar 2025 17:52:43 +0000
asID:                     264640
IP address blocks:        179.63.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Jul 2024 19:59:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:76:77:95:eb:bd:e7:65:37:76:fd:5b:f5:6b:f6:47:da:01:9c:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: Mar  5 17:47:43 2024 GMT
            Not After : Mar  4 17:52:43 2025 GMT
        Subject: CN=5DFC9C39AEDC14B52F01814E0E55EB57CAC9B385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:db:29:80:88:dd:dd:78:71:48:70:24:2c:0b:
                    ce:72:bb:77:9c:5c:f0:09:d1:d7:89:1a:b5:18:a3:
                    58:aa:85:af:b0:9b:e8:c8:e0:ba:78:87:01:fb:87:
                    2c:71:c4:bb:90:4b:09:27:cc:61:77:5a:ab:7d:05:
                    aa:a1:9f:73:ed:7f:60:bb:bf:a6:9b:66:56:5e:f8:
                    fe:17:51:17:aa:9c:3e:6a:4d:0f:f8:ea:d8:d6:b6:
                    96:20:6b:41:69:e0:ee:59:2c:60:62:9c:6f:e1:23:
                    c1:f3:2a:ea:87:6f:21:3f:d5:8c:8d:17:cb:f5:3a:
                    86:0e:08:4c:0d:04:43:83:01:d4:92:93:53:c8:61:
                    35:cc:a4:29:de:a9:72:5d:79:90:32:0b:82:8a:f2:
                    42:04:eb:1c:0c:ce:fe:8c:62:1d:75:66:a0:b6:9f:
                    29:e9:b5:6b:d3:c1:48:e3:11:27:66:11:c9:f4:c2:
                    99:64:04:0e:82:ad:49:cd:8e:6e:5c:fd:5b:fe:de:
                    ce:46:76:24:a0:9a:3e:7a:0b:6c:89:a2:c6:23:59:
                    c7:74:39:86:2d:1a:9e:5b:57:cc:f3:16:06:0a:8d:
                    5d:ba:84:02:8b:db:74:25:0b:65:45:b2:62:c8:65:
                    e9:4c:dc:40:39:f0:7d:79:6d:60:6f:55:32:aa:70:
                    7c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:FC:9C:39:AE:DC:14:B5:2F:01:81:4E:0E:55:EB:57:CA:C9:B3:85
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3232302e302f32322d3232203d3e20323634363430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:da:af:8f:3e:95:10:de:79:88:78:32:9e:14:7e:29:0a:46:
         a2:5c:df:09:ef:d2:6d:bf:07:e4:ee:6d:d6:f7:43:e0:92:d2:
         e7:e9:79:04:66:03:17:17:98:56:e0:22:76:f3:5d:8e:93:88:
         d6:bd:fa:4c:b6:55:22:1f:73:70:e3:e4:99:e5:d1:c9:37:26:
         52:d7:8f:af:53:42:ca:19:44:0d:98:9d:f4:86:bd:fa:a4:fb:
         99:3d:bb:09:31:06:bb:35:9e:cf:35:b1:dc:45:95:eb:99:36:
         2e:bc:6c:50:9e:2d:39:4a:13:0e:db:77:ef:2f:0b:f4:d4:33:
         52:9a:52:ab:2c:80:e6:08:d7:c9:a6:f4:4d:bf:53:96:02:48:
         57:54:94:52:e5:b9:bc:39:82:8b:a9:5d:27:0a:78:7c:f4:78:
         2d:42:87:6a:8e:43:63:19:06:83:ac:72:50:cd:d7:18:ba:22:
         89:1e:0c:e3:b9:80:91:cb:86:a1:f2:25:61:79:83:72:40:f1:
         32:c0:90:81:0f:ae:54:ff:9b:e9:f8:2e:0c:2f:45:f5:03:bf:
         8e:ce:b7:60:b5:ed:12:ab:4f:63:c5:f4:2b:42:62:5b:bb:cf:
         21:69:66:9a:61:94:9d:7a:01:4c:09:7e:25:b3:a1:0e:50:04:
         4a:98:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 07:57:59 2024 by rpki-client on console-fra.rpki-client.org