Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/3137392e36302e3234342e302f32322d3234203d3e203532343538.roa
File:                     3137392e36302e3234342e302f32322d3234203d3e203532343538.roa (raw, json)
Hash identifier:          C5mJutZj8ZeY1oz8Pf6IBdAQe8pMHAGmEYESAHJhx6g=
Subject key identifier:   6A:10:62:76:DD:44:81:12:D1:DB:75:75:4B:76:9D:02:C0:18:21:66
Certificate issuer:       /CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
Certificate serial:       3F4F01E9A7F48927CA568D648A732973D58DAC20
Authority key identifier: 11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/3137392e36302e3234342e302f32322d3234203d3e203532343538.roa
Signing time:             Tue 05 Mar 2024 17:55:12 +0000
ROA not before:           Tue 05 Mar 2024 17:50:12 +0000
ROA not after:            Tue 04 Mar 2025 17:55:12 +0000
asID:                     52458
IP address blocks:        179.60.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4f:01:e9:a7:f4:89:27:ca:56:8d:64:8a:73:29:73:d5:8d:ac:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F68518B1162A4FBF29B57C1A80F87FFF477028
        Validity
            Not Before: Mar  5 17:50:12 2024 GMT
            Not After : Mar  4 17:55:12 2025 GMT
        Subject: CN=6A106276DD448112D1DB75754B769D02C0182166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:4d:48:fa:c4:10:c5:59:9e:7a:1f:d3:6a:
                    50:9c:e0:5c:af:ef:3f:b8:77:65:cc:56:89:12:96:
                    b0:4b:70:63:63:f6:31:93:1a:46:28:cf:c6:be:ca:
                    5d:6e:49:55:b1:75:3d:19:dd:4e:c7:ad:77:90:9a:
                    01:79:06:ac:21:4a:ec:1a:f9:bc:ea:09:a8:c2:da:
                    11:4d:3b:fa:4a:e5:9d:90:90:28:64:b3:c2:c5:55:
                    b9:d2:a9:cd:18:5a:bf:26:46:6a:e7:44:e4:ac:41:
                    96:ce:8f:c2:fc:3a:23:4d:7c:5d:db:3b:6c:e7:0b:
                    53:fa:c3:9e:da:a1:2a:a7:d0:30:0a:a0:48:1c:ea:
                    6a:b8:9f:b7:76:8c:ba:45:25:8d:42:83:29:60:6f:
                    fc:cd:5a:66:1f:60:b5:cd:19:8a:01:68:56:7a:26:
                    82:b1:24:7d:bb:90:db:65:8f:a4:c3:72:2b:f8:de:
                    da:aa:8c:99:6d:79:c3:00:82:08:47:c8:e0:e2:4d:
                    60:56:92:72:ae:c6:66:bf:45:d0:62:f4:d3:26:23:
                    b3:85:67:da:cb:b7:3b:7c:b2:90:5d:58:49:9e:03:
                    e5:3d:82:09:d1:d4:10:a8:87:8d:99:a0:69:f0:57:
                    04:37:5a:97:2d:6d:86:db:01:79:ea:45:2c:94:2d:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:10:62:76:DD:44:81:12:D1:DB:75:75:4B:76:9D:02:C0:18:21:66
            X509v3 Authority Key Identifier:
                keyid:11:F6:85:18:B1:16:2A:4F:BF:29:B5:7C:1A:80:F8:7F:FF:47:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/11F68518B1162A4FBF29B57C1A80F87FFF477028.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D35C9A7980523AB7EB047E165C2ABEB389A079423AFE52808D319DAB921C503/0/3137392e36302e3234342e302f32322d3234203d3e203532343538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:57:4d:ed:be:74:03:e4:e6:08:3b:5e:f0:b8:91:48:e5:6c:
         31:1e:df:1e:87:78:21:55:ac:b5:66:2a:df:6b:07:51:aa:47:
         39:71:81:e4:b8:19:9e:a2:da:6c:e7:cb:5a:c9:97:5c:2c:3d:
         ed:c0:2c:15:98:b9:d4:e5:9e:5e:f5:ff:f7:2c:85:c7:ea:57:
         4b:47:7e:ff:fc:1e:8e:00:14:d0:b3:de:14:bf:0b:6a:fc:f8:
         79:90:18:43:27:b7:48:90:d1:81:a0:04:06:8c:85:e6:03:f8:
         69:74:a9:e4:11:b1:df:8c:2b:8c:97:6c:60:39:89:ad:aa:11:
         c4:41:37:ad:cf:27:30:c3:a0:61:0f:1a:59:6a:e8:fc:8e:cf:
         d6:c1:1d:1a:1f:c9:a4:a2:7e:4e:83:5f:19:c9:ea:73:a1:ed:
         de:5c:46:0f:70:86:b6:83:0c:b0:0f:15:35:65:66:a1:78:25:
         11:18:8e:f2:ed:68:bc:d1:bb:a6:bd:60:17:8e:70:5c:57:81:
         6e:21:49:6d:9d:1b:ca:3e:d7:96:96:a4:6f:3e:89:f2:6f:d1:
         47:3b:8c:4f:65:00:c5:53:36:e7:5b:75:c3:80:b3:f7:fd:84:
         d3:39:00:4b:e8:95:bb:78:62:6e:ba:53:8f:65:f0:20:c7:e1:
         75:ce:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:04 2024 by rpki-client on console-ams.rpki-client.org