Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137392e36302e3137362e302f32312d3231203d3e20323633313739.roa
File:                     3137392e36302e3137362e302f32312d3231203d3e20323633313739.roa (raw, json)
Hash identifier:          K0r5ArLh+bPK3JIisb4DIasnobprqthIUnUU1duX+nM=
Subject key identifier:   C4:2B:2A:AD:34:F5:CF:E5:24:AC:6F:1D:23:C7:6E:EA:C0:F5:CB:6A
Certificate issuer:       /CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
Certificate serial:       3E45E33A6B0FF50C3B28DA81509496031E8705FF
Authority key identifier: 01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137392e36302e3137362e302f32312d3231203d3e20323633313739.roa
Signing time:             Tue 05 Mar 2024 17:47:55 +0000
ROA not before:           Tue 05 Mar 2024 17:42:55 +0000
ROA not after:            Tue 04 Mar 2025 17:47:55 +0000
asID:                     263179
IP address blocks:        179.60.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 29 Nov 2024 03:21:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:e3:3a:6b:0f:f5:0c:3b:28:da:81:50:94:96:03:1e:87:05:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01DFCD969398C7D14FA18E44D1649A0B21C96569
        Validity
            Not Before: Mar  5 17:42:55 2024 GMT
            Not After : Mar  4 17:47:55 2025 GMT
        Subject: CN=C42B2AAD34F5CFE524AC6F1D23C76EEAC0F5CB6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:6b:c4:00:71:f2:8e:02:c4:bf:9b:76:84:
                    d4:91:1f:06:54:28:37:4d:19:19:27:dd:85:ca:49:
                    fc:71:46:f8:dc:80:db:48:81:f7:b7:48:f8:df:e1:
                    34:75:05:93:64:5f:7a:9e:3c:4a:ef:cc:fd:38:b6:
                    92:f4:4f:dc:7e:55:c4:39:0e:40:1a:f6:ee:25:07:
                    69:db:a5:c6:bf:fa:fa:46:64:f9:2e:f8:d6:0a:81:
                    cc:50:b2:7f:24:1c:1e:9d:a3:99:43:14:4c:f5:bb:
                    92:29:ae:e7:66:da:3e:d5:b5:e0:fa:30:95:1f:21:
                    b1:7c:7e:3a:f1:81:33:0f:68:cb:21:f7:7b:9e:c7:
                    06:ce:3f:7c:f4:18:be:c6:bd:b8:a8:86:45:d9:05:
                    11:9d:b3:da:59:cf:ed:0a:f5:f1:9a:a6:59:0e:7a:
                    0d:e1:8d:2a:6f:c7:bd:d0:8d:e6:a8:36:e9:e2:4e:
                    aa:63:1f:5d:a3:b0:4d:21:69:e0:10:76:97:99:25:
                    52:71:5c:48:60:f4:e1:94:c5:96:34:ea:98:c8:48:
                    92:18:41:e1:81:be:09:ac:83:d1:d5:b9:d0:ee:2b:
                    dd:38:1f:0a:9b:12:94:39:b8:89:74:9f:10:d9:05:
                    83:5c:ec:ef:ab:b4:6a:58:e7:48:5a:86:4d:1b:e3:
                    ae:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:2A:AD:34:F5:CF:E5:24:AC:6F:1D:23:C7:6E:EA:C0:F5:CB:6A
            X509v3 Authority Key Identifier:
                keyid:01:DF:CD:96:93:98:C7:D1:4F:A1:8E:44:D1:64:9A:0B:21:C9:65:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/01DFCD969398C7D14FA18E44D1649A0B21C96569.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D4A27342A7E1849F8AFC489E93CA3DC3F65B9DCD36B04FD2B584CCD2B805C76/0/3137392e36302e3137362e302f32312d3231203d3e20323633313739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:b8:9e:c3:24:71:80:95:89:7a:8b:c2:e9:0a:09:72:52:8f:
         2c:0c:66:9e:f4:63:9e:20:41:ab:27:5b:0a:f8:f7:c7:3e:18:
         bd:75:79:f5:57:d4:8e:aa:38:90:f6:31:63:fc:f6:b0:b6:05:
         19:f2:d5:eb:50:c6:c3:33:97:f6:ca:b8:48:27:89:a8:9c:6b:
         bb:3c:68:ab:ad:38:6b:37:dd:10:3c:d0:5c:ce:7b:87:e1:74:
         c4:aa:bb:70:4a:84:a9:cd:00:e9:d5:08:c4:2e:34:e2:cf:d7:
         23:89:53:6d:08:f8:76:ca:7e:c8:be:29:49:38:8c:b6:db:a8:
         86:c3:d5:f0:5a:d1:b5:2e:69:73:f7:63:4a:a6:e0:65:af:35:
         fb:83:1e:5e:b2:43:d2:96:0a:bf:70:6a:09:50:58:1e:13:16:
         bb:c9:0b:28:e2:91:f2:a2:82:da:f1:7d:ba:87:cc:ef:e3:c2:
         64:fa:b3:c0:d5:74:05:ae:48:53:1f:e7:bf:4d:f0:83:69:b3:
         cf:5f:e2:0c:63:1e:d5:3d:60:55:80:ba:41:04:45:b2:9a:29:
         9c:d0:51:0c:01:33:df:6f:66:63:88:46:3b:22:3b:6a:ac:28:
         5f:57:c0:0e:ba:47:22:2a:8e:04:0e:f2:a9:62:14:52:0a:cd:
         65:44:3b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:11 2024 by rpki-client on console-ams.rpki-client.org