Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa
File:                     3137392e36302e3136382e302f32312d3234203d3e203134353933.roa (raw, json)
Hash identifier:          GqVN/Vl/OADLUvNr5aD73Sw4B1Au3mBu0V95xzgwuFM=
Subject key identifier:   0F:25:23:3F:72:08:A5:F0:29:31:E9:4D:09:87:2B:96:3A:E4:9D:96
Certificate issuer:       /CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
Certificate serial:       4F9BD2D54097A63AEDF111158A8C5DE97F39839C
Authority key identifier: 15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa
Signing time:             Tue 05 Mar 2024 17:59:04 +0000
ROA not before:           Tue 05 Mar 2024 17:54:04 +0000
ROA not after:            Tue 04 Mar 2025 17:59:04 +0000
asID:                     14593
IP address blocks:        179.60.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:9b:d2:d5:40:97:a6:3a:ed:f1:11:15:8a:8c:5d:e9:7f:39:83:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15DA171D5AE09E55A7280DC227610D82A2AB0356
        Validity
            Not Before: Mar  5 17:54:04 2024 GMT
            Not After : Mar  4 17:59:04 2025 GMT
        Subject: CN=0F25233F7208A5F02931E94D09872B963AE49D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:74:0a:2b:fe:05:ea:14:68:2f:9c:5b:52:
                    95:50:6c:3b:97:7e:e4:e3:d3:c2:e4:7b:58:63:1f:
                    1b:bb:5b:f5:39:47:45:97:b4:00:d2:1e:93:a0:d7:
                    ba:87:bc:a9:84:99:6c:30:1c:1c:83:a5:68:71:89:
                    67:65:f3:c3:3f:f3:de:9c:8b:d2:e1:8e:5e:1c:0d:
                    f5:37:49:79:83:55:82:7d:50:86:78:49:18:68:22:
                    21:ed:d2:d5:e0:5c:e1:eb:37:03:4b:36:e0:60:80:
                    b3:72:93:34:4d:ed:2d:9d:be:e1:7c:dd:64:f7:4d:
                    a8:ff:af:e5:62:3d:26:60:9a:ec:5c:25:61:93:a7:
                    17:ab:5c:df:4c:2e:4b:d0:a1:de:21:ca:9d:1a:f1:
                    3a:65:f3:98:9d:d1:04:cd:32:44:2f:21:c2:29:44:
                    a2:0e:b3:d2:73:7b:e1:94:ff:6f:e7:59:d5:35:2a:
                    e9:49:19:ac:92:df:09:26:77:61:8f:6e:84:0f:80:
                    33:e1:25:94:67:f2:c1:a8:08:96:9f:f4:cb:e8:80:
                    a3:48:82:9c:9b:16:ab:aa:b6:d0:17:a0:53:13:7a:
                    c5:03:5c:00:da:04:6a:0a:5f:dd:0a:3d:be:a5:5d:
                    17:9a:9a:ae:a2:d2:b6:b5:f7:29:b1:8d:41:bf:5b:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:23:3F:72:08:A5:F0:29:31:E9:4D:09:87:2B:96:3A:E4:9D:96
            X509v3 Authority Key Identifier:
                keyid:15:DA:17:1D:5A:E0:9E:55:A7:28:0D:C2:27:61:0D:82:A2:AB:03:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15DA171D5AE09E55A7280DC227610D82A2AB0356.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0D8377B8F810E69B1E6DE3F229848AB344FB7864942F76CCCCBE5C256B23D6BF/0/3137392e36302e3136382e302f32312d3234203d3e203134353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:7c:8b:b4:fb:49:5f:a8:07:06:49:f0:59:8f:6f:ca:4a:5e:
         54:73:6f:cc:33:ce:2f:cc:47:90:32:f7:d4:a5:65:b5:b5:76:
         59:42:e1:6b:82:fd:70:b9:db:33:85:80:b9:bf:86:a1:df:f4:
         7f:bd:62:33:96:15:f9:75:64:fe:00:8b:7c:da:f5:10:0d:98:
         97:90:98:30:3b:1f:2a:a9:cc:98:ab:2f:e7:6c:16:86:c3:3e:
         b0:af:36:53:70:0b:8d:46:f1:85:53:1f:9e:2b:b6:1b:6c:43:
         5d:72:b7:72:1c:4b:4f:30:63:8f:bc:b5:c5:9e:7e:43:02:86:
         dd:e6:75:7d:00:e7:48:39:18:5b:ef:ec:15:f6:13:69:f3:55:
         6a:ec:84:13:4b:90:2f:1e:be:ab:56:84:3e:4c:fe:f1:7d:12:
         b2:48:c8:49:16:c9:c4:bb:2c:25:0d:8a:73:36:d8:a6:9e:25:
         72:cf:80:86:63:10:e3:9f:ce:cf:a7:94:4a:1c:5d:a0:77:8b:
         05:5c:50:c1:63:ae:ab:ee:9f:f1:91:e2:10:00:fd:da:d9:8d:
         fe:3f:07:af:f2:90:b7:78:e2:d4:6a:91:90:98:77:2f:cf:92:
         7d:55:bc:c3:42:7c:ea:df:74:62:4a:53:b4:46:e0:bb:37:a7:
         c8:46:6b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 13:43:34 2024 by rpki-client on console-ams.rpki-client.org