Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/3137392e36332e33322e302f32322d3234203d3e20323732303432.roa
File:                     3137392e36332e33322e302f32322d3234203d3e20323732303432.roa (raw, json)
Hash identifier:          LHmpiXGfLaQnDgD9X6mdkb62tvnOcdLiTQRTBtcKk4g=
Subject key identifier:   7D:71:A7:C7:E5:A0:39:BC:AD:07:83:8C:1B:A1:BB:CC:8E:CB:11:D6
Certificate issuer:       /CN=5055DAB0774256A9F10CE73FE01C249C78B2C542
Certificate serial:       2350DF180E2E853D9F72EE33042E18A8095C78D7
Authority key identifier: 50:55:DA:B0:77:42:56:A9:F1:0C:E7:3F:E0:1C:24:9C:78:B2:C5:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/3137392e36332e33322e302f32322d3234203d3e20323732303432.roa
Signing time:             Tue 05 Mar 2024 18:16:52 +0000
ROA not before:           Tue 05 Mar 2024 18:11:52 +0000
ROA not after:            Tue 04 Mar 2025 18:16:52 +0000
asID:                     272042
IP address blocks:        179.63.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.crl
                          rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:50:df:18:0e:2e:85:3d:9f:72:ee:33:04:2e:18:a8:09:5c:78:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5055DAB0774256A9F10CE73FE01C249C78B2C542
        Validity
            Not Before: Mar  5 18:11:52 2024 GMT
            Not After : Mar  4 18:16:52 2025 GMT
        Subject: CN=7D71A7C7E5A039BCAD07838C1BA1BBCC8ECB11D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:af:8e:ec:b9:77:0e:4b:55:f1:56:fd:4e:
                    f5:cc:ad:6d:e7:71:c6:65:4a:3d:b9:6e:e4:b9:3b:
                    b2:38:18:3d:5a:b1:3c:1d:37:2f:4d:64:bf:19:fb:
                    26:d5:af:2e:f2:56:af:c2:00:76:ed:45:fe:8a:45:
                    7f:f2:65:77:1f:bf:c7:eb:29:e9:b2:04:d1:d3:b5:
                    49:9c:87:2b:be:d1:52:ea:b8:08:b4:d2:3c:02:e6:
                    1f:d6:3e:f9:a3:8e:d5:b1:67:bb:e8:72:d5:36:61:
                    d8:74:05:00:e9:33:13:eb:d2:28:99:9b:14:f4:95:
                    02:ca:53:e0:c6:7e:cb:57:3a:fa:f5:b5:03:6c:03:
                    08:4d:42:f8:d4:f7:b1:28:b0:03:b0:71:55:80:ec:
                    d3:10:b0:5b:33:d3:8b:29:85:4b:88:c5:14:b9:6d:
                    c5:b1:3d:cf:0e:8c:96:ae:aa:72:5e:bb:7a:b3:e1:
                    f8:7a:9f:e4:7f:90:6c:26:34:bb:bb:c2:59:6f:9f:
                    cb:6c:05:60:58:6e:e8:63:24:00:30:07:fb:86:0c:
                    0e:2e:f1:32:44:56:0d:eb:89:05:c7:21:2a:b3:5b:
                    2c:f4:79:2c:2b:71:f3:6b:7b:57:d6:29:0d:7f:cd:
                    fa:6f:9e:ed:14:e9:aa:ec:d0:c1:09:26:95:cd:51:
                    c9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:71:A7:C7:E5:A0:39:BC:AD:07:83:8C:1B:A1:BB:CC:8E:CB:11:D6
            X509v3 Authority Key Identifier:
                keyid:50:55:DA:B0:77:42:56:A9:F1:0C:E7:3F:E0:1C:24:9C:78:B2:C5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5055DAB0774256A9F10CE73FE01C249C78B2C542.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0E62C70D3B8008D6D0211DC5B644558416854FE719E6F46A2690EF929BB21B8C/0/3137392e36332e33322e302f32322d3234203d3e20323732303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c3:9a:47:95:54:8a:a3:d3:4d:f4:db:43:0d:4f:dd:17:55:a8:
         16:bf:95:ea:b6:45:1f:4e:0a:df:61:d4:8e:45:c4:27:c1:05:
         34:42:61:00:77:b2:35:20:33:49:29:1f:27:7a:a1:18:24:fb:
         96:06:f4:1d:e7:69:ef:eb:a4:d4:dd:09:55:57:d5:72:b6:f3:
         71:c2:d6:17:fb:6a:82:f7:a5:71:05:63:04:5a:8e:ea:85:2b:
         78:7a:da:49:ec:05:f0:bb:15:f3:a6:c6:6c:16:67:6d:3a:3c:
         a6:79:53:77:b6:8f:f3:67:95:9a:15:64:45:1f:11:db:d5:94:
         64:91:d7:79:d5:1b:e1:80:f9:62:e8:0d:74:c2:d3:56:fe:ad:
         a0:c2:3e:c0:9a:35:be:90:72:2a:f4:96:42:e4:9d:a3:cd:c2:
         66:58:bf:dd:21:9e:0f:8c:26:3a:a7:6e:49:70:c9:ae:d8:fc:
         07:cd:72:93:d7:1f:30:16:b4:82:6e:f9:40:53:86:d4:cd:5f:
         23:6b:3b:84:9e:d0:df:fa:6b:a4:13:97:e8:97:8c:1b:60:78:
         e0:a5:0b:57:a6:a5:6d:b1:38:52:35:87:5a:62:ff:f1:3a:60:
         ab:aa:92:83:ab:03:1e:84:b0:9e:b3:ce:4c:51:2c:bd:12:4f:
         c6:de:e1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:47 2024 by rpki-client on console-ams.rpki-client.org