Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137372e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3137372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          PZLyEvpwGO8sUI/VAD9UBLGKoP4fY4sH+0OSUOlLyzQ=
Subject key identifier:   56:F6:CF:40:8D:14:F2:B6:94:D4:A1:A0:3F:8C:AD:68:7A:D7:BC:4B
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1C4D6D23DA002B44BE79B01D46E8CD81CDAD6294
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:11 +0000
ROA not before:           Sun 31 Mar 2024 03:20:11 +0000
ROA not after:            Sun 30 Mar 2025 03:25:11 +0000
asID:                     52369
IP address blocks:        179.42.177.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4d:6d:23:da:00:2b:44:be:79:b0:1d:46:e8:cd:81:cd:ad:62:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:11 2024 GMT
            Not After : Mar 30 03:25:11 2025 GMT
        Subject: CN=56F6CF408D14F2B694D4A1A03F8CAD687AD7BC4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:b1:3f:d7:9b:1c:f7:98:d5:a4:15:1d:c8:
                    0a:65:ca:ae:b9:10:89:c2:9b:58:d2:12:77:34:3e:
                    73:f9:4e:5c:56:38:c4:d4:21:c3:5f:f5:fd:d8:b0:
                    ac:64:55:69:9e:b2:22:7a:6f:4f:53:37:07:32:9d:
                    45:e7:ce:eb:41:c8:b1:e3:e0:bd:00:51:c1:8d:da:
                    3b:5f:cc:e6:2f:ac:af:5f:94:7a:95:2e:8b:25:34:
                    c3:d7:f8:19:87:f5:8d:6d:71:66:a4:10:74:86:46:
                    01:c6:22:5a:1f:27:e9:77:7c:e2:51:5e:a0:56:e4:
                    e5:49:81:52:03:3a:45:48:b1:d0:a4:45:80:f9:17:
                    a2:4e:6c:a3:54:9f:7b:a0:c9:59:55:c1:70:fe:93:
                    5e:0c:b0:ee:5a:8c:ae:03:c3:41:64:b7:fc:24:6e:
                    8b:98:6a:b6:ce:85:3c:f8:3a:12:d4:70:6e:2d:f3:
                    00:ac:c9:0e:43:aa:ad:d5:46:80:0a:ef:d5:54:f3:
                    0a:89:26:99:7c:53:b6:2f:d3:8f:9c:57:50:4f:5f:
                    c4:6a:70:f9:9d:14:4a:7a:7b:05:8e:f4:f2:d1:6b:
                    9a:38:59:45:70:f5:6b:15:4f:3c:7a:f8:da:62:e0:
                    49:bc:22:e3:f4:23:de:2c:c4:c3:90:2e:00:7b:4d:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F6:CF:40:8D:14:F2:B6:94:D4:A1:A0:3F:8C:AD:68:7A:D7:BC:4B
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:c5:58:8f:5d:d1:a1:d4:1c:cd:ad:94:8c:88:df:ec:08:2d:
         32:eb:cd:d3:0a:27:cd:94:58:9c:16:11:b9:df:5e:57:56:5c:
         5b:64:92:ea:14:4f:5c:90:f7:d6:21:b9:b5:3e:a5:f9:16:6a:
         2b:09:ce:78:31:4e:3b:e0:81:23:4c:f1:46:37:53:46:75:53:
         9a:c8:85:23:c9:c7:2e:c6:b8:a0:80:3d:63:ae:e7:b4:6a:7a:
         03:6e:df:59:5e:e1:a2:d3:78:7e:ff:1b:d3:85:3f:fa:79:5a:
         12:e0:03:e9:36:d7:9e:bf:66:b6:e1:b4:e9:a7:5a:a4:be:82:
         d8:d0:9b:15:15:36:fb:bf:b4:54:6c:88:8a:52:12:7b:29:0d:
         5d:df:74:86:b9:f3:11:00:8d:27:aa:8e:b5:8b:b7:1d:1e:69:
         bb:11:c0:ff:f7:bd:fe:0c:d6:1f:2e:8b:5e:df:ee:c1:44:aa:
         c8:99:15:5a:e9:8e:9f:d5:1f:4a:e7:bf:88:10:0a:ac:a4:a7:
         59:48:ff:d0:6a:e4:c4:0d:bf:b7:65:c5:97:4f:d2:9a:45:c2:
         6d:f8:cb:d0:19:c3:02:aa:83:c9:6f:79:97:d7:51:fe:80:7b:
         f6:26:e1:ce:b2:cc:1c:c0:df:f1:b7:d6:a8:08:14:8b:6c:83:
         61:a8:d1:74
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUHE1tI9oAK0S+ebAdRujNgc2tYpQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVGOUM3RDY1QTRDQkFGNUQyMUExNUZBMkMyMzdERDg3
RkY3RUY4NDAeFw0yNDAzMzEwMzIwMTFaFw0yNTAzMzAwMzI1MTFaMDMxMTAvBgNV
BAMTKDU2RjZDRjQwOEQxNEYyQjY5NEQ0QTFBMDNGOENBRDY4N0FEN0JDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sLE/15sc95jVpBUdyAplyq65
EInCm1jSEnc0PnP5TlxWOMTUIcNf9f3YsKxkVWmesiJ6b09TNwcynUXnzutByLHj
4L0AUcGN2jtfzOYvrK9flHqVLoslNMPX+BmH9Y1tcWakEHSGRgHGIlofJ+l3fOJR
XqBW5OVJgVIDOkVIsdCkRYD5F6JObKNUn3ugyVlVwXD+k14MsO5ajK4Dw0Fkt/wk
bouYarbOhTz4OhLUcG4t8wCsyQ5Dqq3VRoAK79VU8wqJJpl8U7Yv04+cV1BPX8Rq
cPmdFEp6ewWO9PLRa5o4WUVw9WsVTzx6+Npi4Em8IuP0I94sxMOQLgB7TUt/AgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUVvbPQI0U8raU1KGgP4ytaHrXvEswHwYDVR0j
BBgwFoAUjvnH1lpMuvXSGhX6LCN92H/374QwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xNkVDNERCQ0IxREE4NjZBQUYzNzExMjYyOTA5QjFCM0Q1
NTNBOUZBRTkxMTkyMTI2OEYyNTk2MkY1NUQ1QTFDLzAvOEVGOUM3RDY1QTRDQkFG
NUQyMUExNUZBMkMyMzdERDg3RkY3RUY4NC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RUY5QzdENjVBNENCQUY1RDIx
QTE1RkEyQzIzN0REODdGRjdFRjg0LmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMTZFQzREQkNCMURBODY2QUFGMzcxMTI2MjkwOUIxQjNENTUzQTlGQUU5
MTE5MjEyNjhGMjU5NjJGNTVENUExQy8wLzMxMzczOTJlMzQzMjJlMzEzNzM3MmUz
MDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzMjMzMzYzOS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALMqsTAN
BgkqhkiG9w0BAQsFAAOCAQEAjcVYj13RodQcza2UjIjf7AgtMuvN0wonzZRYnBYR
ud9eV1ZcW2SS6hRPXJD31iG5tT6l+RZqKwnOeDFOO+CBI0zxRjdTRnVTmsiFI8nH
Lsa4oIA9Y67ntGp6A27fWV7hotN4fv8b04U/+nlaEuAD6TbXnr9mtuG06adapL6C
2NCbFRU2+7+0VGyIilISeykNXd90hrnzEQCNJ6qOtYu3HR5puxHA//e9/gzWHy6L
Xt/uwUSqyJkVWumOn9UfSue/iBAKrKSnWUj/0GrkxA2/t2XFl0/SmkXCbfjL0BnD
AqqDyW95l9dR/oB79ibhzrLMHMDf8bfWqAgUi2yDYajRdA==
-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org