Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3137392e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          Src3EeF2IDYR4yrqQykeG244IyHzvr04+KIeOQx8xmc=
Subject key identifier:   6E:17:5E:A5:7B:4A:1D:67:63:C9:EF:AC:49:5F:17:FE:94:51:4B:80
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       2CEE5C0F9F482AFF1C77F67CA6861A518287D502
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:02 +0000
ROA not before:           Sun 31 Mar 2024 03:20:02 +0000
ROA not after:            Sun 30 Mar 2025 03:25:02 +0000
asID:                     52369
IP address blocks:        179.42.179.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:ee:5c:0f:9f:48:2a:ff:1c:77:f6:7c:a6:86:1a:51:82:87:d5:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:02 2024 GMT
            Not After : Mar 30 03:25:02 2025 GMT
        Subject: CN=6E175EA57B4A1D6763C9EFAC495F17FE94514B80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:e3:62:c0:b9:d3:90:4f:b0:54:bb:6f:37:
                    85:9f:94:7e:cc:be:58:f6:e4:e7:17:2e:61:d9:4e:
                    f8:99:c2:ae:8f:e5:5e:5b:ff:89:66:2c:eb:9e:8b:
                    e5:0a:9e:ad:10:47:7d:e0:27:e9:b0:25:ef:fb:91:
                    27:8a:6d:9c:ee:6e:a5:5a:de:90:55:fa:d5:e8:d9:
                    25:74:73:70:d9:4f:fb:cc:15:73:c6:bf:df:cf:71:
                    ef:41:a9:ff:c1:32:94:85:e7:c8:d6:1b:96:16:d6:
                    26:24:29:df:d9:f5:5b:3a:aa:6b:80:46:f1:be:bd:
                    fa:06:70:d4:c8:af:df:0a:08:c2:94:04:30:8e:1e:
                    54:26:41:bc:ee:14:f1:27:dc:fc:20:62:a2:a5:7f:
                    cd:c7:6b:6f:fe:1e:6a:ef:3f:41:02:4f:be:5f:fd:
                    51:8f:a9:72:ee:9d:c0:cb:ec:1f:f2:60:63:32:42:
                    95:88:44:24:45:bd:5e:97:95:32:4b:df:d2:55:69:
                    60:a9:ed:11:6f:c6:47:39:61:17:e2:b0:fd:f4:6d:
                    84:1c:0d:83:be:a0:94:44:29:23:7d:62:bd:20:46:
                    73:09:45:87:22:23:76:c2:d2:4f:59:4a:37:d2:54:
                    c9:15:69:cd:94:ff:dc:ab:b7:2f:42:a9:a9:25:6e:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:17:5E:A5:7B:4A:1D:67:63:C9:EF:AC:49:5F:17:FE:94:51:4B:80
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3137392e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:dd:54:5a:d5:72:e2:5c:54:47:6d:f4:73:53:b8:d1:76:42:
         7c:69:85:77:e0:c2:70:2c:fb:98:6c:ec:82:06:ca:f9:3b:bc:
         79:5d:1b:3e:34:cc:a6:30:00:84:8e:7d:4e:c1:ee:0f:d3:0f:
         88:a7:0f:82:4d:7e:9e:d7:9a:ac:1e:8a:75:6b:a5:e4:30:4c:
         a7:8e:29:59:2e:11:a1:af:12:16:8d:30:f3:01:2f:ba:ae:93:
         f5:fd:92:ba:5a:0c:c6:a5:ac:b4:65:63:f4:93:b8:19:8f:58:
         47:10:c3:1f:50:72:8c:5f:56:02:fd:d2:61:e1:77:bd:ed:b6:
         92:86:ea:fe:89:11:e1:0b:71:95:1a:bb:12:f4:14:62:5e:55:
         20:38:08:b4:bf:10:55:53:3e:14:76:04:11:84:9c:5c:f5:48:
         0f:47:6f:82:5e:3b:65:49:a0:0d:6c:79:26:c1:22:95:5a:da:
         3c:08:6c:0d:52:74:f3:0c:d2:64:e4:a7:90:52:f1:2f:dc:14:
         7e:63:2d:5e:c4:66:c9:78:4a:21:ba:f0:46:4c:11:ac:31:5e:
         3a:a7:01:91:33:93:34:9e:1f:e8:77:08:d3:25:c2:d5:87:96:
         6b:a1:6b:35:dd:c5:05:27:7b:36:19:bd:f8:44:1d:3c:fa:3d:
         63:f3:c1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org