Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3138302e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          MiZxc5YG4teZ8Y8uRjlx144oGiP2WUvF7u6YN0o9kno=
Subject key identifier:   D6:A0:12:A9:D9:AD:5F:DB:61:9D:88:7C:8C:2A:9A:88:35:B7:45:09
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       1D611EF1D4FDC27A6C26C97A42665810C0347F
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:08 +0000
ROA not before:           Sun 31 Mar 2024 03:20:08 +0000
ROA not after:            Sun 30 Mar 2025 03:25:08 +0000
asID:                     52369
IP address blocks:        179.42.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:61:1e:f1:d4:fd:c2:7a:6c:26:c9:7a:42:66:58:10:c0:34:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:08 2024 GMT
            Not After : Mar 30 03:25:08 2025 GMT
        Subject: CN=D6A012A9D9AD5FDB619D887C8C2A9A8835B74509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:78:30:6e:bf:35:e0:be:e2:53:2d:5f:88:63:
                    da:0c:42:c3:d5:4c:ad:8b:bb:e1:6a:58:b5:6b:92:
                    be:0d:8d:94:04:e3:fb:8c:ff:e1:f4:25:1e:ad:8e:
                    6b:78:b6:ce:4d:c0:9f:4d:5f:9d:51:e9:86:84:df:
                    a4:76:37:eb:4d:88:8a:78:90:f3:d2:7f:ef:6a:aa:
                    20:f0:d9:da:17:45:b8:60:ad:df:48:a5:ce:ed:1e:
                    ff:7e:3d:22:d5:aa:66:ba:20:e4:a9:8e:3a:b4:be:
                    5f:26:64:5f:77:f5:4a:7b:40:e1:f7:9d:d8:27:9b:
                    c7:8a:72:d1:8f:7d:55:1f:c9:dc:5e:95:91:46:77:
                    ca:c2:43:21:fe:ac:03:4e:bb:b3:26:c8:66:e2:f3:
                    bc:02:97:b6:1f:c7:fe:c3:27:9d:89:96:5b:33:7a:
                    4a:89:bd:4f:74:bc:ce:90:31:d2:67:80:c7:c9:2c:
                    c0:f4:54:fd:0b:a0:bc:2e:dd:43:02:a5:8e:69:c2:
                    23:8e:7f:d3:40:fe:45:44:b8:f3:c2:7d:dc:e1:67:
                    f2:a8:3b:1e:91:d9:1b:cb:38:93:68:a6:52:68:1c:
                    41:bc:b1:7d:e2:93:c3:c3:7f:76:cd:be:cd:b0:89:
                    96:0c:c3:b5:9b:10:45:c4:23:5b:0c:40:32:a3:33:
                    99:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A0:12:A9:D9:AD:5F:DB:61:9D:88:7C:8C:2A:9A:88:35:B7:45:09
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138302e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:51:9e:8b:95:6d:b3:fb:6b:4d:66:60:62:4e:f6:15:26:a2:
         47:a9:82:c6:ce:09:f5:6c:f9:8b:fb:f0:b7:04:c4:3f:68:9b:
         06:86:f5:f0:50:81:ec:97:b3:31:5e:f0:28:25:8b:35:b5:c7:
         80:bc:ec:ef:cf:46:7d:4e:49:93:70:7d:9b:ce:97:c1:a1:f4:
         50:99:ff:03:a0:35:33:55:9e:71:fb:e1:26:5a:3c:bd:15:b2:
         c1:cd:99:4d:c5:e8:26:16:4b:e4:6e:88:9b:77:c4:26:6f:de:
         c5:f6:44:63:a4:ba:27:6b:61:bc:a3:c0:82:53:f4:46:b4:c6:
         f1:37:e3:bd:fb:52:2b:de:6f:37:b9:ae:05:7e:2c:f5:ae:4b:
         4e:54:9a:e7:2a:bd:59:f1:72:3e:55:4c:f4:26:ea:94:89:32:
         0e:c5:b3:0c:2f:73:46:57:67:3a:c7:b0:73:40:8e:cb:53:6a:
         7c:bb:ef:11:87:48:94:d4:2c:73:4a:a8:45:60:39:ae:51:66:
         5a:89:39:c5:c3:dd:94:2b:9c:c4:95:4b:28:56:ab:9f:27:6a:
         17:3c:e9:17:77:9d:f8:b1:a6:b0:d5:6e:be:0d:97:bc:38:93:
         76:a7:8e:74:1e:d5:73:fa:c9:14:2e:b4:8d:51:ed:8e:56:8d:
         0b:b7:22:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org