Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138352e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138352e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          Yx+9T3mKp5xGoh/K1kH7GmfSMJWuXzXOrjXqjpkcYnk=
Subject key identifier:   6F:52:A4:5E:12:9A:A9:96:5C:1B:83:F7:2E:74:F9:EE:1F:B7:59:A4
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       44F24B15CF7DD1ECE386D916C07FBB08672830CA
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138352e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:09 +0000
ROA not before:           Sun 31 Mar 2024 03:20:09 +0000
ROA not after:            Sun 30 Mar 2025 03:25:09 +0000
asID:                     52369
IP address blocks:        179.42.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f2:4b:15:cf:7d:d1:ec:e3:86:d9:16:c0:7f:bb:08:67:28:30:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:09 2024 GMT
            Not After : Mar 30 03:25:09 2025 GMT
        Subject: CN=6F52A45E129AA9965C1B83F72E74F9EE1FB759A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:b8:6f:53:69:33:3c:92:1f:90:57:38:cc:
                    40:f5:b5:d5:f7:a2:ba:9c:3a:b6:e8:a5:c0:fd:64:
                    cb:c6:ec:bd:24:a8:f3:1d:aa:fa:de:1f:f5:fd:ff:
                    f3:63:9a:93:25:e2:7f:8f:52:f7:e9:db:02:e7:ee:
                    ee:95:92:94:8a:54:d6:51:7b:27:80:c2:2e:36:a0:
                    ab:5b:a4:96:df:b9:92:93:fe:32:df:4f:5d:1a:24:
                    2a:63:ce:35:94:c7:f5:33:e3:bc:b1:72:df:d0:0c:
                    15:ba:30:0f:df:c0:ae:2d:43:dc:bb:2a:38:39:c2:
                    2b:8f:16:5d:80:e3:ad:47:1e:fd:5e:44:d7:5b:3f:
                    2f:1f:61:95:08:c8:ae:53:a1:31:0c:3a:b6:f6:7a:
                    f4:f4:2b:65:51:66:ae:57:6d:eb:0c:85:76:32:f8:
                    c2:05:2a:c7:a5:20:3d:18:82:6c:87:e2:e2:50:cb:
                    c9:83:b6:1a:97:03:49:6d:07:83:88:a1:e0:de:33:
                    de:3a:15:51:a1:3e:f8:a4:96:91:a2:59:39:48:9c:
                    9c:80:7c:f1:75:36:a8:04:50:aa:11:c2:1d:08:c3:
                    6d:c1:80:f7:bc:1d:65:a4:8d:77:83:0a:2a:68:2b:
                    32:45:0a:5c:56:31:30:6a:49:61:9f:e0:cd:26:33:
                    9a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:52:A4:5E:12:9A:A9:96:5C:1B:83:F7:2E:74:F9:EE:1F:B7:59:A4
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138352e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:42:37:11:01:22:c9:9b:b6:35:18:7c:be:be:4b:fd:8f:a8:
         ca:fc:78:f2:08:63:95:d2:85:34:6b:a3:6f:11:fd:b7:08:41:
         f0:39:c0:72:69:bb:6e:53:63:79:18:81:c6:29:79:1e:08:e7:
         17:fe:94:63:f8:ee:bc:f0:41:b1:61:ce:49:37:10:87:8a:32:
         e6:df:2c:d8:20:4f:0f:d5:b4:99:5d:9b:f8:d4:79:ad:bb:5f:
         90:f7:66:95:99:3c:07:89:81:73:b3:80:dd:92:55:e5:8b:51:
         7f:48:3f:aa:6a:b7:5e:26:f9:4d:f0:fe:6b:68:43:d1:b2:fd:
         eb:73:68:7b:11:06:d1:63:ba:35:7e:19:c8:9d:13:32:4c:78:
         9d:c0:52:ad:51:55:60:8e:49:62:e5:34:1e:f9:ed:87:d8:59:
         2e:38:49:94:fd:ef:30:01:ce:7c:a1:67:d8:62:1d:d5:d7:7c:
         38:b0:ab:3b:ef:4a:95:a6:14:f5:d7:a3:12:86:1c:e7:8f:e8:
         0d:a6:7e:c0:11:2e:86:b7:06:40:78:b5:c2:6e:82:82:f6:63:
         c2:49:c1:d1:f5:35:a2:78:0a:7e:4e:a9:d1:2a:66:f9:b4:32:
         c0:4c:08:83:94:02:3f:96:42:36:bd:ff:0a:fc:c4:43:e1:fd:
         10:53:c0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org