Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138372e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          kSbi0NqZm5Rd//xjSBRbL2vIS9J26gs5odDtlI8DmWU=
Subject key identifier:   53:FF:EC:AC:BA:17:B6:74:42:12:7F:15:55:EC:C4:98:9B:EF:E1:E2
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       36463C336931163A6BACD61D530B3785BEE5105F
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:01 +0000
ROA not before:           Sun 31 Mar 2024 03:20:01 +0000
ROA not after:            Sun 30 Mar 2025 03:25:01 +0000
asID:                     52369
IP address blocks:        179.42.187.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:46:3c:33:69:31:16:3a:6b:ac:d6:1d:53:0b:37:85:be:e5:10:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:01 2024 GMT
            Not After : Mar 30 03:25:01 2025 GMT
        Subject: CN=53FFECACBA17B67442127F1555ECC4989BEFE1E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4b:f9:4f:d5:31:d2:76:d9:7a:60:db:ab:02:
                    f6:b5:29:98:4b:fe:db:fd:46:da:0e:08:de:3b:0d:
                    d8:5c:30:c5:a2:47:45:71:f3:95:c9:7a:f1:5a:30:
                    2e:a6:3e:95:99:ce:3f:34:73:66:1e:07:e7:c0:e8:
                    7d:ca:51:e9:55:55:fa:85:9e:99:db:fa:63:ad:6d:
                    bb:f2:ed:21:ca:09:d3:de:9b:f6:3f:bd:c3:19:c1:
                    d6:d2:e0:dc:41:91:6a:42:e5:1f:6d:0f:9a:70:6f:
                    29:b4:76:9b:6d:35:a9:88:c7:5d:16:45:9e:a2:3f:
                    8b:d8:98:fc:92:c7:fe:b7:2a:37:f3:95:60:03:b0:
                    f3:4b:c5:04:65:58:f2:6f:36:9f:a6:dc:be:a4:1a:
                    77:cd:c6:08:9f:61:7a:42:5d:e6:d0:a6:5f:8f:c4:
                    89:1f:a6:3b:5a:6a:07:92:71:f8:00:fd:b8:0c:18:
                    2a:30:65:e5:09:2c:8e:39:38:18:8c:db:a1:b5:d5:
                    64:85:78:a4:fa:02:69:2a:69:fe:fc:2e:ac:ac:02:
                    40:d8:65:93:49:c4:fc:43:07:2b:a8:e2:1c:94:e4:
                    8c:7a:41:a3:34:54:03:3b:66:92:85:74:f4:ee:8b:
                    a9:5f:30:b3:12:d9:2a:25:a9:4a:0e:5e:37:da:61:
                    22:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:FF:EC:AC:BA:17:B6:74:42:12:7F:15:55:EC:C4:98:9B:EF:E1:E2
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138372e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:88:59:11:50:db:bf:51:9a:25:5c:ed:dd:9c:c2:c1:41:ec:
         bb:ea:1f:f8:97:53:5c:82:45:f2:04:a0:58:00:9f:69:51:e4:
         df:f9:82:9c:51:e7:09:c4:d7:94:39:11:e6:58:de:63:80:45:
         0d:ac:25:5f:98:1a:32:6a:31:10:c4:2d:42:50:25:4c:89:74:
         8d:8e:2d:60:5d:c7:ca:60:58:41:65:e9:07:04:77:cc:1c:8d:
         63:ac:22:76:4e:bd:00:14:53:db:27:60:6b:12:10:0d:8d:d9:
         e9:c5:55:31:d3:0f:1b:a9:1f:d5:fe:03:7e:70:9f:56:77:e8:
         fe:99:60:78:bf:35:46:45:30:b1:69:ca:f5:25:9d:f1:81:18:
         d3:4b:d3:19:5c:07:4b:1a:2d:6e:98:35:43:e1:c6:52:29:a1:
         54:e8:e6:39:e1:85:a1:d0:97:fe:f7:32:ef:74:56:1b:09:72:
         43:af:ec:1b:d7:c2:4b:f0:2b:2a:ca:78:71:ff:32:74:9f:57:
         3a:0e:8e:24:ca:af:5c:76:21:29:dd:60:44:3b:1e:66:59:a2:
         94:d6:ff:04:02:21:3d:69:0c:84:a5:cb:11:ac:22:7a:83:cf:
         85:5b:4c:06:98:ee:eb:b8:51:27:dd:ee:de:4f:85:fd:67:08:
         d4:c5:1b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org