Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa
File:                     3137392e34322e3138382e302f32342d3234203d3e203532333639.roa (raw, json)
Hash identifier:          oUsAUgbN+g4FEinvOnNfXexdT4ltZnhS2NODmx1f3PM=
Subject key identifier:   5E:1A:81:94:63:D3:A9:27:F6:B4:70:DC:5A:4F:EC:4A:94:7D:5C:22
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       225917D8FD4F471DD6779B841E88F27F3177056A
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:10 +0000
ROA not before:           Sun 31 Mar 2024 03:20:10 +0000
ROA not after:            Sun 30 Mar 2025 03:25:10 +0000
asID:                     52369
IP address blocks:        179.42.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:59:17:d8:fd:4f:47:1d:d6:77:9b:84:1e:88:f2:7f:31:77:05:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:10 2024 GMT
            Not After : Mar 30 03:25:10 2025 GMT
        Subject: CN=5E1A819463D3A927F6B470DC5A4FEC4A947D5C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:19:38:ef:d8:ee:1b:53:5c:85:d7:41:71:
                    21:d0:4f:2d:61:d0:0c:e1:82:b3:19:c9:92:24:64:
                    39:95:ba:0d:62:4e:92:9f:7e:e8:c1:ce:34:2e:5e:
                    da:7c:7b:69:9b:f2:8c:47:0f:49:3a:0a:e4:bf:a3:
                    47:dd:1d:4b:b0:19:7b:af:02:2a:45:cc:94:f4:ed:
                    52:37:13:71:fb:3c:1d:66:ff:0e:9b:af:70:87:55:
                    8f:2b:56:ec:6b:17:15:9c:cf:6b:c8:a0:54:87:6e:
                    27:94:f7:79:89:6e:de:fc:10:20:27:fe:78:7a:41:
                    d3:9f:67:67:67:2c:1a:12:23:70:2c:1c:1b:3e:4a:
                    32:dc:39:ae:21:52:e0:3b:90:ab:7d:d6:8c:88:db:
                    99:13:05:49:38:fe:03:8b:c8:5e:8c:e0:f1:d6:38:
                    f8:0f:3d:ec:c6:74:78:a7:56:d1:14:0a:cd:63:b5:
                    74:4b:8f:05:0d:65:4e:45:a2:0b:d9:55:d4:f5:e5:
                    b7:71:2b:41:14:18:b8:4b:06:a7:8f:6f:fd:78:74:
                    e9:39:e8:2e:e0:44:a5:07:13:63:cc:70:64:71:fd:
                    d5:24:5b:84:47:66:f7:65:85:85:af:df:41:66:fc:
                    86:5d:b9:fb:d7:49:0b:50:51:a3:ff:8f:6e:58:66:
                    96:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:1A:81:94:63:D3:A9:27:F6:B4:70:DC:5A:4F:EC:4A:94:7D:5C:22
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3138382e302f32342d3234203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:8d:a1:5e:2a:4e:5b:58:0b:05:18:da:a2:4c:6e:40:b2:24:
         92:9b:61:52:f0:46:2a:76:ba:73:3e:2a:35:9f:b4:9d:91:fd:
         aa:83:b2:81:73:ca:32:99:e0:6f:0d:02:89:98:76:2f:fa:71:
         e5:c7:65:1d:72:1d:f9:2c:5a:0c:75:68:36:fc:cb:98:54:8c:
         36:09:c1:58:23:63:a2:91:52:b7:d6:b7:e5:9c:97:2a:a8:1a:
         19:b2:d8:fa:93:57:89:f8:82:7f:99:8d:cc:04:0b:2d:54:71:
         4e:5a:f0:77:7e:2a:8c:0e:36:7a:1e:a7:21:df:80:b3:02:c6:
         3d:0d:53:24:08:45:4e:fc:eb:42:c0:22:51:fb:10:cc:39:b8:
         e0:20:ab:7e:ec:be:1b:13:f3:c0:37:e4:92:ad:50:97:73:d7:
         bd:61:ed:57:e8:04:d1:66:a1:46:07:c1:2c:ab:55:61:7f:78:
         d9:8b:96:10:51:61:3b:06:e6:f3:82:e4:02:d2:69:81:9e:4b:
         a0:8f:6b:df:2e:01:41:c5:a9:80:3e:c4:28:71:ca:8b:75:ba:
         1a:35:35:b3:11:e5:ab:a2:6f:2f:7b:0a:d0:0c:84:f2:1c:7a:
         a9:ef:20:4a:8c:74:c5:de:d9:eb:52:40:ee:01:19:64:f3:9a:
         29:1d:e0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 05:43:17 2024 by rpki-client on console-fra.rpki-client.org