Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3139302e302f32332d3233203d3e203532333639.roa
File:                     3137392e34322e3139302e302f32332d3233203d3e203532333639.roa (raw, json)
Hash identifier:          N8anpWqhH9uoXqE0OO+ZaYdQ7IFxKOZMIwNz2pBKUD0=
Subject key identifier:   1B:56:1D:B0:B1:0C:04:2A:E6:3F:5B:78:DD:16:3B:71:8D:BA:CA:19
Certificate issuer:       /CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
Certificate serial:       2249B6F348D93936D4D810A6A63C5865668D8E03
Authority key identifier: 8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3139302e302f32332d3233203d3e203532333639.roa
Signing time:             Sun 31 Mar 2024 03:25:06 +0000
ROA not before:           Sun 31 Mar 2024 03:20:06 +0000
ROA not after:            Sun 30 Mar 2025 03:25:06 +0000
asID:                     52369
IP address blocks:        179.42.190.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl
                          rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:49:b6:f3:48:d9:39:36:d4:d8:10:a6:a6:3c:58:65:66:8d:8e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84
        Validity
            Not Before: Mar 31 03:20:06 2024 GMT
            Not After : Mar 30 03:25:06 2025 GMT
        Subject: CN=1B561DB0B10C042AE63F5B78DD163B718DBACA19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:3f:4b:4b:29:50:dd:f8:70:12:50:d2:57:a2:
                    ee:f2:31:01:f6:60:e4:a0:b3:aa:e2:1d:86:db:d0:
                    4f:70:48:2f:d7:21:71:19:7b:50:c2:17:26:67:0d:
                    c7:e5:8d:35:ff:75:eb:c8:40:8d:70:4a:f8:b0:91:
                    c0:05:74:f0:c5:f1:dd:96:51:cd:04:36:97:e0:8d:
                    c4:7b:c2:5a:88:f9:6a:2f:72:62:53:6f:9c:c3:28:
                    09:12:28:fd:c4:d9:26:1b:c9:e2:44:a9:de:b5:97:
                    44:34:d4:d1:2b:91:07:4c:c3:a0:4e:eb:d9:db:68:
                    dc:67:43:d7:e1:68:28:d3:5b:bd:e6:6f:95:af:8d:
                    d8:67:38:fa:4c:42:61:e2:76:79:02:e8:bc:7a:b2:
                    87:44:06:4b:0e:62:c4:a5:b9:bd:9c:61:55:f1:94:
                    66:d6:a3:a4:c3:b7:2f:ee:c5:ca:37:d9:cf:c9:f8:
                    22:5b:02:ee:4f:71:e7:e8:bd:ae:d2:30:57:d3:42:
                    f7:56:63:4d:b3:b0:87:1f:77:75:00:93:96:e0:f5:
                    b2:e3:18:a7:2f:db:38:cc:d5:e0:2e:01:2d:51:4b:
                    f8:29:bc:38:f3:64:2e:15:f8:d6:62:c2:40:b3:32:
                    13:30:3c:05:21:f7:4b:e4:27:08:6a:70:ce:8f:c6:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:56:1D:B0:B1:0C:04:2A:E6:3F:5B:78:DD:16:3B:71:8D:BA:CA:19
            X509v3 Authority Key Identifier:
                keyid:8E:F9:C7:D6:5A:4C:BA:F5:D2:1A:15:FA:2C:23:7D:D8:7F:F7:EF:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8EF9C7D65A4CBAF5D21A15FA2C237DD87FF7EF84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/16EC4DBCB1DA866AAF3711262909B1B3D553A9FAE911921268F25962F55D5A1C/0/3137392e34322e3139302e302f32332d3233203d3e203532333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:43:a5:8b:be:ce:76:07:4e:dc:02:8d:89:57:47:e2:37:
         55:4f:f2:e6:a9:6b:45:54:dd:0f:bd:87:e2:e6:20:96:2f:6e:
         38:ad:0c:0f:66:0b:ec:74:2b:b5:2f:5b:32:f2:17:23:cd:eb:
         b2:71:d6:5a:e5:57:75:68:3c:63:91:ab:16:bd:cb:b1:1e:03:
         34:41:ad:83:a9:4f:a1:25:7c:2b:21:b2:f5:bf:48:ce:c1:ec:
         d1:dc:40:37:ac:03:14:96:82:cb:d5:41:0d:9b:d2:28:30:10:
         2b:51:35:a0:59:ed:9b:21:9c:47:66:f8:1b:54:d2:1c:70:6a:
         e1:63:2c:11:06:36:ef:29:3e:f4:e9:bb:85:47:21:29:95:98:
         0d:86:75:d6:b4:0c:e7:5a:57:70:72:8f:71:29:f3:5d:b2:26:
         2e:60:5b:62:d9:68:ac:c1:fd:ff:7e:68:46:1a:c0:a6:33:24:
         45:00:52:4d:17:b2:10:04:e8:8b:c7:07:6c:37:f2:dd:34:d3:
         89:11:5e:31:ac:c2:28:d8:23:b7:f9:af:d0:3e:49:93:32:85:
         15:bc:e0:97:ab:14:00:0c:e4:c0:94:87:95:2f:ee:a2:c8:09:
         dd:be:c0:9e:cb:b4:e2:8c:a8:ac:52:8a:a4:2f:25:fb:28:94:
         07:66:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 06:22:13 2024 by rpki-client on console-ams.rpki-client.org