Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa
File:                     3137392e36312e382e302f32322d3234203d3e203532353033.roa (raw, json)
Hash identifier:          HSGYdnu2if8gExcx6AEMn6vZuVWgoX5LPCppCu6rhtE=
Subject key identifier:   93:AE:A4:35:B4:8A:93:BC:21:36:90:66:7A:4A:92:12:4B:98:D8:A2
Certificate issuer:       /CN=FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063
Certificate serial:       32872B344C9DB1D494EDBDB65F9ABBE466E421A9
Authority key identifier: FC:BB:CB:41:FD:2A:93:EB:EB:18:4D:5F:94:74:CD:CC:32:19:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa
Signing time:             Tue 05 Mar 2024 17:43:35 +0000
ROA not before:           Tue 05 Mar 2024 17:38:35 +0000
ROA not after:            Tue 04 Mar 2025 17:43:35 +0000
asID:                     52503
IP address blocks:        179.61.8.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:87:2b:34:4c:9d:b1:d4:94:ed:bd:b6:5f:9a:bb:e4:66:e4:21:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063
        Validity
            Not Before: Mar  5 17:38:35 2024 GMT
            Not After : Mar  4 17:43:35 2025 GMT
        Subject: CN=93AEA435B48A93BC213690667A4A92124B98D8A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:7a:d7:6f:84:1c:c9:ff:cd:41:e8:40:45:
                    59:fe:a9:69:40:ea:5d:c6:ad:07:97:f0:07:7f:2c:
                    ad:63:5a:2c:51:e2:34:6b:36:1d:76:eb:2f:64:fe:
                    1a:2f:9a:c5:42:ac:14:9e:14:3d:23:fd:5a:d2:bd:
                    50:6c:61:66:76:ea:8f:8c:a2:91:73:15:d3:6d:bc:
                    95:fc:ad:00:89:d4:60:79:f8:ca:b5:41:1f:55:b7:
                    5f:a8:3b:45:b7:04:10:5e:19:ff:34:15:c8:1d:16:
                    a2:6f:77:eb:2a:6c:21:e1:81:de:5f:ec:8d:03:f6:
                    c1:8d:c4:6c:50:13:e9:1d:9f:ec:20:7a:f8:87:82:
                    c9:df:94:a2:0c:d9:d3:ea:75:db:ce:ce:19:4f:ab:
                    de:1b:ea:d3:ab:3c:1f:45:4d:2e:c1:01:1a:33:8f:
                    d3:25:4f:4d:23:fb:73:c9:e3:1b:91:d8:3c:64:ea:
                    de:f9:a0:9c:f0:19:55:c6:1b:03:b5:a7:e5:b0:3f:
                    04:d8:8f:fc:37:35:fe:50:6d:5f:2d:5a:5b:49:67:
                    59:c2:ec:aa:a0:38:90:5e:06:ca:9f:04:96:7a:40:
                    17:ac:69:cc:4d:04:d8:a7:34:23:f6:0c:04:18:b9:
                    55:42:94:55:62:b4:19:8e:a1:09:2c:3e:f9:25:9f:
                    d4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:A4:35:B4:8A:93:BC:21:36:90:66:7A:4A:92:12:4B:98:D8:A2
            X509v3 Authority Key Identifier:
                keyid:FC:BB:CB:41:FD:2A:93:EB:EB:18:4D:5F:94:74:CD:CC:32:19:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FCBBCB41FD2A93EBEB184D5F9474CDCC3219A063.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1CF412F906E0C1844A50BFFA758BECCE09DFE36D4B34EABB84C53BBA178BFFF7/0/3137392e36312e382e302f32322d3234203d3e203532353033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:cf:cf:18:16:dd:7c:f0:c7:a5:a0:9c:e7:f9:3d:a9:e1:69:
         83:0f:28:d9:24:36:f1:48:bb:d4:80:9e:79:cb:49:25:e0:8d:
         12:41:f0:1e:97:15:c9:b8:14:a2:a0:54:d3:bc:0b:be:f0:02:
         2a:75:ef:2a:7c:52:dd:53:ab:d8:8f:fc:8e:77:8f:ad:a6:79:
         f7:23:c3:fb:5e:28:0a:09:c4:94:2f:52:6f:0a:bd:1b:e3:2d:
         79:18:d9:4c:8e:7e:cf:e3:81:9d:a3:c8:21:80:32:5b:63:61:
         a8:aa:e8:11:f6:a4:f7:43:af:a3:f9:8b:5d:f8:e1:28:7d:6c:
         95:2d:58:b9:37:43:b3:11:b1:c3:d9:ba:b2:22:e8:03:49:80:
         70:6b:af:d9:ad:39:07:9d:94:61:51:b9:9d:a4:8a:bf:2c:da:
         18:0f:2c:55:1a:b9:a2:4d:3f:28:cb:3f:56:f3:5d:90:ac:9c:
         ac:ec:4d:10:99:c2:0a:8c:ea:f1:a6:c4:1f:c6:50:8c:3d:79:
         d6:19:b9:73:02:41:71:8d:a0:f0:e3:d2:fe:25:2e:13:9c:79:
         e4:34:1e:46:34:20:be:ca:3b:f2:d9:49:b9:80:99:52:d2:13:
         29:29:f4:2c:12:95:ad:83:1c:b7:af:1d:ca:c3:63:27:04:a8:
         b4:32:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:58 2024 by rpki-client on console-ams.rpki-client.org