Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/3137392e36332e35322e302f32322d3234203d3e20323731393232.roa
File:                     3137392e36332e35322e302f32322d3234203d3e20323731393232.roa (raw, json)
Hash identifier:          hg9plxaaoD5LpZZZ+ErGXgp3JZ235if+/AOJ1in7Slw=
Subject key identifier:   8E:D4:35:BC:42:BD:40:DA:5F:4A:7B:F3:83:D3:C5:CE:CB:EB:E6:42
Certificate issuer:       /CN=5E4C24352C2092D84F24710267624723A082F5C7
Certificate serial:       6471DCA5E7C9292D0E1016BB344AFFEFCD6BF5B6
Authority key identifier: 5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/3137392e36332e35322e302f32322d3234203d3e20323731393232.roa
Signing time:             Tue 05 Mar 2024 17:43:11 +0000
ROA not before:           Tue 05 Mar 2024 17:38:11 +0000
ROA not after:            Tue 04 Mar 2025 17:43:11 +0000
asID:                     271922
IP address blocks:        179.63.52.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:71:dc:a5:e7:c9:29:2d:0e:10:16:bb:34:4a:ff:ef:cd:6b:f5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E4C24352C2092D84F24710267624723A082F5C7
        Validity
            Not Before: Mar  5 17:38:11 2024 GMT
            Not After : Mar  4 17:43:11 2025 GMT
        Subject: CN=8ED435BC42BD40DA5F4A7BF383D3C5CECBEBE642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:05:0b:3a:19:7d:d9:bf:82:7c:90:3d:09:50:
                    51:24:65:cf:40:ab:d8:7c:e3:09:a5:f9:cc:13:b5:
                    49:1f:3b:f0:79:9f:de:6e:a4:10:62:96:c7:8f:26:
                    f6:83:75:f7:03:5c:a3:85:c3:2c:42:59:14:d9:72:
                    9a:b3:58:b2:d0:bc:03:88:1a:db:7a:87:5b:a3:5b:
                    f3:33:bf:43:6e:de:b2:3f:04:c9:ae:f0:1e:49:0c:
                    5b:a3:35:6a:40:dc:69:a0:ac:7b:18:06:4b:17:fa:
                    a8:4a:21:68:1a:c9:44:e4:64:87:70:fc:51:38:fd:
                    89:c2:88:3c:0e:5c:09:6d:75:7c:0b:b3:01:13:4a:
                    74:8f:7a:00:ca:26:7f:cf:7a:85:09:a8:ce:15:ec:
                    98:65:61:20:88:6c:d9:95:57:56:94:c2:42:66:8a:
                    62:0a:e1:e0:10:84:d3:17:71:54:61:1e:fc:8b:2c:
                    a2:f0:06:a0:5a:ed:94:70:b6:83:52:eb:03:45:f1:
                    97:a5:71:7a:d0:34:e4:73:11:f7:c0:75:89:b9:8e:
                    73:c7:b3:32:fd:c5:0c:87:88:34:08:eb:e1:61:1d:
                    39:35:3e:c0:2e:b7:53:fc:74:c9:e0:e4:7f:b1:9f:
                    14:99:4f:33:80:88:55:16:1a:8e:2b:a5:dd:25:14:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D4:35:BC:42:BD:40:DA:5F:4A:7B:F3:83:D3:C5:CE:CB:EB:E6:42
            X509v3 Authority Key Identifier:
                keyid:5E:4C:24:35:2C:20:92:D8:4F:24:71:02:67:62:47:23:A0:82:F5:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/5E4C24352C2092D84F24710267624723A082F5C7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E4C24352C2092D84F24710267624723A082F5C7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1EE67D2F647EE12C97E3D7476A35E7ACD02FE6B215BEEDEE61BF1A7CE5CD73F7/0/3137392e36332e35322e302f32322d3234203d3e20323731393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:77:77:45:de:d5:4c:c2:83:4c:b7:9a:b0:d5:be:a2:11:ce:
         71:ad:da:81:54:57:f8:22:5e:66:ec:a3:7d:c7:8c:01:c0:b7:
         51:db:e3:aa:b3:32:c9:6d:46:98:3d:ec:54:cb:18:7f:e6:54:
         b2:7d:4d:77:bf:48:b5:40:0d:c4:2e:15:29:fc:66:00:f7:a7:
         22:fd:71:94:5b:9e:8e:1e:a7:05:c8:a8:85:66:54:55:b1:f3:
         cd:54:19:bc:3d:9a:d3:7b:b4:86:7e:75:fb:06:35:db:93:80:
         01:44:0b:c5:de:7b:59:1e:d9:fe:24:b9:ce:d2:1f:25:9e:b7:
         34:ac:57:a5:d4:15:91:65:0b:e1:39:8c:38:ab:b1:10:4d:54:
         ce:43:f0:51:bc:92:7d:4f:7c:a3:4c:49:85:67:87:67:08:f7:
         ca:9c:6b:fd:f4:34:8b:24:22:83:03:d4:82:ca:db:a5:18:3d:
         6c:d1:92:87:6e:a3:d8:4a:7c:82:81:43:01:74:ec:8c:d9:3f:
         28:e5:99:d3:0b:aa:35:38:05:62:00:d5:16:7a:b7:91:79:5a:
         31:88:b0:15:25:b0:1b:56:e4:33:af:9a:19:e0:0a:97:ac:1d:
         f7:75:bd:3a:9f:bf:f7:89:e4:03:3c:2f:1b:ab:f7:61:dc:ef:
         8c:8f:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org