Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa
File:                     3137392e36332e37322e302f32322d3234203d3e20323732383130.roa (raw, json)
Hash identifier:          YzgqmJpaoMfz0K7B0JhG66ApmPrxLRTGDgNDqQ4vZV4=
Subject key identifier:   61:64:0E:D2:E6:44:C9:27:97:2C:D0:54:D9:3C:36:2F:3A:E3:87:15
Certificate issuer:       /CN=5B867361525607203EC4E746C6F22CC6EB34BE67
Certificate serial:       0D3F257E0CAED474F508251A10C9F17957E455AA
Authority key identifier: 5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa
Signing time:             Tue 05 Mar 2024 18:05:23 +0000
ROA not before:           Tue 05 Mar 2024 18:00:23 +0000
ROA not after:            Tue 04 Mar 2025 18:05:23 +0000
asID:                     272810
IP address blocks:        179.63.72.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl
                          rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3f:25:7e:0c:ae:d4:74:f5:08:25:1a:10:c9:f1:79:57:e4:55:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B867361525607203EC4E746C6F22CC6EB34BE67
        Validity
            Not Before: Mar  5 18:00:23 2024 GMT
            Not After : Mar  4 18:05:23 2025 GMT
        Subject: CN=61640ED2E644C927972CD054D93C362F3AE38715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:db:d1:52:18:71:a6:d9:86:1f:0e:e2:ec:fd:
                    b0:ff:25:b2:b5:ea:77:9a:1d:17:fd:89:d0:28:21:
                    8a:45:64:01:cb:b0:47:67:bb:7b:8c:4c:9a:63:f2:
                    4c:62:70:03:06:c4:4f:62:7b:52:ce:ee:62:47:91:
                    27:78:f0:56:b4:6a:a8:9d:27:27:17:7a:0a:9b:a5:
                    3e:ea:e1:ca:28:3d:3f:75:60:07:fc:3d:59:47:42:
                    a9:21:1c:d3:90:93:20:fc:07:bb:1d:56:5d:49:c7:
                    99:16:c5:62:2d:6b:bf:bb:69:10:36:f3:db:2f:e7:
                    34:98:a1:cd:5b:11:d2:0e:b2:55:3e:8c:0f:79:af:
                    53:11:29:54:a4:d4:56:39:c8:16:06:41:08:6f:e4:
                    9e:ed:60:f0:3c:b3:5e:b8:77:f1:a8:dd:a0:90:03:
                    09:f5:db:10:be:16:bf:ec:85:8b:80:07:ad:f9:3f:
                    20:bc:0e:78:a0:e8:3f:f2:3e:8f:46:bb:34:15:32:
                    2d:f9:89:f6:ef:e3:4d:52:07:68:d9:e5:a8:be:d0:
                    7b:63:82:ed:bf:b1:e4:6b:6a:22:6d:c5:4f:22:7d:
                    0d:20:6e:92:f2:41:96:96:94:ce:cc:75:82:c3:b1:
                    98:38:7c:d8:85:a7:2d:a1:51:c6:ee:b2:53:5d:b7:
                    ab:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:64:0E:D2:E6:44:C9:27:97:2C:D0:54:D9:3C:36:2F:3A:E3:87:15
            X509v3 Authority Key Identifier:
                keyid:5B:86:73:61:52:56:07:20:3E:C4:E7:46:C6:F2:2C:C6:EB:34:BE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/5B867361525607203EC4E746C6F22CC6EB34BE67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5B867361525607203EC4E746C6F22CC6EB34BE67.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2EEDE3F0B0709381269A89F71E2282E0BC6D6FE6FAA6966BB9921B90A1F84DE7/0/3137392e36332e37322e302f32322d3234203d3e20323732383130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:00:66:62:68:51:a5:38:b6:62:ab:f7:09:99:22:47:43:34:
         e5:7c:10:b8:9f:b1:90:3a:28:a2:6b:38:c9:c7:b9:ab:01:70:
         e0:0f:b5:c6:df:c1:3a:28:65:53:1e:60:2c:d3:1e:82:ae:43:
         b9:ab:aa:80:ae:be:d9:36:e8:1d:6b:54:c8:a8:1e:c4:c1:1e:
         8b:0b:20:7d:f5:70:f8:25:4c:5b:2b:aa:0b:f7:02:22:15:c7:
         cb:32:eb:a5:81:cf:17:6e:b6:3f:86:d8:c0:69:dc:3e:60:a2:
         e7:b9:8e:01:70:94:6d:d0:f2:5f:47:0a:6a:93:ec:c8:ff:03:
         71:eb:79:92:b1:20:0c:53:64:66:89:df:3f:41:a7:f9:5d:fa:
         55:5e:63:f9:5d:8b:a1:c6:89:a1:c9:4e:bd:f0:9c:d1:7d:b7:
         c9:ea:47:c3:9c:06:87:1a:94:ed:00:48:f3:58:97:2f:2f:9d:
         f4:af:19:e2:09:9d:2f:ef:81:5c:80:f2:df:ac:82:8d:5b:68:
         71:c1:47:67:71:07:32:73:b9:e5:00:14:53:8f:e8:e4:72:70:
         b1:37:1b:2e:6f:6e:a7:87:2a:2f:8e:77:f7:48:c8:af:d1:91:
         55:60:06:a7:65:a5:b6:ac:76:91:2d:c9:d2:39:74:a9:f8:16:
         7a:79:b6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:07 2024 by rpki-client on console-fra.rpki-client.org