Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa
File:                     3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa (raw, json)
Hash identifier:          aZEvU7t7JlnvvNJHcIAKSSUBHBnlbiRmh3F7KC6Dl8M=
Subject key identifier:   9B:D3:FB:0B:F1:A7:EE:B9:50:BB:90:A5:74:56:5C:19:0C:9D:70:85
Certificate issuer:       /CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
Certificate serial:       077B565FB440D77A8ADBC4DF1E365D002A1B2D26
Authority key identifier: F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa
Signing time:             Tue 05 Mar 2024 17:47:44 +0000
ROA not before:           Tue 05 Mar 2024 17:42:44 +0000
ROA not after:            Tue 04 Mar 2025 17:47:44 +0000
asID:                     263822
IP address blocks:        179.62.224.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7b:56:5f:b4:40:d7:7a:8a:db:c4:df:1e:36:5d:00:2a:1b:2d:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA
        Validity
            Not Before: Mar  5 17:42:44 2024 GMT
            Not After : Mar  4 17:47:44 2025 GMT
        Subject: CN=9BD3FB0BF1A7EEB950BB90A574565C190C9D7085
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:ed:9e:60:81:67:03:f8:9c:6f:88:67:ed:
                    3c:6f:6c:ce:77:57:2b:21:44:47:47:75:f4:c3:4b:
                    29:3b:c6:f1:85:8b:80:6b:56:1c:0b:8c:20:3c:55:
                    2f:6c:0c:51:06:e8:8a:1d:3f:fb:07:b9:bf:3b:b8:
                    11:0d:0d:4f:c5:06:fd:99:5e:a0:f4:a5:48:7e:17:
                    71:16:01:b6:44:92:b8:a8:ee:84:b0:0b:a6:e9:5d:
                    20:2f:2c:a2:9d:69:d9:f3:f5:46:f0:fa:d2:bb:9b:
                    c6:93:f3:00:4c:7d:cc:4f:c9:51:c7:36:a7:73:d2:
                    8d:1e:e2:dd:b9:4e:8d:2d:27:d8:e5:45:f7:b4:6d:
                    e2:f9:c1:ad:61:f4:a9:e0:af:61:cb:bf:75:8a:5d:
                    c5:4a:b6:c0:08:ff:31:f4:1a:63:ea:af:1e:b7:d1:
                    eb:92:92:a1:b1:d9:20:2d:e1:a6:1e:0a:96:70:03:
                    c0:29:49:ff:a4:57:12:1d:c5:94:2e:e4:1e:6b:1d:
                    99:b3:70:08:98:12:29:91:91:9c:b1:5e:b5:73:72:
                    2f:db:1c:a0:6d:7e:91:e3:83:f6:5b:9b:d4:c0:01:
                    aa:6d:8b:71:42:f6:1e:a4:23:57:58:77:b0:14:72:
                    12:43:02:81:9a:0a:8e:c8:f1:fa:80:a6:bd:8c:c5:
                    3c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:FB:0B:F1:A7:EE:B9:50:BB:90:A5:74:56:5C:19:0C:9D:70:85
            X509v3 Authority Key Identifier:
                keyid:F1:C3:5B:9C:F4:5B:DD:AB:E8:29:A9:F7:8B:C2:4D:C5:8A:FD:7E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F1C35B9CF45BDDABE829A9F78BC24DC58AFD7ECA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A8D32DDEB4727A34D781E42F81E3084692E9A32CA02C6C52A5BA410CE190F4B/0/3137392e36322e3232342e302f32302d3234203d3e20323633383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.62.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         67:0a:14:a5:bd:7b:ac:e5:a9:74:f2:b3:be:e1:b8:db:b7:d2:
         ba:15:6e:78:f6:a2:0b:e4:90:d9:eb:35:d2:64:09:0d:ed:68:
         63:c9:d5:fc:71:c5:0a:36:67:50:0e:42:40:79:95:42:64:94:
         17:62:4d:d9:31:2c:ee:96:3c:bd:37:c0:bd:ee:43:67:74:bb:
         a5:33:8e:e2:89:d6:f3:89:24:9c:1b:e8:fe:38:63:f8:a9:f3:
         10:64:a4:89:70:95:5b:45:19:5c:4a:66:7a:ca:02:90:66:96:
         ff:63:5f:82:0b:0a:b5:2e:3a:a0:11:ec:9c:c3:c6:47:c8:7e:
         19:7d:39:12:9a:4c:7f:1c:b4:93:fc:e8:ab:52:dc:f4:4f:8d:
         0a:2f:51:75:cc:51:b0:8b:4b:c2:60:1e:f6:d9:90:47:0e:58:
         38:28:e2:9b:ca:78:48:40:e8:0a:a7:f2:ef:23:3b:0f:1e:8b:
         ee:ed:90:eb:84:79:9a:11:96:f3:b3:e5:9c:62:73:76:e3:d4:
         9b:05:84:19:f4:73:bf:53:12:31:f1:9e:51:f8:9d:e7:68:75:
         e5:3d:63:d4:76:3b:87:3b:8b:53:17:b3:4e:eb:76:cc:f6:37:
         1e:60:3f:80:9a:e9:6b:3f:38:cf:1b:5c:9c:25:c9:e3:0f:4c:
         2b:b4:2a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 16:11:45 2024 by rpki-client on console-fra.rpki-client.org