Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32322d3232203d3e203532343933.roa
File:                     3137392e36302e3232382e302f32322d3232203d3e203532343933.roa (raw, json)
Hash identifier:          USdiBMIWIHYKZ58sVFM+LAV1fP7KYJKeLiakIi6dYec=
Subject key identifier:   7D:C3:F1:49:36:64:0C:07:29:B7:A2:5B:95:CC:9F:75:B8:E7:9D:F6
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       497C0B1415155B32ECC3E1A8DBD95494411DE811
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32322d3232203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:36 +0000
ROA not before:           Tue 05 Mar 2024 17:36:36 +0000
ROA not after:            Tue 04 Mar 2025 17:41:36 +0000
asID:                     52493
IP address blocks:        179.60.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7c:0b:14:15:15:5b:32:ec:c3:e1:a8:db:d9:54:94:41:1d:e8:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:36 2024 GMT
            Not After : Mar  4 17:41:36 2025 GMT
        Subject: CN=7DC3F14936640C0729B7A25B95CC9F75B8E79DF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:4e:2e:d5:d9:1e:c2:b3:7f:96:5b:3d:65:
                    60:96:d9:55:d0:17:5c:32:8f:24:95:e6:c9:0e:be:
                    c1:13:c0:0b:c1:62:c5:97:69:0e:1d:fa:06:89:cb:
                    ae:7d:e2:95:af:00:ff:e4:e1:fc:73:43:83:43:fe:
                    ee:cc:7a:2a:cc:ff:82:f9:97:f3:b0:b4:45:52:16:
                    31:90:f5:6e:8b:aa:fb:7c:48:f6:b3:87:65:d5:98:
                    ed:b5:28:74:f5:73:2e:c3:9d:43:92:ac:71:95:78:
                    ad:07:fa:14:46:1b:8f:99:89:40:fb:93:4a:fd:01:
                    5d:a5:c1:e4:cf:d3:71:33:62:46:26:86:75:59:1d:
                    9d:f4:10:2a:7f:70:22:75:0e:84:63:02:43:74:d5:
                    d2:71:85:9c:76:30:67:48:e8:b4:5f:3c:2f:78:22:
                    3e:36:25:42:a1:03:3b:5b:ab:f3:d7:68:f5:46:70:
                    c2:42:6b:6d:c9:5f:44:3b:04:9d:0e:42:a7:8e:58:
                    c4:38:bc:8d:c3:b7:01:85:1f:93:cf:95:04:71:87:
                    22:60:69:81:d4:30:62:7f:7e:82:c2:15:9a:a2:2b:
                    a0:1b:66:9e:7f:89:d8:f5:ee:b2:db:23:4e:8c:64:
                    d4:88:0e:d4:f2:42:75:e9:4b:be:d9:f8:49:e5:28:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C3:F1:49:36:64:0C:07:29:B7:A2:5B:95:CC:9F:75:B8:E7:9D:F6
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32322d3232203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:09:1b:04:5c:cb:d3:7e:34:f1:79:fc:73:7f:d8:ca:1d:
         df:76:94:cb:21:4e:86:77:d6:8a:42:ef:1c:93:3b:42:8c:d0:
         66:46:5f:cb:08:7c:d3:84:d8:65:f0:b7:bb:bc:b4:2d:11:ee:
         59:ac:81:5f:33:61:48:48:9e:fd:ee:0e:67:a6:5e:12:da:99:
         da:15:f7:98:93:97:ea:3c:52:bb:34:3d:72:23:fc:2e:50:b0:
         4a:81:81:1f:74:eb:02:4d:f5:71:de:62:e1:0b:26:07:84:91:
         a5:1c:cb:0e:35:63:cf:b7:29:58:9e:99:5b:c5:d3:18:26:b7:
         c1:7b:4d:44:c8:be:f0:82:31:b2:1a:92:47:72:4a:43:ba:56:
         70:52:b5:fb:07:49:2e:3d:29:8d:0e:d0:f9:db:1c:24:a1:56:
         c9:54:27:86:5c:92:dc:9a:c2:d3:75:b5:52:a5:1a:87:63:68:
         08:f3:c9:e0:ab:8a:69:e4:35:00:17:f0:1d:14:ca:cb:d8:3c:
         a0:dc:93:b5:fb:3c:cd:56:24:74:3c:d9:1a:d1:9c:37:b7:90:
         53:39:c2:19:1f:74:9e:a6:f1:fe:40:e5:88:88:5d:4f:e2:b9:
         ef:ff:eb:58:fa:e1:98:ce:90:3e:30:8a:6d:f2:25:8a:9e:06:
         e6:5d:ae:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org