Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa
File:                     3137392e36302e3232382e302f32332d3233203d3e203532343933.roa (raw, json)
Hash identifier:          b60NrSBQcjwqWNyx0ErVxBTXmxPqHLyAf3nInMDTqT4=
Subject key identifier:   AB:E6:42:F9:71:6B:0C:E6:BF:40:FF:97:E3:06:D2:75:D0:00:77:57
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       20E956050B800A1CC138DE18648FAFEACC8A0DE4
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:33 +0000
ROA not before:           Tue 05 Mar 2024 17:36:33 +0000
ROA not after:            Tue 04 Mar 2025 17:41:33 +0000
asID:                     52493
IP address blocks:        179.60.228.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e9:56:05:0b:80:0a:1c:c1:38:de:18:64:8f:af:ea:cc:8a:0d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:33 2024 GMT
            Not After : Mar  4 17:41:33 2025 GMT
        Subject: CN=ABE642F9716B0CE6BF40FF97E306D275D0007757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:9a:1f:b4:90:5f:e2:2e:2a:bc:8f:80:21:
                    11:f4:29:a6:e4:8b:2b:4b:05:05:90:56:80:7d:ab:
                    5f:c8:5e:48:0d:90:3f:8a:f0:8a:9d:11:a8:e8:1a:
                    bc:cf:c4:46:6a:1a:78:a2:8c:a1:52:51:18:06:7a:
                    a3:70:8e:78:30:68:2d:de:13:1d:9d:6e:37:8d:a0:
                    25:ef:2c:3c:b1:97:44:e7:f5:3a:0b:7f:82:81:00:
                    50:b2:77:e5:27:3c:5e:7d:6f:ea:9c:24:d5:2f:bc:
                    d4:56:ed:9e:52:f3:c6:ce:54:c2:44:20:28:3d:b0:
                    d0:65:86:ed:b4:a6:42:d9:90:b6:f6:35:97:95:a0:
                    32:a6:77:f6:89:4b:59:a3:e8:f3:46:d2:c7:aa:2d:
                    9f:8b:2a:7e:37:58:f1:6b:60:d6:f6:49:01:7f:41:
                    10:2c:1a:5f:2c:53:e3:7f:5b:e0:c0:13:7f:95:9a:
                    31:7d:f8:2d:b2:3e:de:75:19:4a:54:02:88:3d:30:
                    f0:a4:69:69:cc:13:a9:fb:37:96:52:90:e4:0c:5d:
                    74:38:28:c8:3f:83:24:ac:62:15:d2:53:34:a4:07:
                    93:84:54:9b:92:9f:1e:0c:f4:d8:2c:31:c3:b0:89:
                    60:42:59:82:24:02:11:f1:57:60:27:78:7c:f0:5c:
                    d2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:E6:42:F9:71:6B:0C:E6:BF:40:FF:97:E3:06:D2:75:D0:00:77:57
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232382e302f32332d3233203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:d4:5f:0a:b0:c9:e8:48:11:77:e8:cf:9a:b9:a5:7d:00:
         c9:da:c6:01:a5:c7:a6:c4:bf:3b:3c:57:dd:ec:5a:5d:7b:85:
         a8:d7:9a:1a:53:52:37:23:7a:73:65:51:92:b0:03:82:99:fe:
         5f:7f:ff:8f:ea:1b:df:dd:2f:b0:c2:47:b7:93:fe:49:df:22:
         77:84:ce:f7:f5:5c:60:2d:5a:8b:19:4f:a1:3d:99:35:25:4c:
         ae:92:87:c7:c6:15:ad:1b:5a:75:b4:01:62:49:d9:50:d1:06:
         2d:4f:be:55:40:ed:6e:09:c3:ba:0e:fc:e6:06:57:f3:2c:4f:
         18:4a:e1:4b:0c:f2:f1:28:e8:30:1f:8f:71:33:12:77:cf:75:
         28:fe:b2:16:7b:c5:4e:a2:4b:22:1d:ad:94:30:f4:aa:4a:4e:
         35:24:03:f7:3d:99:6b:c6:cd:da:77:47:d5:3f:23:f2:d8:72:
         48:03:52:1b:06:27:66:66:ae:d3:ba:4f:0a:a5:46:a0:45:11:
         11:58:51:a0:be:c3:c0:d9:90:57:d4:2b:9d:92:53:fe:2e:7c:
         ec:37:34:af:34:82:14:9b:c1:cb:22:bc:ee:6d:ce:0a:f6:fc:
         08:40:9c:5a:5a:eb:8e:54:50:ff:85:23:5b:3d:7a:02:17:95:
         46:44:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org