Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232392e302f32342d3234203d3e203532343933.roa
File:                     3137392e36302e3232392e302f32342d3234203d3e203532343933.roa (raw, json)
Hash identifier:          rHxjo+ROFJiltFRduKFibyfUwc3EPNIGYM+q28yyqps=
Subject key identifier:   79:6D:D6:A5:AB:31:A3:40:3D:EF:06:75:D4:B9:0C:6A:C8:20:87:8D
Certificate issuer:       /CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
Certificate serial:       4DFD6C40B4C12ABBF579192C1DF5B7432BF8288C
Authority key identifier: 6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232392e302f32342d3234203d3e203532343933.roa
Signing time:             Tue 05 Mar 2024 17:41:34 +0000
ROA not before:           Tue 05 Mar 2024 17:36:34 +0000
ROA not after:            Tue 04 Mar 2025 17:41:34 +0000
asID:                     52493
IP address blocks:        179.60.229.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl
                          rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:fd:6c:40:b4:c1:2a:bb:f5:79:19:2c:1d:f5:b7:43:2b:f8:28:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6CD081A4A402C107D88705AFD93558A5645EE0CA
        Validity
            Not Before: Mar  5 17:36:34 2024 GMT
            Not After : Mar  4 17:41:34 2025 GMT
        Subject: CN=796DD6A5AB31A3403DEF0675D4B90C6AC820878D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:22:b8:97:37:ca:df:b6:35:e9:84:95:cb:
                    3b:a1:70:0e:69:04:eb:b1:ff:4c:10:8d:ca:70:e3:
                    99:1e:d5:12:18:57:25:67:58:61:4a:81:b9:ac:75:
                    9d:57:61:fc:db:a4:95:64:fe:68:20:1e:08:7a:fd:
                    ac:97:04:b9:2a:fd:39:b3:1b:87:01:5b:55:3b:01:
                    41:f9:d5:f6:9e:10:2e:33:be:5d:c7:ef:14:3d:8c:
                    f5:dc:4e:ec:19:7d:19:40:c3:32:57:97:ec:20:b7:
                    66:a0:27:91:f0:16:96:16:02:d4:9b:02:90:e9:d9:
                    0a:72:07:e2:ce:ed:76:13:f9:9f:fb:1d:66:81:32:
                    30:4c:e2:c4:16:50:b3:d8:80:af:06:f4:c7:04:e9:
                    12:46:43:f3:a3:b4:83:d9:8e:05:4f:a5:a0:43:71:
                    5b:d5:d1:8e:bf:af:a5:34:b8:5f:32:4d:03:96:22:
                    e5:4c:e8:3f:24:77:a9:f1:a6:e1:dc:f4:c1:ee:62:
                    66:df:b8:d1:cc:0f:41:ac:3b:b7:e0:dd:96:c1:0a:
                    b8:5e:c7:3f:f8:ac:e5:17:26:b3:ac:37:93:68:cd:
                    8f:3e:5d:1d:3d:0e:23:fb:da:a6:10:78:e8:82:4a:
                    e0:67:5e:9d:d7:33:be:f8:54:ee:e4:ce:83:44:3f:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:6D:D6:A5:AB:31:A3:40:3D:EF:06:75:D4:B9:0C:6A:C8:20:87:8D
            X509v3 Authority Key Identifier:
                keyid:6C:D0:81:A4:A4:02:C1:07:D8:87:05:AF:D9:35:58:A5:64:5E:E0:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6CD081A4A402C107D88705AFD93558A5645EE0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5319F2CE31BB1E2A4FF4C757B191FA1D10CE2398239774ECA610A95375C8FE77/0/3137392e36302e3232392e302f32342d3234203d3e203532343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a2:05:8b:a8:07:13:cd:16:20:0e:04:99:a4:15:26:49:3e:
         08:29:2e:7b:97:f0:03:10:fc:36:7e:e6:92:5e:51:55:ea:fa:
         d5:d6:a2:10:1d:72:85:a4:4a:d5:5a:5a:f2:6b:4d:ca:0e:f0:
         80:6e:31:cf:3d:5f:e6:bc:8b:52:7e:d4:80:e3:ef:91:bf:cd:
         aa:d6:c0:d3:30:74:88:77:6a:f0:15:34:7d:07:07:88:29:ad:
         47:1e:14:1b:2f:b5:76:7f:12:0f:89:d1:a3:47:00:35:44:9c:
         d8:e8:66:98:60:cc:ff:4b:93:0b:06:38:ac:6a:52:d4:f0:7a:
         d9:8e:4c:33:fc:92:c4:68:e2:82:6b:22:61:12:90:76:d5:1f:
         8e:05:02:3a:41:dc:83:c3:7b:29:e0:53:1c:6c:61:8a:bc:ba:
         0d:26:0e:99:a6:00:5e:a0:12:d1:e8:95:11:f5:3a:e9:2b:64:
         cd:8b:0c:8a:7c:97:35:ac:84:34:dc:45:58:39:90:03:df:83:
         a6:ac:61:ce:6c:db:4c:91:92:8f:6c:8f:16:03:32:79:ec:76:
         69:9d:a1:46:34:06:d4:71:5c:51:3d:d6:68:77:18:3f:0a:25:
         96:d3:2a:2e:da:52:a1:5f:82:3a:93:21:fd:ed:b5:45:cc:24:
         f5:bc:c0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:41 2024 by rpki-client on console-fra.rpki-client.org