Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3330203d3e20323730303336.roa
File:                     3137392e36302e3232342e302f32322d3330203d3e20323730303336.roa (raw, json)
Hash identifier:          fuuWWqeUJg2AeLw21QgL4kh6adxZ4TnlVVXeXxdlmrk=
Subject key identifier:   8D:B4:0C:12:CB:D7:FB:1B:20:67:B7:75:C2:31:24:EC:99:7C:DC:70
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       1428F505F40C232FEBF4DC877A64F0E496DDB4B9
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3330203d3e20323730303336.roa
Signing time:             Thu 14 Nov 2024 06:40:00 +0000
ROA not before:           Thu 14 Nov 2024 06:35:00 +0000
ROA not after:            Thu 13 Nov 2025 06:40:00 +0000
asID:                     270036
IP address blocks:        179.60.224.0/22 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:f5:05:f4:0c:23:2f:eb:f4:dc:87:7a:64:f0:e4:96:dd:b4:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Nov 14 06:35:00 2024 GMT
            Not After : Nov 13 06:40:00 2025 GMT
        Subject: CN=8DB40C12CBD7FB1B2067B775C23124EC997CDC70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:36:b3:d8:ef:0c:09:cb:59:36:b3:6e:45:
                    94:f9:04:58:f5:d5:68:dc:f0:ae:9c:4c:1e:02:08:
                    ea:1e:b8:c1:61:d5:f7:8a:98:bf:cb:70:f6:98:2a:
                    f3:29:e5:2e:ce:82:d9:a7:a7:58:51:00:67:8f:7d:
                    31:8f:38:e4:55:01:1c:ea:6c:8c:7d:1f:3d:d0:8a:
                    d6:2c:02:20:af:a6:4b:a4:fe:bc:df:00:2c:3e:d6:
                    79:36:19:f6:79:52:4c:78:b2:3e:03:30:85:e6:42:
                    bf:85:d6:43:42:ee:fa:44:a1:d5:95:ec:e0:a1:6e:
                    c6:66:17:60:1f:37:f3:ec:37:6b:05:0a:38:d5:60:
                    e7:36:b6:ca:d3:f6:ba:90:0a:27:3d:ea:96:08:4d:
                    80:94:9f:b0:4b:65:5d:96:c4:f7:0c:b6:38:e2:45:
                    2e:16:3e:90:cc:aa:a1:f6:de:2a:d1:f4:39:3b:d2:
                    ac:83:f2:a3:f4:43:c0:c7:a5:f2:39:7f:d8:3c:4e:
                    eb:b9:d6:c6:f8:fc:8b:95:a4:4c:3c:8c:12:5a:23:
                    ea:f2:e7:a4:04:f7:71:23:60:c5:26:ba:6e:da:2e:
                    ec:9e:43:67:61:f4:05:89:70:b1:c1:80:c1:af:23:
                    b2:f7:bb:d0:90:a0:7c:68:fc:70:e4:60:f8:43:ae:
                    35:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B4:0C:12:CB:D7:FB:1B:20:67:B7:75:C2:31:24:EC:99:7C:DC:70
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32322d3330203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:f6:17:18:f8:7d:e8:54:cb:17:99:c4:c9:a1:7f:57:ae:68:
         0b:2b:d8:a4:77:d6:f3:34:bb:37:c5:2b:ad:83:18:db:32:47:
         95:13:8a:74:ae:ab:01:7d:68:63:a5:31:0e:9b:2c:b0:43:1f:
         3a:43:35:9d:af:28:fb:77:32:46:34:59:3a:74:ef:2e:09:8d:
         61:0c:cb:0e:a4:bf:53:08:35:3f:9a:a9:ef:bc:a1:60:f8:25:
         53:7b:3e:99:e2:b4:b9:15:e7:ce:ba:c4:c8:35:7f:e2:00:b5:
         2c:56:5b:e2:91:b1:79:45:ff:32:17:98:28:57:c0:76:60:54:
         0a:ac:7e:27:cb:12:a7:8e:12:0f:e4:25:37:67:a9:a9:84:24:
         b6:21:48:7f:e8:c3:43:0f:f8:f6:e3:cc:dd:fe:70:07:16:23:
         25:e9:27:ef:b6:ad:be:84:81:d4:62:d4:b5:7a:50:9c:34:e4:
         90:20:f1:09:e7:97:9a:dd:d9:5b:30:f9:9d:10:eb:2b:8c:fe:
         f0:6f:a8:d3:88:26:74:d9:f3:ee:93:aa:c3:5c:8b:ad:e9:a3:
         35:fe:73:33:be:8c:ca:f7:93:c3:17:17:8b:dc:9d:77:67:85:
         5e:28:8d:6f:3c:31:f1:2f:ce:4d:3e:ff:c1:16:c3:b2:e1:f5:
         8b:32:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:50 2024 by rpki-client on console-ams.rpki-client.org