Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32342d3330203d3e20323730303336.roa
File:                     3137392e36302e3232342e302f32342d3330203d3e20323730303336.roa (raw, json)
Hash identifier:          RLvs9K8hgU3TF6+j8dHnj55O0JocpKqhVvLeW9NQbuQ=
Subject key identifier:   4B:41:EA:FA:25:5C:D3:07:26:87:B5:94:C7:90:21:13:4E:41:C8:5B
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       33CB8CB6BEE306F8B0C30C95EFBD36BE55765B41
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32342d3330203d3e20323730303336.roa
Signing time:             Tue 05 Mar 2024 17:55:32 +0000
ROA not before:           Tue 05 Mar 2024 17:50:32 +0000
ROA not after:            Tue 04 Mar 2025 17:55:32 +0000
asID:                     270036
IP address blocks:        179.60.224.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cb:8c:b6:be:e3:06:f8:b0:c3:0c:95:ef:bd:36:be:55:76:5b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Mar  5 17:50:32 2024 GMT
            Not After : Mar  4 17:55:32 2025 GMT
        Subject: CN=4B41EAFA255CD3072687B594C79021134E41C85B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:1a:74:f0:76:90:31:58:ab:0b:9c:30:8d:
                    61:2c:81:0c:7a:8c:92:96:3a:dd:51:eb:4a:02:38:
                    92:98:93:d2:cb:96:bc:02:87:55:8d:b0:ab:7b:6b:
                    55:d9:4e:a7:3a:7b:32:84:c2:4b:c1:cf:2e:29:2f:
                    ee:e3:98:15:f9:89:5a:b8:67:f9:45:e5:d3:81:f2:
                    61:39:cc:f4:f8:bd:de:dc:7b:75:b9:5b:76:01:1d:
                    77:ee:df:94:d8:03:ac:8e:38:1a:37:2a:27:e7:04:
                    8e:bd:5b:f8:f8:43:be:9f:fe:ce:fd:c1:8e:e7:11:
                    60:54:14:e5:64:cb:ea:71:52:c3:b3:f8:95:07:ea:
                    d4:a2:33:15:f0:29:26:c2:32:44:e7:12:91:6c:3f:
                    55:f6:ae:13:ca:16:64:54:bd:03:65:6c:09:4a:b0:
                    28:be:d6:a8:8b:6e:8b:5c:46:47:05:38:2d:7d:af:
                    3a:3c:f4:61:df:16:41:cc:8c:d0:21:ac:b3:3f:e0:
                    90:bb:4d:7c:26:c7:78:c3:2b:6a:ff:2b:28:c9:4e:
                    31:d5:90:86:aa:ca:b0:0c:9d:3e:fe:a3:75:f4:49:
                    96:a9:59:ab:6c:0f:32:d3:af:50:48:9f:b8:d6:19:
                    9d:46:04:23:8a:00:36:16:8e:83:65:97:7c:9d:8e:
                    07:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:41:EA:FA:25:5C:D3:07:26:87:B5:94:C7:90:21:13:4E:41:C8:5B
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232342e302f32342d3330203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b7:eb:42:58:52:a8:d8:8f:ab:ce:ce:07:7e:a8:66:17:e2:
         5b:8d:95:d4:b0:e6:94:d3:51:16:c2:37:89:2b:0a:b1:e4:b9:
         c1:97:2f:80:e0:8c:bb:b3:af:bd:8a:40:ef:39:78:4b:f0:cb:
         93:f5:b6:10:95:61:b3:91:5f:61:9c:20:6f:09:b5:63:82:a9:
         c8:d7:ee:37:77:91:11:c3:44:aa:82:bd:98:83:85:71:8a:49:
         d7:db:d0:9b:53:b8:e9:aa:f0:ef:82:df:0a:f4:8c:c8:b1:4a:
         07:74:10:af:d0:c0:af:e0:7d:4d:e0:af:a3:36:1f:51:00:83:
         c0:9c:43:30:4a:09:bb:3c:11:ed:ce:95:b4:5a:c7:df:f5:7c:
         93:6d:19:1a:a4:2c:5e:09:74:0e:12:1e:ef:6c:07:da:4f:d5:
         fd:86:2a:7b:0f:82:84:83:0e:fd:4b:d3:7f:68:ea:54:31:23:
         4b:83:a3:4d:85:d6:e8:7f:37:b5:47:b4:0b:a5:6a:12:e5:60:
         79:da:88:bb:69:3b:55:29:55:78:64:66:5f:c5:ec:99:3a:da:
         96:60:f1:b8:f5:d0:26:9b:7f:e0:0f:84:dc:05:4f:dd:ce:f4:
         dc:eb:c2:1b:85:3a:1d:94:59:41:d2:96:86:d6:0a:ea:0d:9f:
         0e:19:d9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:03:49 2024 by rpki-client on console-ams.rpki-client.org