Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232352e302f32342d3330203d3e20323730303336.roa
File:                     3137392e36302e3232352e302f32342d3330203d3e20323730303336.roa (raw, json)
Hash identifier:          XyfWRKGOCMxMPahTDl9WYmXRHV4SkfcnjEmIUj3y1DA=
Subject key identifier:   FB:D1:79:E7:E5:DA:0E:0C:CA:75:0B:94:66:94:85:71:BD:13:23:67
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       374A5B63CB6626829C6D3C973296818CC8033FC0
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232352e302f32342d3330203d3e20323730303336.roa
Signing time:             Tue 05 Mar 2024 17:55:33 +0000
ROA not before:           Tue 05 Mar 2024 17:50:33 +0000
ROA not after:            Tue 04 Mar 2025 17:55:33 +0000
asID:                     270036
IP address blocks:        179.60.225.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:4a:5b:63:cb:66:26:82:9c:6d:3c:97:32:96:81:8c:c8:03:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Mar  5 17:50:33 2024 GMT
            Not After : Mar  4 17:55:33 2025 GMT
        Subject: CN=FBD179E7E5DA0E0CCA750B9466948571BD132367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:fc:6a:4b:55:fa:89:26:70:b0:08:01:ad:
                    62:0e:8c:bd:46:c0:da:ce:fc:92:e3:9c:d5:28:3d:
                    7b:00:39:54:e9:1e:63:df:85:0f:f2:6e:55:90:96:
                    28:d2:47:5a:7d:9b:13:8d:d0:d5:86:35:4e:73:f5:
                    68:53:94:39:88:68:b5:ca:d6:cc:4f:c6:12:50:82:
                    11:e1:f1:d2:d5:d1:d5:c4:74:d1:c7:f4:26:25:f2:
                    c8:a2:c4:52:9a:59:f4:32:15:2c:5a:8a:88:cf:82:
                    d5:4e:98:9f:f0:ea:fc:cd:48:4f:08:1b:55:86:ba:
                    7a:5e:cf:ef:be:a5:8d:68:03:d7:1b:41:d5:88:96:
                    4f:e2:c5:6f:d7:0c:b1:15:ba:b5:ef:8c:d9:03:f6:
                    46:6d:e4:fe:8b:da:92:9c:7d:44:e5:d4:d4:8b:98:
                    a1:7e:90:29:0a:43:72:a7:6d:15:10:06:3a:dd:f0:
                    6c:33:36:eb:f8:bf:73:be:e2:7d:2c:8f:b7:70:b7:
                    e5:13:9c:fd:92:a5:24:f2:94:f2:25:ea:b7:8a:48:
                    e0:e0:c8:ee:cd:37:54:49:27:ca:1a:6a:8a:18:47:
                    c5:4b:c6:db:8b:7b:37:66:9a:cf:d2:25:a7:93:09:
                    29:41:90:d0:d8:6c:9e:01:6e:d6:7e:69:db:6e:1c:
                    ec:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D1:79:E7:E5:DA:0E:0C:CA:75:0B:94:66:94:85:71:BD:13:23:67
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232352e302f32342d3330203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:1f:d9:c8:34:f0:2d:cd:e8:a1:23:b5:bd:e6:86:86:36:
         7e:55:82:b0:4d:f3:6b:8d:52:bd:da:c5:cf:7c:07:82:76:fe:
         a0:e1:13:ac:00:6f:40:bd:7e:ab:f7:80:d4:e3:48:1a:16:03:
         06:ca:12:01:c2:23:57:0d:9a:88:67:9b:e9:4c:27:6a:4a:dd:
         6b:40:8b:80:6b:54:93:1f:87:0b:e8:01:c4:b6:76:52:3a:5d:
         54:cb:4b:6c:0d:8f:58:1f:8d:02:8a:47:fc:c7:d6:25:ed:8c:
         ca:24:dc:dc:90:e3:81:b7:0e:ed:3e:ce:78:14:5f:c5:a8:6e:
         51:17:e9:e7:69:93:6a:b9:42:b0:b6:95:8f:74:d1:da:19:02:
         42:9e:73:11:af:27:89:f3:71:fd:c3:32:68:58:17:70:0c:a6:
         23:1e:ec:42:34:17:d7:68:20:19:f7:d0:09:00:f3:60:52:c5:
         e1:bc:5d:ea:ea:11:8b:27:27:36:b1:e9:6a:36:8f:b4:9c:a2:
         5b:4a:8f:c8:a7:fd:77:31:14:ec:23:59:1b:65:c9:13:b9:8a:
         e5:13:dc:5e:1a:7f:fb:0a:03:55:89:af:dd:08:5d:06:6b:ef:
         87:5b:45:48:04:32:3a:bb:c8:29:f7:60:d1:02:f8:d4:59:fd:
         89:1f:99:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:06:31 2024 by rpki-client on console-fra.rpki-client.org