Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232372e302f32342d3330203d3e20323730303336.roa
File:                     3137392e36302e3232372e302f32342d3330203d3e20323730303336.roa (raw, json)
Hash identifier:          xioBYtJfCMj9Kh9fYJd7+J8MVl9AOdyPfX173QWb9l8=
Subject key identifier:   AA:F4:64:3A:03:87:8A:99:91:81:BA:0B:38:F3:C0:18:40:0D:C5:B0
Certificate issuer:       /CN=D69B312653CC24109B409F98E62409733808DFE6
Certificate serial:       35FBA13674B929C266FE3E23C12F9530FAE29EB5
Authority key identifier: D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232372e302f32342d3330203d3e20323730303336.roa
Signing time:             Tue 05 Mar 2024 17:55:32 +0000
ROA not before:           Tue 05 Mar 2024 17:50:32 +0000
ROA not after:            Tue 04 Mar 2025 17:55:32 +0000
asID:                     270036
IP address blocks:        179.60.227.0/24 maxlen: 30

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 09 May 2024 20:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:fb:a1:36:74:b9:29:c2:66:fe:3e:23:c1:2f:95:30:fa:e2:9e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D69B312653CC24109B409F98E62409733808DFE6
        Validity
            Not Before: Mar  5 17:50:32 2024 GMT
            Not After : Mar  4 17:55:32 2025 GMT
        Subject: CN=AAF4643A03878A999181BA0B38F3C018400DC5B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4d:01:6d:ba:82:24:b9:ea:be:d3:d8:1d:b0:
                    d6:b9:d6:af:e6:9c:2b:6f:4c:f8:b7:74:5e:75:69:
                    ad:73:aa:77:72:58:2b:f3:22:74:1e:83:ae:9a:7d:
                    52:b1:82:01:21:c2:1a:9e:f8:12:b2:aa:98:3b:1a:
                    e6:89:d6:cb:fe:7b:59:68:24:75:08:0a:fc:91:e6:
                    d3:61:92:c2:42:b9:78:02:0c:81:ba:b9:1a:8e:49:
                    f7:97:f4:a2:d5:42:bf:0d:d2:ab:ac:26:f0:2a:c0:
                    01:b6:b1:49:19:ee:72:f2:3e:3b:82:84:ed:f9:fc:
                    f8:43:5e:15:7f:47:f1:99:6d:82:1d:7f:d5:b1:f6:
                    a4:74:c4:2d:5f:7e:d2:95:37:c9:ca:72:e9:72:71:
                    f3:56:e1:24:e4:55:63:a0:02:03:92:74:b7:b1:85:
                    51:78:c9:17:7d:f1:a9:28:8f:21:3c:67:09:c1:3f:
                    07:97:9e:61:32:f0:be:1b:dc:07:7d:9c:0d:a7:2e:
                    05:76:0c:ed:7e:2e:3f:cd:84:33:a6:b4:f2:3b:bf:
                    47:25:6b:9d:5c:2a:d2:ce:42:4b:dc:01:be:03:ce:
                    f9:9f:22:ea:ae:c7:29:e1:2f:06:8b:5c:2c:46:56:
                    86:43:e9:bd:40:34:47:9b:26:64:ed:72:ed:1a:94:
                    5d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F4:64:3A:03:87:8A:99:91:81:BA:0B:38:F3:C0:18:40:0D:C5:B0
            X509v3 Authority Key Identifier:
                keyid:D6:9B:31:26:53:CC:24:10:9B:40:9F:98:E6:24:09:73:38:08:DF:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/D69B312653CC24109B409F98E62409733808DFE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D69B312653CC24109B409F98E62409733808DFE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62A763941D0E2E2C2C01FA814C11D8638B196E7696943CC5A4D8425864BE67CC/0/3137392e36302e3232372e302f32342d3330203d3e20323730303336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:d4:3e:15:2f:6a:b6:39:18:ef:50:14:89:9d:0e:1e:99:54:
         92:b1:71:20:2d:a2:f7:94:0a:68:ac:b9:7e:c9:f9:82:09:15:
         31:74:a7:cf:57:d4:da:ca:b7:90:ac:74:7d:24:ec:80:f1:7f:
         f0:7d:91:8e:d7:a0:23:7e:95:0e:ba:f7:48:95:34:48:f3:a1:
         bd:67:12:be:1d:1d:1c:64:eb:91:8c:14:5d:66:c2:72:62:c5:
         70:32:73:83:f2:c9:63:e7:c0:70:10:50:76:88:24:16:b5:b5:
         7b:80:5c:f9:46:21:8d:3c:e4:ae:39:c6:37:9b:4f:d4:6c:4b:
         a4:12:7f:31:14:57:a1:4b:9b:2e:7f:a0:ce:ac:f2:d5:93:38:
         40:a5:e6:b5:1f:8e:2b:ab:22:90:e9:c1:29:45:58:fd:8b:09:
         15:72:47:43:6c:bd:2c:32:63:7b:98:34:61:5d:cf:51:6e:89:
         92:34:44:12:aa:2b:9d:d5:1a:54:84:d5:22:92:c1:b9:f5:77:
         ff:f2:b1:f8:f5:39:46:00:bd:a9:20:52:cb:cd:17:e6:35:98:
         16:f0:22:c9:7e:1c:5e:c1:b4:3c:e9:1b:6c:78:68:81:48:ce:
         c4:be:ff:e7:65:25:17:ac:6a:5e:8b:d9:8b:e1:fd:ed:6a:84:
         19:4d:1b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:03:49 2024 by rpki-client on console-ams.rpki-client.org