Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137392e36332e3234342e302f32322d3234203d3e203532343339.roa
File:                     3137392e36332e3234342e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier:          D7CvJTbWPR1D7Megftj70Rzheg9JAB2JXmL7LdTMlSc=
Subject key identifier:   98:C8:8D:04:38:28:92:2A:A0:40:D0:14:16:6D:D5:4C:19:3D:14:4B
Certificate issuer:       /CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
Certificate serial:       467532138B3239BB989FEF7C4331B0B050AEF731
Authority key identifier: 82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137392e36332e3234342e302f32322d3234203d3e203532343339.roa
Signing time:             Tue 05 Mar 2024 17:53:02 +0000
ROA not before:           Tue 05 Mar 2024 17:48:02 +0000
ROA not after:            Tue 04 Mar 2025 17:53:02 +0000
asID:                     52439
IP address blocks:        179.63.244.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl
                          rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:75:32:13:8b:32:39:bb:98:9f:ef:7c:43:31:b0:b0:50:ae:f7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC
        Validity
            Not Before: Mar  5 17:48:02 2024 GMT
            Not After : Mar  4 17:53:02 2025 GMT
        Subject: CN=98C88D043828922AA040D014166DD54C193D144B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:50:52:f3:91:52:d7:b6:61:21:20:7f:be:1f:
                    98:ba:af:f8:2b:fc:82:f4:fc:b6:c5:05:6a:63:48:
                    03:27:97:96:3e:18:6a:a3:ce:2d:86:28:1f:79:b3:
                    94:32:27:58:d2:fe:53:e2:5a:4b:ec:b9:b6:9a:a1:
                    c8:89:13:59:56:f1:94:d5:6e:19:8c:33:0f:4a:32:
                    46:fe:91:84:f4:02:26:6b:39:6c:2c:7d:df:f9:c4:
                    5b:bb:77:7b:e9:93:5a:b9:10:1c:43:ad:f1:f9:3c:
                    b6:c0:e9:b5:36:b9:6e:00:15:44:6d:df:a9:dd:1e:
                    e6:35:af:94:10:1f:2b:5c:d3:b1:0f:df:92:80:f8:
                    bc:30:ba:93:97:f3:5a:33:e8:f4:f8:00:7d:28:71:
                    df:6b:11:5d:4f:56:f5:a8:7b:9b:a7:54:70:de:9a:
                    c8:d5:58:a2:2a:20:35:2d:4e:9f:76:6b:1a:c7:78:
                    39:f1:5a:24:b8:a1:d2:e0:ee:27:b1:cb:88:94:5b:
                    38:dc:89:6b:4d:e0:5d:52:bd:53:32:66:ee:ad:63:
                    0f:7c:2b:e9:f0:98:52:b0:8d:f2:cc:1a:42:73:1a:
                    e1:62:97:7a:fc:2b:9f:e5:95:9a:39:99:4f:3c:7f:
                    dd:63:3b:fb:0e:2a:23:95:c0:21:b0:a0:54:ae:be:
                    ce:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C8:8D:04:38:28:92:2A:A0:40:D0:14:16:6D:D5:4C:19:3D:14:4B
            X509v3 Authority Key Identifier:
                keyid:82:FF:F8:E2:D3:9A:B0:05:BE:2A:B8:1D:A0:7E:C2:B4:F6:17:5E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/82FFF8E2D39AB005BE2AB81DA07EC2B4F6175EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62EAEE3EA5EC13380AE91930F5944CF07BD3623F983EE310196C568990AEF86E/0/3137392e36332e3234342e302f32322d3234203d3e203532343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:fd:7a:b2:59:f5:68:d8:83:c0:8a:96:7e:4f:5c:ec:9c:0f:
         9b:b8:0e:ba:e9:ba:f8:9d:60:ea:0a:b2:5e:f5:6b:cc:0f:de:
         40:dd:6b:d0:49:8c:94:ff:0e:5a:a8:dd:2f:f6:19:ca:2b:b0:
         df:ed:d5:b2:33:76:81:6e:6c:58:54:48:da:ad:bb:0b:df:69:
         03:79:3f:5e:59:7c:b9:0e:35:bf:04:f2:dc:ff:be:29:ea:c4:
         e6:e1:e6:b8:07:50:69:7a:de:2f:60:28:55:ba:43:5f:04:ce:
         fc:15:dd:cd:10:2a:50:c5:51:90:f0:8e:55:3a:ff:46:cd:9c:
         3d:5d:f7:49:7a:8e:96:a5:82:f4:61:f8:72:0e:d6:2d:2f:8d:
         8f:20:19:12:49:04:1b:a2:16:8d:f8:15:09:99:80:aa:85:2d:
         cb:b4:ef:bd:a5:3f:d1:ee:0c:37:57:6d:f2:5b:e0:d3:a4:f1:
         ea:f3:46:23:ac:33:9c:b9:e0:af:aa:ce:78:54:6c:0d:7f:eb:
         84:78:7e:4b:0b:6c:97:3f:b2:1f:73:e3:74:05:c4:65:e4:e3:
         40:93:13:d7:ad:4d:4c:e2:cc:c9:03:bd:53:6a:fb:53:d5:f9:
         50:97:de:36:20:af:fb:42:cb:08:c5:96:43:ac:25:57:eb:2d:
         2e:7a:71:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:59 2024 by rpki-client on console-ams.rpki-client.org