Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa
File:                     3137392e36332e3231362e302f32312d3234203d3e203532343638.roa (raw, json)
Hash identifier:          9Fa25FA+fARWR8asXZs7vmnyfBdxr4QGRPlmP20jatk=
Subject key identifier:   DB:6B:3F:52:25:F9:D7:DB:32:FE:D1:2E:47:F1:CE:AE:AE:D4:8E:4D
Certificate issuer:       /CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
Certificate serial:       3B0DB26D3B82AD0B8CE8C717FE8F1FCFB5F06ED8
Authority key identifier: 87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa
Signing time:             Wed 10 Jul 2024 17:40:00 +0000
ROA not before:           Wed 10 Jul 2024 17:35:00 +0000
ROA not after:            Wed 09 Jul 2025 17:40:00 +0000
asID:                     52468
IP address blocks:        179.63.216.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl
                          rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 22:22:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0d:b2:6d:3b:82:ad:0b:8c:e8:c7:17:fe:8f:1f:cf:b5:f0:6e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=871A5F48AD8A83C183DB3624AEA05825D749DDF7
        Validity
            Not Before: Jul 10 17:35:00 2024 GMT
            Not After : Jul  9 17:40:00 2025 GMT
        Subject: CN=DB6B3F5225F9D7DB32FED12E47F1CEAEAED48E4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:41:27:15:e1:31:4b:e6:86:a2:ec:ca:87:
                    30:d2:5b:bd:f0:75:8f:2d:37:5c:6f:37:90:9a:55:
                    37:37:4b:bd:5f:97:8b:f6:ba:4d:df:eb:a6:08:38:
                    e7:53:e2:c2:63:c0:54:bd:87:63:fe:0d:8a:c2:67:
                    ef:f7:5f:b6:88:a3:5e:1a:9e:e8:fe:e1:f3:08:37:
                    9f:f2:38:ba:18:00:74:73:4e:7e:f3:82:d3:27:2c:
                    a2:56:f8:8c:15:27:b7:2c:14:f0:83:3d:86:6b:58:
                    ac:8c:90:9f:67:4e:4d:ad:e0:b1:28:c8:02:1a:08:
                    38:08:29:0c:49:29:59:51:27:22:2c:09:84:2e:41:
                    21:b5:81:05:7e:f0:f8:69:a3:7b:aa:c9:40:b1:14:
                    ff:54:a7:87:b1:03:d8:ba:b9:99:a2:d7:ca:7a:be:
                    d5:5b:6e:d8:86:e9:f8:dc:93:9b:2f:2c:a0:31:8b:
                    ea:89:df:bd:5e:0d:cd:d9:f6:a9:68:9d:ed:24:16:
                    73:e4:72:f4:f1:c1:14:99:73:2e:63:6b:fd:4d:32:
                    4a:ed:24:f1:de:e8:06:26:6b:0c:2a:7e:ef:df:85:
                    59:2e:32:6e:06:3e:93:c0:ec:03:79:27:3b:f9:17:
                    42:e1:4b:23:cf:92:a7:b3:71:aa:48:29:b2:5f:85:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6B:3F:52:25:F9:D7:DB:32:FE:D1:2E:47:F1:CE:AE:AE:D4:8E:4D
            X509v3 Authority Key Identifier:
                keyid:87:1A:5F:48:AD:8A:83:C1:83:DB:36:24:AE:A0:58:25:D7:49:DD:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/871A5F48AD8A83C183DB3624AEA05825D749DDF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69902A30F10F8ADA321C31A3F647B13D510B7FC17870C5F2945606707C4BBE88/0/3137392e36332e3231362e302f32312d3234203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:5c:cf:e5:51:a7:42:62:ad:5d:2f:ce:13:2c:85:7a:26:
         fa:e8:ed:75:13:87:2c:b9:0a:93:67:8b:8b:48:f8:4b:9d:66:
         95:d7:df:11:6f:b0:f7:be:86:0f:33:f9:08:fe:10:de:c1:e3:
         dc:34:a9:9c:e9:7e:98:7c:00:00:6a:b4:46:d6:c3:12:e5:0b:
         68:10:49:ee:ba:cb:b1:c3:17:7e:3d:18:a6:fa:a0:a9:63:a8:
         ec:3d:de:d6:ef:f3:b5:6f:5b:f2:f8:d6:ec:fd:96:af:40:10:
         71:bd:cc:86:c8:c3:dd:ee:cb:d0:3e:75:e3:be:cd:38:be:77:
         cc:e2:97:95:43:a1:a4:94:43:2d:4a:e9:d2:ac:6a:35:73:ec:
         47:54:c5:32:9f:98:32:2a:24:ec:5e:21:2e:b0:e0:d2:ad:3f:
         f5:38:91:a2:1e:99:5b:ef:48:23:d2:4d:e0:ad:7c:76:e1:20:
         c0:d9:9c:60:f5:ae:ed:ab:e1:54:5c:f5:b1:5d:f8:de:5a:91:
         78:2c:36:77:cc:04:b8:6a:87:b6:17:54:a9:ec:81:6f:ff:64:
         11:b3:87:53:08:8e:2f:59:6d:52:5d:ec:04:f3:24:47:7f:3d:
         33:a0:3d:40:5b:e8:7d:e2:86:02:2a:93:ec:e4:f8:ee:57:4f:
         08:0a:bb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:53 2024 by rpki-client on console-fra.rpki-client.org